Tools

talha-nazeef-ahmed/alpc-enumerator

A Windows userland tool to enumerate and classify ALPC ports, including PPL-protected processes.

c0decave/pdfgrab

Tool for searching pdfs withthin google and extracting pdf metadata

ryandfir/hindsight

Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox

kulkansecurity/gitxray

A multifaceted security tool which leverages Public GitHub REST APIs for OSINT, Forensics, Pentesting and more.

telefonica/hiddennetworks-python

USB device connection forensics tool that traces physical device-to-computer relationships across local and domain networks, generating visual graphs…

nightbringer21/fridump

Cross-platform memory dumper using Frida to extract accessible memory from iOS, Android, and Windows applications for forensic analysis and…

mr-r3b00t/crime-mapper

A tool for mapping cyber crime

ab2pentest/macosthreattrack

Bash tool used for proactive detection of malicious activity on macOS systems.

haruu77g/phantomprint

Passive hybrid fingerprinting engine — identify hosts without sending a single packet

idescriptor/idescriptor

privacy-first, open-source and free idevice management tool written in Rust and Qt

nccgroup/metadataplus

A tool to use novel locations to extract metadata from Office documents.

flo354/iosforensic

iOS forensic tool

destiny-creates/goxlr-malware-family

Malware analysis from the domain goxlr.net

mlcsec/proctools

Small toolkit for extracting information and dumping sensitive strings from Windows processes

functori/argos/argos

Analysis and Representation of Graphs of Suspicious Operations (Analyse et Représentation des Graphes des Opérations Suspectes)

thehive-project/cortex

Cortex: a Powerful Observable Analysis and Active Response Engine

sevagas/swap_digger

Automates Linux swap analysis to extract user credentials, web form data, WiFi keys, and HTTP authentication during post-exploitation or forensic…