
iCloudKitExtractor
Experimental .NET/WPF forensic toolkit for iCloud auth, CloudKit/MMCS backup download, and Octagon/PCS recovery (ADP, Recovery Key, Lockdown Mode).…

Experimental .NET/WPF forensic toolkit for iCloud auth, CloudKit/MMCS backup download, and Octagon/PCS recovery (ADP, Recovery Key, Lockdown Mode).…

Universal Windows extraction tool that detects unknown files and routes them to the right bundled extractor.

Extract files from any kind of container formats

Tool and framework for securely reading untrusted USB mass storage devices.


mboxShell. Fast terminal viewer for MBOX files of any size. Open, search and export emails from Gmail Takeout backups (50GB+) without loading them…


Digital forensics engine that parses logs, files, and system artifacts to build super timelines, enabling chronological event correlation for…

Remove visible and invisible AI watermarks from images and video, and AI provenance metadata from images, video, and audio. Python library, CLI, and…

Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from…

Tool to securely and efficiently wipe devices and partiitions for Linux

Find your device and control it remotely. Works over SMS, instant messengers, or FMD Server's web interface. A secure open source alternative to…

Seemingly normal USB drive with a hidden security feature

C library and command-line toolkit for forensic EWF image handling: acquire, export, verify, recover, and mount evidence files in EnCase and SMART…

Library to access the Windows Shell Item format

Find and redact secrets in AI coding agent histories (Claude Code, and more).

Manage WhatsApp .crypt12, .crypt14 and .crypt15 files.

Forensic library and CLI toolkit for analyzing disk and file system images, recovering deleted data, generating timelines, and validating evidence…