
scalpel
File carving and indexing tool for digital forensics, recovering files from disk images based on header/footer pattern matching, regular expressions,…

File carving and indexing tool for digital forensics, recovering files from disk images based on header/footer pattern matching, regular expressions,…

Reconstructing a Dead USB Protocol: A Handheld's Secrets Unlocked by a Hot Knife, a multi-disciplinary journey to reviving a forgotten USB interface

Hive v5 file decryption algorithm

Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.

Find and redact secrets in AI coding agent histories (Claude Code, and more).

Commandline low level file extractor for NTFS

Hash database builder and reverse lookup tool — SHA256, RIPEMD160, Keccak256, BLAKE3 and more

Python SDK for removing hidden metadata from files (PDF, Office, images) to protect privacy and prevent data leakage via automated cleaning workflows.

After using the KeePass password dumper maybe some character parsed as ● is incorrect and you want to know the real character

Collaborative forensic timeline analysis platform for ingesting, searching, and annotating event logs to support incident response and DFIR…

Search and extract blob files on the Ethereum Blockchain network

Interactively find and recover deleted or :point_right: overwritten :point_left: files from your terminal

Forensics tool for NTFS (parser, mft, bitlocker, deleted files)

PowerShell toolkit that extracts locked Windows files (SAM, SYSTEM, NTDS, ...) using MFT parsing and raw disk reads

Depix is a PoC for a technique to recover plaintext from pixelized screenshots.



This is the development tree. Production downloads are at: