
BareMetal-RAM-Dumper
A bare-metal x86 utility to dump physical RAM directly to disk. Built and tested for Cold Boot Attack experiments on frozen memory.

A bare-metal x86 utility to dump physical RAM directly to disk. Built and tested for Cold Boot Attack experiments on frozen memory.

From UART to Root: Breaking Into the Xiaomi C200 via U-Boot

Custom BTRFS repair tools for severe extent tree corruption where btrfs check --repair fails (segfault, loop, or deadlock)

Find and redact secrets in AI coding agent histories (Claude Code, and more).

Extracts and decrypts the 4-digit restriction passcode from iPhone backups on Windows machines, enabling recovery of device access controls.

A lightweight CLI tool to detect and reconstruct cropped images vulnerable to Acropalypse (CVE-2023-21036 and CVE-2023-28303) written in Python.

WhatsApp Forensic Tool

A Mac OS X forensic utility which manages file system mounting in support of forensic procedures.

Utility for recovering ES File Explorer encrypted files (.eslock)

analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple formats.

F*ck file system - cli file search tool that bypasses OS kernel and reads your disc directlry

Analyze and help extract older "hidden" versions of a pdf from the current pdf.

This toolkit aims to help forensicators perform different kinds of acquisitions on iOS devices

Panic button for protection against cold boot attacks

High-performance, streaming-first container format with per-block codec polymorphism and robust data recoverability. Reference implementation in Rust.

Portable zipfile extraction utility with broad OS support, decryption, and security fixes for path traversal and symlink vulnerabilities.

Graphical forensic toolkit for parsing, decrypting, and extracting WhatsApp data from Android and iOS devices, including Google Drive and iCloud…

ParanoiDF - PDF Analysis Suite based on PeePDF by Jose Miguel Esparza (http://peepdf.eternal-todo.com/). Tools added: Password cracking, redaction…