
oletools
Python toolkit for analyzing MS OLE2 and Office documents, extracting VBA macros, detecting exploits, and performing forensic analysis of structured…

Python toolkit for analyzing MS OLE2 and Office documents, extracting VBA macros, detecting exploits, and performing forensic analysis of structured…

Remove visible and invisible AI watermarks and provenance metadata from images and video. Python library and CLI for SynthID, C2PA, EXIF, IPTC, XMP,…

Python wrapper for tshark, allowing python packet parsing using wireshark dissectors

An OSINT / digital forensics tool built in Python

Crack iOS Restriction Passcodes with Python

Imago is a python tool that extract digital evidences from images.

Event Trace Log file parser in pure Python

Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain…

A python tool that will extract exif data from picture with two methods

Scapy: the Python-based interactive packet manipulation program & library.

Remote live forensics and incident response framework with Python agent for collecting forensic data from endpoints, including memory, disk, and…

pefile is a Python module to read and work with PE (Portable Executable) files

Source code for the book "Violent Python" by TJ O'Connor. The code has been fully converted to Python 3, reformatted to comply with PEP8 standards…

Source code for the book "Black Hat Python" by Justin Seitz. The code has been fully converted to Python 3, reformatted to comply with PEP8 standards…

NFStream: a Flexible Network Data Analysis Framework.

Python Decoders for Common Remote Access Trojans

Chepy is a python lib/cli equivalent of the awesome CyberChef tool.

SSMA - Simple Static Malware Analyzer [This project is not maintained anymore by me]