
RdpCacheStitcher
RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.

RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.

Ransomware decryption and script deobfuscation utilities from a threat intelligence team, designed for incident responders and malware analysts.

Python tool that parses the NTFS $MFT to copy locked files during incident response, bypassing OS locks by reading raw disk locations. Supports…

Use to copy a file from an NTFS partitioned volume by reading the raw volume and parsing the NTFS structures.

SentinelNav: zero-dependency, pure Python binary visualization and forensics tool.

ParanoiDF - PDF Analysis Suite based on PeePDF by Jose Miguel Esparza (http://peepdf.eternal-todo.com/). Tools added: Password cracking, redaction…

Binary and Directory tree comparison tool using Fuzzy Hashing

Library to access the Windows Shell Item format

Interrogate is a proof-of-concept tool for identification of cryptographic keys in binary material (regardless of target operating system), first and…

CLI utility for creating encrypted database backups (PostgreSQL, MySQL, MongoDB) with support for multiple storage backends (SFTP, S3, Azure), SSH…

Python script for carving Bitlocker VMK keys

Cryptanalysis of a proprietary 1999 video DRM system. Recovers 61 encrypted wrestling videos from the WCW Internet Powerdisk CD-ROM through static…

It's not just UsnJrnl (USN Journal Records/Change Journal Records) parser.

Tools for analyzing Canon Pixma printer firmware

Presented at Recon Montreal 2018

SheetJS xlsx 0.18.5 fork with CVE-2023-30533 and CVE-2024-22363 fixes