
whapa
Graphical forensic toolkit for parsing, decrypting, and extracting WhatsApp data from Android and iOS devices, including Google Drive and iCloud…

Graphical forensic toolkit for parsing, decrypting, and extracting WhatsApp data from Android and iOS devices, including Google Drive and iCloud…

androidqf (Android Quick Forensics) helps quickly gathering forensic evidence from Android devices, in order to identify potential traces of…

From UART to Root: Breaking Into the Xiaomi C200 via U-Boot

An OSINT investigation case mapping tool for organizing entities, relationships, evidence, and intelligence.

Extract files from any kind of container formats

Offset Independent Credential Extraction Tool

Extracts and decrypts the 4-digit restriction passcode from iPhone backups on Windows machines, enabling recovery of device access controls.

Tools and Techniques for Blue Team / Incident Response

Recovers lost partitions and repairs boot sectors; carves 480+ file formats from damaged disks and filesystems for data recovery and forensic use.

Steganographic storage & File encryption tool


File carving and indexing tool for digital forensics, recovering files from disk images based on header/footer pattern matching, regular expressions,…

A Mac OS X forensic utility which manages file system mounting in support of forensic procedures.

Cryptanalysis of a proprietary 1999 video DRM system. Recovers 61 encrypted wrestling videos from the WCW Internet Powerdisk CD-ROM through static…

Digital forensics engine that parses logs, files, and system artifacts to build super timelines, enabling chronological event correlation for…

mboxShell. Fast terminal viewer for MBOX files of any size. Open, search and export emails from Gmail Takeout backups (50GB+) without loading them…


Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from…