#1Digital forensics, evidence collection, timeline analysis, and incident investigation tools.
Kitploit recommended
domcyrus/rustnetPer-process network monitoring for your terminal with deep packet inspection. Cross-platform, sandboxed.
prowler-cloud/prowlerProwler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.…
wagga40/zircoliteA standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
bst04/cybersourcesA curated list of cybersecurity tools and resources.
circl/ail-frameworkAIL framework - Analysis Information Leak framework. Project moved to https://github.com/ail-project
aipentest/cyberstrikeaiThe system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation…
nextronsystems/iocsIndicators of compromise from to analysis and research by Nextron Threat Research team
kunai-project/kunaieBPF-based Linux security monitor and threat hunter providing chronologically ordered, container-aware events with on-host correlation for incident…
secdev/scapyPython-based interactive packet manipulation library for forging, decoding, sending, capturing, and analyzing network packets across a wide range of…
katrielmoses/mailaccessFree email OSINT tool, 2500+ platforms, identity clustering, breach detection. No API keys required. pip install mailaccess
onekey-sec/unblobExtract files from any kind of container formats
ryandfir/hindsightBrowser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox
ssrajadh/sentrysearchSemantic search over videos using Gemini Embedding 2 or Qwen3-VL.
the-tcpdump-group/tcpdumpthe TCPdump network dissector
gamelinux/passivednsA network sniffer that logs all DNS server replies for use in a passive DNS setup
stanfrbd/cyberbroA simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.
dcarrero/mboxshellmboxShell. Fast terminal viewer for MBOX files of any size. Open, search and export emails from Gmail Takeout backups (50GB+) without loading them…
yogsec/hacking-toolsA curated list of penetration testing and ethical hacking tools, organized by category. This compilation includes tools from Kali Linux and other…
