
acropalypse-reconstructor
A lightweight CLI tool to detect and reconstruct cropped images vulnerable to Acropalypse (CVE-2023-21036 and CVE-2023-28303) written in Python.

A lightweight CLI tool to detect and reconstruct cropped images vulnerable to Acropalypse (CVE-2023-21036 and CVE-2023-28303) written in Python.

Program for determining types of files for Windows, Linux and MacOS.

Detection and restoration of Windows Snipping Tool PNG captures vulnerable to CVE-2023-28303

CLI and interactive console for listing, browsing, and extracting files from VM disk images (VHDX, VMDK, EBS snapshots, raw disks) for red-team…

Lightweight Windows disassembler, PE inspection and patch-assistance tool for native EXE/DLL files.

X-Ways Acropalypse extension detects CVE-2023-21036 in common images

Inception is a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard,…

A GUI and CLI tool for removing bloat from executables

SentinelNav: zero-dependency, pure Python binary visualization and forensics tool.

Scan for evidence of CVE-2021-30860 (FORCEDENTRY) exploit

Windows memory-forensics and threat hunting tool that scans live process memory for malicious patterns, injection techniques, and reflectively loaded…

A Windows userland tool to enumerate and classify ALPC ports, including PPL-protected processes.

A robust digital forensics tool for extracting and analyzing Google Chrome artifacts from Android devices

Decrypt GlobalProtect configuration and cookie files.

Malicious HTTP traffic explorer

JAR analysis tool for exploring, searching, and extracting specific classes from large JAR files with bytecode search, multi-selection extraction,…

Universal Windows extraction tool that detects unknown files and routes them to the right bundled extractor.

Quick One Line Powershell scripts to detect for webshells, possible zips, and logs.