|
guymager |
dd_rescue |
ewfacquire |
Cyclone |
|
esximager |
ddrescue |
ewfacquirestream |
dc3dd |
|
dd |
DDRescue-GUI |
ftkimager |
dcfldd |
|
Affcopy |
affconvert |
affcompare |
affcat |
|
affix |
affinfo |
affdiskprint |
affcrypto |
|
affsign |
affsign |
affsegment |
affrecover |
|
affxml |
affverify |
affstats |
|
Ewfrecover |
ewfinfo |
ewfexport |
ewfdebug |
|
|
|
|
ewfverify |
|
md5sum |
hashdeep |
hashboy |
hash identifier |
|
sha1sum |
pehash |
QuickHash |
OpenTimestamps |
|
|
ssdeep |
sha512sum |
sha256sum |
|
yarp-mount |
mmls |
fdisk |
Disktype |
|
VeraCrypt CLI |
vbladed |
vblade |
udisksctl |
|
affuse |
ZuluMount |
ZuluCrypt |
VeraCrypt GUI |
|
fusermount |
ewfmount |
Disk image mounter |
apfs-fuse |
|
apfs-dump |
xmount |
mount |
kpartx |
|
|
|
apfsutil |
apfs-dump-quick |
|
dislocker-bek |
dislocker |
bdemount |
bdeinfo |
|
dislocker-metadata |
dislocker-fuse |
dislocker-find |
dislocker-file |
|
vshadowinfo |
vshadowdebug |
vsc_mount |
image_export |
|
|
|
|
vshadowmount |
|
vmdkmnt |
snapper |
guestunmount |
guestmount |
|
aoe-flush |
aoe-discover |
aoeping |
aoecfg |
|
aoe-sancheck |
aoe-revalidate |
aoe-mkshelf |
aoe-interfaces |
|
|
coraid-update |
aoe-version |
aoe-stat |
|
psort |
pinfo |
PLASO filters |
PLASO |
|
yarp-timeline |
Turbinia |
TimeWolf |
psteal |
|
blkls |
blkcat |
blkcalc |
Autopsy |
|
fiwalk |
ffind |
fcat |
blkstat |
|
icat |
hfind |
fsstat |
fls |
|
img_stat |
img_cat |
ils |
ifind |
|
jpeg_extract |
jls |
jcat |
istat |
|
mmstat |
mmls |
mmcat |
mactime |
|
tsk_comparedir |
srch_strings |
sorter |
sigfind |
|
usnjls |
tsk_recover |
tsk_loaddb |
tsk_gettimes |
|
|
|
mactime |
image_export |
|
OfficePlistParser |
macMRU-Parser |
FSEparser |
dsstore |
|
|
|
|
quickLook_parser |
|
UEFITool |
UEFIPatch |
bootcode_parser |
mbr_parser |
|
pasco |
galleta |
dumpzilla |
|
lspst |
grepmail |
ExtractMsg |
Email4n6eml |
|
pdgmail |
msgconvert |
MhonArc |
Mail Header Analyzer |
|
thunderbird_parser |
readpst |
pst2ldif |
pst2dii |
|
BTRFS |
fatparser |
BTRFS Tools |
btrForensics |
|
usnjls |
fsntfsinfo |
CyLR |
AnalyzeMFT |
|
xfsinvutil |
xfsdump |
dmde |
USN Journal Parser |
|
|
|
|
xfsrestore |
|
dmde |
cacador |
bulk_extractor |
BEViewer |
|
|
|
findwild |
exiftool |
|
wordview |
docx2txt |
catppt |
catdoc |
|
|
|
|
xls2csv |
|
regfmount |
regfinfo |
regfexport |
auto_rip |
|
reglookup-timeline |
reglookup-recover |
reglookup |
regfreport |
|
yarp-print |
yarp-mount |
yarp-carver |
regripper |
|
|
|
|
yarp-timeline |
|
danderspritz_evtx |
bmc-tools |
bits_parser |
|
evtxinfo |
evtxexport |
evtx_dump_chunk_slack |
|
evtx_record_structure |
evtxinfo |
evtx_filter_records |
|
grokevt-addlog |
evtxtract |
