Tools

jessek/hashdeep

Cross-platform hashing toolset for computing message digests (MD5, SHA-1, SHA-256, Tiger, Whirlpool) with recursive directory traversal and file…

aburgh/disk-arbitrator

A Mac OS X forensic utility which manages file system mounting in support of forensic procedures.

gregwar/fatcat

FAT filesystems explore, extract, repair, and forensic tool

dmtrkovalenko/ffs

F*ck file system - cli file search tool that bypasses OS kernel and reads your disc directlry

infobyte/cve-2023-21036

Detection and sanitization for Acropalypse Now - CVE-2023-21036

reecdeep/hivev5_keystream_decryptor

bad stuffs by bad guys

d4vinci/exif-grabber

A python tool that will extract exif data from picture with two methods

adoreste/truehunter

Truehunter

permanet/permanet

Cryptographically verifiable web archiving. Playwright capture → SHA-256 Merkle hash → Bitcoin-anchored OpenTimestamps → permanent Arweave storage.

donalhighnecked528/yellowkey-bitlocker-cve-2026-45585

Manage BitLocker recovery keys, unlock encrypted drives, and monitor encryption status with this lightweight Windows utility.

oritwoen/shaha

Hash database builder and reverse lookup tool — SHA256, RIPEMD160, Keccak256, BLAKE3 and more

notaswe/gocropalypse

CVE-2023-21036 detection in Go

simsong/bulk_extractor

This is the development tree. Production downloads are at:

cristianzsh/forensictools

Collection of forensic tools

kfallahi/underlaycopy

PowerShell toolkit that extracts locked Windows files (SAM, SYSTEM, NTDS, ...) using MFT parsing and raw disk reads

jschicht/rawcopy

Commandline low level file extractor for NTFS

vikwin/pcapfex

'Packet Capture Forensic Evidence eXtractor' is a tool that finds and extracts files from packet capture files