
BSOD_bitlocker_recover
Python script for carving Bitlocker VMK keys

Python script for carving Bitlocker VMK keys

A cryptographic research tool for analyzing signature vulnerabilities

Brute-force attack tool against WPS registrar PINs to recover WPA/WPA2 passphrases, supporting online brute force and offline Pixie Dust attacks on…

analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple formats.

FAT filesystems explore, extract, repair, and forensic tool

A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.


A tool to crack WPA2 passphrase with PMKID value without clients or de-authentication

A tool to recover from ESXiArgs ransomware

Python tool that parses the NTFS $MFT to copy locked files during incident response, bypassing OS locks by reading raw disk locations. Supports…

This Tool Aims to Exploit the CVE-2018-13341

File carving and indexing tool for digital forensics, recovering files from disk images based on header/footer pattern matching, regular expressions,…

Command-line DFIR tool for scanning Windows ATM systems to detect malware traces in process memory and disk, with automated memory dump creation for…

Live Windows forensic acquisition tool that collects system artefacts (registry, memory, disk, files) into CSV/JSON for early compromise detection…

OS X Auditor is a free Mac OS X computer forensics tool

Recover the default privilege set of a LOCAL/NETWORK SERVICE account

Tool to exploit CVE-2018-13341 and recover hidden account password on Crestron devices

Tool to extract the $UsnJrnl from an NTFS volume