
walletool
Extracts cryptocurrency private keys and addresses from wallet.dat files for Bitcoin and Litecoin, enabling wallet recovery and forensic analysis.

Extracts cryptocurrency private keys and addresses from wallet.dat files for Bitcoin and Litecoin, enabling wallet recovery and forensic analysis.

A utility for extracting cryptocurrency wallet data from wallet.dat files.

File carving utility that recovers deleted files from disk images and raw drives by matching headers, footers, and internal structures via…

Lua-based Wireshark postdissector that decrypts and parses Ubiquiti AirMAX/RouterBoard 802.11 vendor IEs into filterable fields.


Utility for recovering ES File Explorer encrypted files (.eslock)

A Mac OS X forensic utility which manages file system mounting in support of forensic procedures.

Detection and restoration of Windows Snipping Tool PNG captures vulnerable to CVE-2023-28303

Indicator of Compromise Scanner for CVE-2019-19781

A portable C# utility for enumerating local and remote windows sessions

the ps utility, with an eBPF twist and container context


📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive…

Utility that converts an .etl file containing a Windows network packet capture into .pcapng format.

Utility to find AES keys in running processes

A free utility that finds malware, adware and other security threats

Entropy scanner for Linux to detect packed or encrypted binaries related to malware. Finds malicious files and Linux processes and gives output with…

Extract and repack Android ADB backups (ICS+). Supports encrypted archives, tar conversion, and standard I/O for forensic analysis or data recovery.