
ngrep
ngrep is like GNU grep applied to the network layer. It's a PCAP-based tool that allows you to specify an extended regular or hexadecimal expression…

ngrep is like GNU grep applied to the network layer. It's a PCAP-based tool that allows you to specify an extended regular or hexadecimal expression…

chat log tool, easily use your own chat data. 聊天记录工具,轻松使用自己的聊天数据

privacy-first, open-source and free idevice management tool written in Rust and Qt

A network sniffer that logs all DNS server replies for use in a passive DNS setup

Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP,…

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

Generates YARA rules from installed software on a running OS to baseline known software and find similar installations across digital forensic…

A portable C# utility for enumerating local and remote windows sessions

Burp Suite extension for extracting metadata from files

It was developed to speed up the processes of SOC Analysts during analysis

The best-in-class macOS app to See every packet clearly on your Mac. Alternative to Wireshark

Extract all forensic interesting information of Firefox, Iceweasel and Seamonkey browsers

Windows offline filesystem hacking tool for Linux

This tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to…

Portable, dependency-free incident response tool that automates forensic artifact collection from Unix-like systems, including memory acquisition,…

Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox

Download and View Skype History Without Skype