
analyzeMFT
analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple formats.

analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple formats.

A python tool that will extract exif data from picture with two methods


A bare-metal x86 utility to dump physical RAM directly to disk. Built and tested for Cold Boot Attack experiments on frozen memory.

Utility for recovering ES File Explorer encrypted files (.eslock)

FAT filesystems explore, extract, repair, and forensic tool

A lightweight CLI tool to detect and reconstruct cropped images vulnerable to Acropalypse (CVE-2023-21036 and CVE-2023-28303) written in Python.

Detection and restoration of Windows Snipping Tool PNG captures vulnerable to CVE-2023-28303