
Stego-Lab
Local steganography app for hiding text, images, or files inside carrier images with AES-256 encryption, EXIF editing, watermarking, and batch…

Local steganography app for hiding text, images, or files inside carrier images with AES-256 encryption, EXIF editing, watermarking, and batch…

Utility to find AES keys in running processes

📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive…

A free utility that finds malware, adware and other security threats

Utility that converts an .etl file containing a Windows network packet capture into .pcapng format.

A Mac OS X forensic utility which manages file system mounting in support of forensic procedures.

File carving utility that recovers deleted files from disk images and raw drives by matching headers, footers, and internal structures via…

the ps utility, with an eBPF twist and container context

A utility for playing with cryptography, geared towards ransomware analysis.

Rogue Assembly Hunter is a utility for discovering 'interesting' .NET CLR modules in running processes.

A bare-metal x86 utility to dump physical RAM directly to disk. Built and tested for Cold Boot Attack experiments on frozen memory.

A portable C# utility for enumerating local and remote windows sessions

A utility for extracting cryptocurrency wallet data from wallet.dat files.

Utility for recovering ES File Explorer encrypted files (.eslock)

This utility can help determine if indicators of compromise (IOCs) exist in the log files of a Pulse Secure VPN Appliance for CVE-2019-11510.


Extract and repack Android ADB backups (ICS+). Supports encrypted archives, tar conversion, and standard I/O for forensic analysis or data recovery.

Log what files are accessed by any Linux process