


A bare-metal x86 utility to dump physical RAM directly to disk. Built and tested for Cold Boot Attack experiments on frozen memory.

This toolkit aims to help forensicators perform different kinds of acquisitions on iOS devices

Offset Independent Credential Extraction Tool

bad stuffs by bad guys

Python script for carving Bitlocker VMK keys

Recovery notes for proxmox advisory ID: PSA-2026-00043-1 (CVE-2023-54391)

Manage BitLocker recovery keys, unlock encrypted drives, and monitor encryption status with this lightweight Windows utility.

X-Ways Acropalypse extension detects CVE-2023-21036 in common images

SheetJS xlsx 0.18.5 fork with CVE-2023-30533 and CVE-2024-22363 fixes

Discord bot for mitigating the aCropalypse vulnerability (CVE-2023-21036, CVE-2023-28303) by retroactively deleting vulnerable images

Multi-threaded password recovery tool for RAR, ZIP, PDF, and Linux shadow files using dictionary and brute-force methods with configurable character…

WhatsApp Forensic Tool

Find and redact secrets in AI coding agent histories (Claude Code, and more).

Cellebrite Physical Analyzer python scripts to aid analysts with extended functionality

After using the KeePass password dumper maybe some character parsed as ● is incorrect and you want to know the real character