#1Digital forensics, evidence collection, timeline analysis, and incident investigation tools.
Kitploit recommended
apsdehal/awesome-ctfA curated list of CTF frameworks, libraries, resources and softwares
zeek/zeekZeek is a powerful network analysis framework that is much different from the typical IDS you may know.
horsicq/detect-it-easyProgram for determining types of files for Windows, Linux and MacOS.
wireshark/wiresharkCapture and analyze network traffic with deep packet inspection, protocol decoding across hundreds of protocols, and capture-file support for…
sjzar/chatlogchat log tool, easily use your own chat data. 聊天记录工具，轻松使用自己的聊天数据
mandiant/flare-vmA collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on…
kubeshark/kubesharkeBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via…
blackarch/blackarchAn ArchLinux based distribution for penetration testers and security researchers.
arkime/arkimeArkime is an open source, large scale, full packet capturing, indexing, and database system.
aipentest/cyberstrikeaiThe system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation…
kevoreilly/capev2Malware Configuration And Payload Extraction
google/grrRemote live forensics and incident response framework with Python agent for collecting forensic data from endpoints, including memory, disk, and…
frankwxu/digital-forensics-labFree hands-on digital forensics labs for students and faculty
alessandroz/lazagneCross-platform credential recovery tool that extracts stored passwords from browsers, email clients, databases, system mechanisms, and network…
w00t3k/awesome-cellular-hackingAwesome-Cellular-Hacking
efforg/rayhunterRust tool to detect cell site simulators on an orbic mobile hotspot
volatilityfoundation/volatility3Advanced framework for extracting digital artifacts from volatile memory (RAM) samples, enabling deep forensic analysis of system runtime state…
bee-san/pywhat🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it…
