Directory: Recently Added Listings 
www.hex-rays.com/products/ida/index.shtml
A commercial tool used by malware analysts to reverse engineer programs. Supports multiple architectures in the commercial version. There is a free version for non commercial use and only supports x64.
www.texplained.com/about-us/chipjuice-software/
ChipJuice is the ultimate tool for easily Reverse Engineering ICs. By detecting and processing the whole interconnection and Standard cell library of the digital core, ChipJuice recovers any chip’s internal in the form of their Netlists and their GDSII. C ...
gitlab.com/velocidex/velociraptor
At Velocidex we have been running open source endpoint monitoring tools for our clients in order to detect and respond to incidents. One of our favorite tools is GRR, developed by Google internally and then released as open source. GR ...
Linux webserver malware scanner and incident response tool. Utilizes custom yara signatures developed to detect webshells, spam mailers, and phishing kits. Also uses maldet signatures, clamav, wordpress core file check via wpcli, and many common linux uti ...
Bitwar iPhone Data Recovery Software is a professional data recovery software for iOS devices. It has a friendly user experience and wizard operation, you can recover the data by only three steps and easily find the lost data even if you are not famili ...
Bitwar Android Data Recovery Software is a professional data recovery software for Android devices. It has friendly user experience and wizard operation, you can recover the data by only three steps and easily find the lost data even if you are not fam ...
18 TERABYTES of highly compressed internet scan datasets.
github.com/TryCatchHCF/Cloakify
CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings; Evade DLP/MLS Devices; Defeat Data Whitelisting Controls; Social Engineering of Analysts; Evade AV Detection.
securityxploded.com/ws_ftp-password-decryptor.php
WS_FTP Password Decryptor is the FREE software to instantly recover FTP login passwords stored by WS_FTP - one of the popular FTP client application.
securityxploded.com/xfire-password-decryptor.php
Xfire Password Decryptor is the FREE software to instantly recover login passwords from Xfire Gaming Messenger.
securityxploded.com/yahoo-password-decryptor.php
Yahoo Password Decryptor is the FREE software to instantly recover Yahoo Login passwords from popular web browsers and instant messengers.
securityxploded.com/yahoo-password-dump.php
It automatically discovers installed applications on your system and recovers all the stored Yahoo login passwords within seconds.By default it dumps all the recovered passwords to console.
Extracts passwords from a KeePass 2.x database, directly from memory.
github.com/eLoopWoo/chrome-url-dumper
research chrome stored databases - dumping all urls
sourceforge.net/projects/findaes/
Searches for AES keys by searching for their key schedules. Able to find 128. 192, and 256 bit keys, such as those used by TrueCrypt and BitLocker. Originally intended for memory images, can use arbitrary data.
dde.binghamton.edu/download/pq/
On this page, you can download a MATLAB implementation of the Perturbed Quantization (PQ) steganography. It includes both original PQ [1] and its modified versions PQt and PQe as described in [2]. Detailed information about the installation and the usage ...
github.com/ciphertechsolutions/io
Simple Imaging. Tactical Triage. Zero Clicks. About IO: Imaging for Operations (IO) is a zero-click forensic imaging tool designed for use in high-stress environments. IO automatically enables a software write-block, detects changes to attached devices, ...
github.com/matthewclarkmay/ftriage
My attempt at automating forensic data acquisition, reduction, and overall triage. Scripts I threw together for quickly gathering forensic artifacts from suspect memory/disk image(s), carving, etc. Setup Download NSRL hashlist if you will not b ...
ampedsoftware.com/authenticate
Amped Authenticate is a software package for forensic image authentication and tamper detection on digital photos. Authenticate provides a suite of different tools to determine whether an image is an unaltered original, an original generated by a specific ...
github.com/grayfold3d/POSH-Triage
Tools for parsing Forensic images PowerShell script that automates the use of Eric Zimmerman's cmd line tools (https://ericzimmerman.github.io/) against a mounted forensic image. The following tools are run where applicable to the image being processed: ...
