
TCPViewer
The best-in-class macOS app to See every packet clearly on your Mac. Alternative to Wireshark

The best-in-class macOS app to See every packet clearly on your Mac. Alternative to Wireshark

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

privacy-first, open-source and free idevice management tool written in Rust and Qt

Semantic search over videos using Gemini Embedding 2 or Qwen3-VL.

Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox

Free access-log compromise analyzer: webshell interactions, exploitation patterns and brute-force bursts in your Apache/nginx logs - severity,…

A network sniffer that logs all DNS server replies for use in a passive DNS setup

Collecting & Hunting for IOCs with gusto and style

Script to parse Aircrack-ng captures into a SQLite database and extract useful information like handshakes, MGT identities, interesting relations…

CTI Cyber Threat Intelligence OSINT Dark Web Deep Web Research. Ransomware gang information gathering tool.

Portable, dependency-free incident response tool that automates forensic artifact collection from Unix-like systems, including memory acquisition,…

Centralized repository for malware samples, threat intelligence, IOCs, and security tooling logs to support threat research and incident response…

Triages a suspect Windows machine in minutes. Collects processes, services, autoruns, event logs and forensic artifacts, flags attacker activity, and…

CredsHunter - Credential Hunting scripts for Windows and Linux OS

Lua-based Wireshark postdissector that decrypts and parses Ubiquiti AirMAX/RouterBoard 802.11 vendor IEs into filterable fields.

Read-only WordPress User Registration CVE-2026-1492 checker for hidden admins, plugin version, uploads PHP, cron, and compromise IOCs.

Post-Exploitation EVTX Analyzer for BloodHound Mapping
