
scalpel
File carving and indexing tool for digital forensics, recovering files from disk images based on header/footer pattern matching, regular expressions,…

File carving and indexing tool for digital forensics, recovering files from disk images based on header/footer pattern matching, regular expressions,…

Tool and framework for securely reading untrusted USB mass storage devices.

GUI forensic tool for acquiring and analyzing Telegram data from Android devices. Parses messages, media, and metadata; generates integrity-verified…

A robust digital forensics tool for extracting and analyzing Google Chrome artifacts from Android devices

analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple formats.

Multi-threaded password recovery tool for RAR, ZIP, PDF, and Linux shadow files using dictionary and brute-force methods with configurable character…

Mediatek Flash and Repair Utility

A command-line tool for securely backing up, restoring, and verifying secrets using interoperable standards like age encryption and coreutils,…

Extracts cryptocurrency private keys and addresses from wallet.dat files for Bitcoin and Litecoin, enabling wallet recovery and forensic analysis.

Gallery Vault dump recovery tool with automated discovery, key derivation and automatic media restoration.

Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.

X-Ways Acropalypse extension detects CVE-2023-21036 in common images

Python SDK for removing hidden metadata from files (PDF, Office, images) to protect privacy and prevent data leakage via automated cleaning workflows.

Tool for checking passwords against TrueCrypt encrypted volumes and disks, and/or decrypting the data.

Tool to securely and efficiently wipe devices and partiitions for Linux

Collaborative forensic timeline analysis platform for ingesting, searching, and annotating event logs to support incident response and DFIR…

F*ck file system - cli file search tool that bypasses OS kernel and reads your disc directlry