
passivedns
A network sniffer that logs all DNS server replies for use in a passive DNS setup

A network sniffer that logs all DNS server replies for use in a passive DNS setup

ngrep is like GNU grep applied to the network layer. It's a PCAP-based tool that allows you to specify an extended regular or hexadecimal expression…

NTLMRawUnhide.py is a Python3 script designed to parse network packet capture files and extract NTLMv2 hashes in a crackable format. The following…

Modular incident response toolkit for collecting forensic data from potentially infected macOS endpoints, capturing browser artifacts, persistence…

It was developed to speed up the processes of SOC Analysts during analysis

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

The best-in-class macOS app to See every packet clearly on your Mac. Alternative to Wireshark

Blockchain Transactions Investigation Tool

Automates Linux swap analysis to extract user credentials, web form data, WiFi keys, and HTTP authentication during post-exploitation or forensic…

Automated, Collection, and Enrichment Platform

Sniffs outbound traffic for suspicious, beacon-like callbacks, because if it keeps coming back on schedule, it's probably not breakfast.

chat log tool, easily use your own chat data. 聊天记录工具,轻松使用自己的聊天数据

Semantic search over videos using Gemini Embedding 2 or Qwen3-VL.

privacy-first, open-source and free idevice management tool written in Rust and Qt

Tool to find metadata and hidden information in the documents.

Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox

Indicators of Compromise from Amnesty International's cyber investigations

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP,…