HiddenNetworks-Python

HiddenNetworks-Python v0.9 May 2020 Hidden Networks is a new concept test based on the paper of the same name, that is programmed using Python 3.4. It facilitates the task of analysing local and remote machines within a domain, using WMI in searching for traces of connections by USB devices. With...

incriminator

Incriminator Incriminator is an OpenSource Project with educational purposes that allows you to incriminate other devices during a cybercrime. The project is now in version 1.0 If you find a bug please, report it. Thank you for downloading... FOR EDUCATIONAL PURPOSES ONLY!!!!!!! I am not...

grr

GRR Rapid Response एक घटना प्रतिक्रिया ढांचा है जो दूरस्थ लाइव फोरेंसिक पर केंद्रित है। GRR एक python क्लाइंट agent है जो लक्ष्य सिस्टम पर स्थापित किया जाता है, और python सर्वर बुनियादी ढांचा जो क्लाइंट को प्रबंधित और उनसे बात कर सकता है। दस्तावेज़ीकरण कृपया GRR के बारे में अधिक जानने के लिए हमार...

ios_triage

iOS Triage Bash script to extract data from a "checkra1ned" iOS device Developed and tested on Mac OS X Mojave 10.14.6 Mandatory Requirements checkra1n https://checkra.in/ libimobiledevice https://www.libimobiledevice.org/ SSHPASS for Mac OS X https://gist.github.com/arunoda/7790979 dialog for Ma...

MemProcFS-Analyzer

MemProcFS-Analyzer MemProcFS-Analyzer.ps1 is a PowerShell script utilized to simplify the usage of MemProcFS and to optimize your memory analysis workflow. MemProcFS - The Memory Process File System by Ulf Frisk https://github.com/ufrisk/MemProcFS Features: Fast and easy memory analysis! You can...

Telegrip

Hi there 👋 Telegrip is a GUI digital forensic tool that deals with Telegram-related cases. Telegrip provides several features: 1. Telegrip acquires sparse image from Android devices containing the device information and all Telegram-related data. 2. Parses and analyzes all types of messages,...

chainsaw

Rapidly Search and Hunt through Windows Forensic Artefacts Chainsaw provides a powerful ‘first-response’ capability to quickly identify threats within Windows forensic artefacts such as Event Logs and the MFT file. Chainsaw offers a generic and fast method of searching through event logs for...

Forensia

Forensia Anti Forensics Tool For Red Teamers, Used For Erasing Some Footprints In The Post Exploitation Phase. Reduces Payload Burnout And Increases Detection Countdown. Can Be Used To Test The capabilities of Your Incident Response / Forensics Teams. Capabilities Unloading Sysmon Driver. Gutmann...

SwishDbgExt

SwishDbgExt SwishDbgExt is a Microsoft WinDbg debugging extension that expands the set of available commands by Microsoft WinDbg, but also fixes and improves existing commands. This extension has been developed by Matt Suiche @msuiche – feel free to reach out on [email protected] ask for mor...

MEAT

M.E.A.T. - Mobile Evidence Acquisition Toolkit Meet M.E.A.T! From Jack Farley - BlackStone Discovery This toolkit aims to help forensicators perform different kinds of acquisitions on iOS devices and Android in the future. Requirements to run from source Windows or Linux Python 3.7.4 or 3.7.2 Pip...

Ivanti-Connect-Secure-Logs-Parser

Ivanti Secure Connect Logs Parser This repository provides a Python script designed to convert Ivanti Secure Connect .vc0 log files into CSV format for digital forensics and incident response. In particular, the parser: Extracts timestamps from Ivanti log files notably from .vc0 files. Converts...

imago-forensics

imago-forensics 🕵️ Imago एक पायथन टूल है जो छवियों से डिजिटल साक्ष्यों को पुनरावर्ती रूप से निकालता है। यह टूल डिजिटल फोरेंसिक जांच के दौरान उपयोगी है। यदि आपको डिजिटल साक्ष्य निकालने की आवश्यकता है और आपके पास बहुत सारी छवियां हैं, तो इस टूल के माध्यम से आप उनकी आसानी से तुलना कर पाएंगे। Imago...

imago-forensics

imago-forensics 🕵️ Imago is a python tool that extract digital evidences from images recursively. This tool is useful throughout a digital forensic investigation. If you need to extract digital evidences and you have a lot of images, through this tool you will be able to compare them easily. Imago...

ulexecve

Quick Start Execute dynamic or statically compiled ELF Linux binaries without ever calling execve. root@kitploit: cat /bin/echo | ulexecve - hello hello Introduction This Python tool is called ulexecve and it stands for userland execve. It helps you execute arbitrary ELF binaries on Linux systems...

MrKaplan

Mr.Kaplan Description MrKaplan is a tool aimed to help red teamers to stay hidden by clearing evidence of execution. It works by saving information such as the time it ran, snapshot of files and associate each evidence to the related user. This tool is inspired by MoonWalk, a similar tool for Uni...

CIRTKit

One DFIR console to rule them all. Built on top of theViper Framework Documentation Please see the wiki for more information about CIRTKit and documentation Roadmap Future integrations Bit9 Palo Alto Networks EnCase/FTK Future modules Packet Analysis possibly Dshell Javascript...

DroneXtract

عن الأداة DroneXtract هي مجموعة شاملة للطب الشرعي الرقمي لطائرات DJI بدون طيار، مبنية بلغة Golang. يمكن استخدامها لتحليل قيم أجهزة الاستشعار وبيانات القياس عن بُعد للطائرة، وتصور خرائط رحلات الطائرة، والتدقيق بحثًا عن النشاط الإجرامي، واستخراج البيانات ذات الصلة ضمن تنسيقات ملفات متعددة. معاينة...

DracOS

ما هو دراكوس لينكس ؟ Dracos Linux www.dracos-linux.org هو نظام تشغيل لينكس من إندونيسيا، مفتوح المصدر مبني على أساس Linux From Scratch تحت حماية رخصة جنو العمومية العامة v3.0. هذا النظام هو أحد إصدارات توزيعات لينكس، والذي يُستخدم لإجراء اختبارات أمنية اختبار الاختراق. دراكوس لينكس في Arm بمئات...

factual-rules-generator

factual-rules-generator Factual-rules-generator es un proyecto de código abierto que tiene como objetivo generar reglas YARA sobre software instalado a partir de un sistema operativo en ejecución. El objetivo del software es poder utilizar un conjunto de reglas contra evidencias forenses digitale...

xwf-yara-scanner

Overview This X-Ways Forensics X-Tension allows the use of YARA within X-Ways natively. It uses both the X-Ways Forensics API and the YARA API to achieve this. Note: This is an open source project, not a formal CrowdStrike product. There are many benefits to running YARA within X-Ways, versus...