#1Digital forensics, evidence collection, timeline analysis, and incident investigation tools.
Kitploit recommended
thirdbyte/ssjYour everyday Linux distribution gone Super Saiyan.
malwaretech/hiddendesktopCreate and enumerate hidden desktops.
emrekybs/mrhandlerSSH-based Linux incident response tool that executes diagnostic commands to collect network configs, logs, user accounts, and processes, then…
ctrlaltint3l/intelligenceCentralized repository for malware samples, threat intelligence, IOCs, and security tooling logs to support threat research and incident response…
stealth/pscE2E encryption for multi-hop tty sessions or portshells + TCP/UDP port forward
mlcsec/proctoolsSmall toolkit for extracting information and dumping sensitive strings from Windows processes
sh1n0g1/z9Detects PowerShell-based malware artifacts from event logs and performs static analysis on PowerShell scripts to identify malicious activity.
google/hashrBuilds forensic file hash sets from disk images, packages, and archives across GCP, AWS, and local sources, with deduplication and PostgreSQL/Spanner…
lcbower33/stegoscanAutomated steganography detection tool that scans websites, web servers, and local directories using AI-driven object/text recognition and deep file…
jstrosch/subparseModular malware analysis artifact collection and correlation framework
mnrkbys/norimaciLightweight macOS malware analysis sandbox that monitors system activity via OpenBSM or Monitor.app, generating detailed reports and timelines of…
rhematt/snap-scraperExtracts and downloads Snap Map media by coordinates for OSINT, forensic analysis, and research. Supports metadata logging and bulk download.
thomasareed/pictModular incident response toolkit for collecting forensic data from potentially infected macOS endpoints, capturing browser artifacts, persistence…
mtjailed/unjailmeA sandbox escape based on the proof-of-concept (CVE-2018-4087) by Rani Idan (Zimperium)
malpedia/malpedia-flossedFLARE floss applied to all unpacked+dumped samples in Malpedia, pre-processed for further use.
andyjsmith/registry-spyCross-platform registry browser for raw Windows registry files
bmaia/binwallyBinary and Directory tree comparison tool using Fuzzy Hashing
