#1Tools for acquiring, preserving, and analyzing digital evidence for legal or investigative purposes.
Kitploit recommended
google/timesketchCollaborative forensic timeline analysis platform for ingesting, searching, and annotating event logs to support incident response and DFIR…
rawfilejson/awesome-osint-arsenalOSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.
the-tcpdump-group/tcpdumpthe TCPdump network dissector
guidobartoli/sherloqAn open-source digital image forensic toolset
wiltodelta/remove-ai-watermarksRemove visible and invisible AI watermarks and provenance metadata from images and video. Python library and CLI for SynthID, C2PA, EXIF, IPTC, XMP,…
google/grrRemote live forensics and incident response framework with Python agent for collecting forensic data from endpoints, including memory, disk, and…
hephaest0s/usbkill« usbkill » is an anti-forensic kill-switch that waits for a change on your USB ports and then immediately shuts down your computer.
neo23x0/signature-baseYARA signature and IOC database for my scanners and tools
seladb/pcapplusplusMultiplatform C++ library for high-performance network packet capture, parsing, crafting, and analysis. Supports libpcap, DPDK, AF_XDP, PF_RING, and…
sepinf-inc/ipedIPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by…
cyb3rmx/qu1cksc0peAll-in-One malware analysis tool.
stephenfewer/reflectivedllinjectionReflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a…
alonemonkey/frida-ios-dumpExtracts decrypted IPA files from jailbroken iOS devices using Frida for reverse engineering, security analysis, and mobile app pentesting.
zer0yu/awesome-cobaltstrikeList of Awesome CobaltStrike Resources
ssrajadh/sentrysearchSemantic search over videos using Gemini Embedding 2 or Qwen3-VL.
gcla/termsharkA terminal UI for tshark, inspired by Wireshark
google/gopacketProvides packet processing capabilities for Go
