
DFIR-Companion
DFIR forensics companion server + capture extension

DFIR forensics companion server + capture extension

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.


Cross-platform credential recovery tool that extracts stored passwords from browsers, email clients, databases, system mechanisms, and network…

SALT - SLUB ALlocator Tracer for the Linux kernel

Free hands-on digital forensics labs for students and faculty

AI-first reverse-engineering toolkit: static analysis, SSA decompiler, live memory, provenance. Source-available (PolyForm Noncommercial).

Curated index of incident response and DFIR tools, including memory and disk forensics, evidence collection, log analysis, playbooks, and educational…

OPPO Find N2 GhostLock (CVE-2026-43499) exploit adaptation

Research repository for CVE-2026-74469 (DiagSpill), a Linux kernel SCTP peer transport counter overflow causing an out-of-bounds write, with PoC,…

Defund the Police.

Volatility 3 ported to Rust. Same output, much faster.

Exploit Development and Reverse Engineering with GDB & LLDB Made Easy

Advanced framework for extracting digital artifacts from volatile memory (RAM) samples, enabling deep forensic analysis of system runtime state…

Automated Linux incident response script with live triage, memory acquisition (LiME), disk imaging, YARA scanning, and HTML report generation.

The multi-platform memory acquisition tool.

IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by…