
nox-framework
High-performance OSINT/CTI framework for automated identity pivoting and risk analysis across 120+ sources.

High-performance OSINT/CTI framework for automated identity pivoting and risk analysis across 120+ sources.

AIL framework - Analysis Information Leak framework. Project moved to https://github.com/ail-project

A modular OSINT & SOCMINT framework for social media intelligence, investigation, and public data analysis.

PowerShell tool that extracts Active Directory artifacts via LDAP or ADWS and generates Excel reports for auditing, DFIR, and penetration testing.

OSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Dshell is a network forensic analysis framework.

Incident Response Forensic Framework

Automates Linux swap analysis to extract user credentials, web form data, WiFi keys, and HTTP authentication during post-exploitation or forensic…

Automated steganography detection tool that scans websites, web servers, and local directories using AI-driven object/text recognition and deep file…


AMBER ICI v5: local-first Ollama investigative command center with case-scoped evidence, agent chains, hybrid retrieval, streaming analysis, graph…

Presented at Recon Montreal 2018

Telegram OSINT, scraping and archival as a local web app. Multi-account collection, profile lookup with historic photos and change diffs, ten export…

Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox

Collects macOS and iOS artifacts to build timelines of network activity, cross-device identity, and physical location correlation for reconnaissance…