
Disk-Arbitrator
A Mac OS X forensic utility which manages file system mounting in support of forensic procedures.

A Mac OS X forensic utility which manages file system mounting in support of forensic procedures.

Python tool that parses the NTFS $MFT to copy locked files during incident response, bypassing OS locks by reading raw disk locations. Supports…

F*ck file system - cli file search tool that bypasses OS kernel and reads your disc directlry

Portable zipfile extraction utility with broad OS support, decryption, and security fixes for path traversal and symlink vulnerabilities.

Graphical forensic toolkit for parsing, decrypting, and extracting WhatsApp data from Android and iOS devices, including Google Drive and iCloud…

Mediatek Flash and Repair Utility

Extract and repack Android ADB backups (ICS+). Supports encrypted archives, tar conversion, and standard I/O for forensic analysis or data recovery.

Manage WhatsApp .crypt12, .crypt14 and .crypt15 files.

📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive…

Find your device and control it remotely. Works over SMS, instant messengers, or FMD Server's web interface. A secure open source alternative to…

androidqf (Android Quick Forensics) helps quickly gathering forensic evidence from Android devices, in order to identify potential traces of…


android location service cache dumper

Tool for recovering and decrypting ES File Explorer encrypted files (.eslock)

Gallery Vault dump recovery tool with automated discovery, key derivation and automatic media restoration.

A robust digital forensics tool for extracting and analyzing Google Chrome artifacts from Android devices

Forensic Analysis for Mobile Apps (FAMA) -- module for the Autopsy Forensic Browser

Open source Android Forensics app and framework