Most Reviewed
Bitwar Data Recovery... Website: www.bitwar.netWebsite Clicks: 189
Bitwar iPhone Data... Website: www.bitwar.netWebsite Clicks: 69
Bitwar Android Data... Website: www.bitwar.netWebsite Clicks: 65
BitRaser for File Website: www.stellarinfo.com/windows-tools/file-eraser.phpWebsite Clicks: 310- Show more...
Stats
Featured
Vound Intellahttps:/... Website: www.vound-software.com/individual-solutions
Website Clicks: 635- Sumuri Reconhttps://sumuri.com... Website: sumuri.com/software/recon/Website Clicks: 771
- Eric Zimmerman Registry...https:/... Website: ericzimmerman.github.ioWebsite Clicks: 841
- Paraben Forensics E3 P2Chttps://www.paraben.com... Website: www.paraben.com/products/e3-p2c
Website Clicks: 352 - Magnet AXIOM Cloudhttps:/... Website: www.magnetforensics.com/axiom-cloud/Website Clicks: 425
- CALO Project Enron...https://www.cs.cmu.edu... Website: www.cs.cmu.edu/~enron/Website Clicks: 850
- DigitalCorporadigitalcorpora.org... Website: digitalcorpora.orgWebsite Clicks: 1,385
Omnibushttps://github.com... Website: github.com/InQuest/omnibusWebsite Clicks: 152- Show more...
Popular
- SOF-ELK (Security... Website: github.com/philhagen/sof-elk/blob/master/VM_README.mdWebsite Clicks: 5,931
WinFE - Windows... Website: winfe.wordpress.comWebsite Clicks: 5,242- sets.py Website: blog.didierstevens.com/2017/03/05/new-tool-sets-py/Website Clicks: 657
- Metasploit Website: www.metasploit.comWebsite Clicks: 1,054
- Cellebrite UFED Reader Website: www.cellebrite.com/Mobile-Forensics/Applications/ufed-readerWebsite Clicks: 1,405
- http://lionsec-linux.org... Website: lionsec-linux.orgWebsite Clicks: 1,225
- RDP Bitmap Cache parser Website: github.com/ANSSI-FR/bmc-toolsWebsite Clicks: 1,160
- Memory Samples -... Website: github.com/volatilityfoundation/volatility/wiki/Memory-Sampl...Website Clicks: 1,190
- Show more...
Most Rated
- WinFE - Windows... Website: winfe.wordpress.comWebsite Clicks: 5,242
- SOF-ELK (Security... Website: github.com/philhagen/sof-elk/blob/master/VM_README.mdWebsite Clicks: 5,931
- X-Ways Forensics Website: www.x-ways.netWebsite Clicks: 913
- CAINE- Computer Aided... Website: www.caine-live.netWebsite Clicks: 1,006
- Bitwar Data Recovery... Website: www.bitwar.netWebsite Clicks: 189
- USB Detective Website: usbdetective.comWebsite Clicks: 331
- Harlan Carvey RegRipper Website: github.com/keydet89/RegRipper2.8Website Clicks: 1,497
- Autopsy Website: www.sleuthkit.org/autopsy/Website Clicks: 1,029
- Show more...
Recently updated
- ChipJuice Website: www.texplained.com/about-us/chipjuice-software/
- Ida Pro Website: www.hex-rays.com/products/ida/index.shtml
- Blazescan Website: github.com/Hestat/blazescanWebsite Clicks: 103
- Amped Authenticate Website: ampedsoftware.com/authenticateWebsite Clicks: 147
- grayfold3d/POSH-Triage Website: github.com/grayfold3d/POSH-TriageWebsite Clicks: 138
- Bitwar Data Recovery... Website: www.bitwar.netWebsite Clicks: 189
- BitRecover Virtual... Website: www.bitrecover.com/virtual-drive-recovery-software/Website Clicks: 730
- CellHawk - Call Detail... Website: www.hawkanalytics.comWebsite Clicks: 180
- Show more...
© 2018 Copyright | DFIR Training