
HiddenNetworks-Python
USB device connection forensics tool that traces physical device-to-computer relationships across local and domain networks, generating visual graphs…

USB device connection forensics tool that traces physical device-to-computer relationships across local and domain networks, generating visual graphs…

Generates YARA rules from installed software on a running OS to baseline known software and find similar installations across digital forensic…

Volatility plugin to extract X screenshots from a memory dump

A python script which allows you to parse GeoLocation data from your Image files stored in a dataset.It also produces output in CSV file and also in…


A portable C# utility for enumerating local and remote windows sessions

A tool to use novel locations to extract metadata from Office documents.


Client-server tool for live data collection during incident response. Admin sends requests to clients to gather system information for forensic…

Burp Suite extension for extracting metadata from files

Automation tool designed to simplify the analysis of PCAP (Packet Capture) files

Basic log analysis tool to detect impossible travel via IP address geographic information

Post-Exploitation EVTX Analyzer for BloodHound Mapping

Lua-based Wireshark postdissector that decrypts and parses Ubiquiti AirMAX/RouterBoard 802.11 vendor IEs into filterable fields.

A Zeek STUN protocol analyzer based on Spicy.

Extracts URLs from malicious RTF files exploiting CVE-2017-0199 and CVE-2017-8759 for malware analysis and threat intelligence.

Browser-based tool to detect Acropalypse (CVE-2023-21036) by analyzing PNG/GIF images for truncated pixel data, enabling quick vulnerability…