A sourcebook for DFIR knowledge and material

WhatsApp Desktop Live Forensiscs - Decryption and Extraction Technique

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

DPAPILAB Next Gen, script collection

MCP Server for Ghidra

Various short scripts and tools used for Digital Forensics

WhatsApp Desktop Live Forensics - Decryption&Extraction Technique

Decryption utility for PGP Whole Disk Encryption

An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)

A YARA & Malware Analysis Toolkit written in Rust.

eBPF based memory dumper for linux systems

This is a script to compress training forensic image files (.i.e E01) and zero out all the unnecessary files.

Xst Reader is an open source viewer for Microsoft Outlook’s .ost and .pst files, written entirely in C#. To download an executable of the current version, go to the releases tab.

Join any Minecraft Bedrock Edition server IP on Xbox One, Nintendo Switch, and PS4/PS5

A WhatsApp-Web extension that extends the client capabilities and does some very cool stuff.

Live linux distro combined in one ~20MB file. Runs on any UEFI computer.

Android security guides, roadmap, docs, courses, write-ups, and teryaagh.

Module(s) related to reading SEGB (fka "Biome") data from iOS, mascOS, etc.

Various tips & tricks

Extract files from Apple devices on Windows, Linux and MacOS. Mostly a wrapper for pymobiledevice3. Creates iTunes-style backups and "advanced logical backups"

Arsenal Image Mounter mounts the contents of disk images as complete disks in Microsoft Windows.

A free open source IT asset/license management system

Control-F - Android Package Dumper

Control-F Microsoft OneDrive Parser