evtx_templates |
|
grokevt-parselog |
grokevt-findlogs |
grokevt-dumpmsgs |
|
grokevt-ripdll |
Logon tracer |
lfle |
|
evtx_extract_record |
evtx_structure |
grokevt-builddb |
|
evtx_dump |
|
bulk_extractor |
bits_parser |
BEViewer |
afro |
|
dmde |
DDRescue-GUI |
Catfish file search |
catfish |
|
ddrescueview |
ddrescuelog |
ddrescue |
dd_rescue |
|
ext4magic |
ext3grep |
evtxtract |
DDRescue-GUI |
|
myrescue |
lfle |
foremost |
extundelete |
|
recoverdm |
qphotorec |
photorec_sorter |
photorec |
|
safecopy |
rifiuti-vista |
rifiuti2 |
RecuperaBit |
|
yarp-carver |
testdisk |
scrounge-ntfs |
scalpel |
|
evtxtract |
evolve |
damm |
aeskeyfind |
|
pdgmail |
muninn |
LiME |
lfle |
|
rsakeyfind |
rekall |
procmon2dot |
procdot |
|
vshot |
voldiff |
volatility |
swap_digger |
|
evtxtract |
evolve |
damm |
aeskeyfind |
|
pdgmail |
muninn |
LiME |
lfle |
|
rsakeyfind |
rekall |
procmon2dot |
procdot |
|
vshot |
voldiff |
volatility |
swap_digger |
|
CyberChef |
bbtrans |
bbharvest |
bbcrack |
|
rhino-jsc |
rhino-debugger |
rhino |
floss |
|
xxxswf |
swfmill |
extractswf |
|
jadx |
jadx-gui |
JD_GUI |
|
rhino-debugger |
rhino |
Jsdetox |
js-beautify |
|
|
|
|
rhino-jsc |
|
procmon2dot |
procdot |
muninn |
damm |
|
|
|
|
voldiff |
|
mraptor |
docx2txt |
catppt |
catdoc |
|
oledir |
olebrowse |
msodde |
mraptor3 |
|
olemeta |
olemap |
oleid |
oledump |
|
olevba3 |
olevba |
oletimes |
oleobj |
|
ViperMonkey |
vbashell |
vba2graph |
rtfobj |
|
|
|
xls2csv |
wordview |
|
pdf2ruby |
pdf2pdfa |
pdf2graph |
analyzepdf |
|
pdfdetach |
pdfdecrypt |
pdfdecompress |
pdfcop |
|
pdfid |
pdfgrep |
pdfextract |
pdfexplode |
|
pdfsh |
pdf-parser |
pdfmetadata |
pdfinfo |
|
|
|
peepdf |
pdftotext |
|
firetools |
Firejail Configuration Wizard |
firejail |
|
DensityScout |
clamscan |
chkrootkit |
bamfdetect |
|
munin |
multiscanner |
Lynis auditing tool |
Fenrir |
|
vtTool |
udcli |
rkhunter |
phpmalwarefinder |
|
|
|
|
yara |
|
xorsearch |
unxor |
NoMoreXOR |
brxor |
|
|
xortool-xor |
xortool |
xorstring |
|
bulk_extractor |
Bruteforece-Wallet |
BEViewer |
aircrack-ng |
|
dsniff |
cupp3 |
cupp |
cmospwd |
|
hashcat |
hashboy |
fcrackzipinfo |
fcrackzip |
|
John plugins |
John The Ripper |
hashcat plugins |
hashcat utils |
|
net-creds |
LaZagne |
lama |
Johnny |
|
|
Xhydra |
samdump2 |
pdfcrack |
|
dnstwist |
dhcpdump |
assetfinder |
arp-scan |
|
ipcalc |
hping3 |
hassh |
findserver |
|
Maltrail Server |
Maltrail Sensor |
lft |
iptraf |
|
netsed |
netdiscover |
ndisc6 |
masscan |
|
ssldump |
scapy |
passiveDNS |
nmap |
|
traceroute |
torify |
tcptraceroute |
sslsplit |
|
Zenmap (as root) |
Zenmap |
wondersharper |
whois |
|
ccze |
bro-cut |
bro |
BooLet |
|
lorg |
lnav |
grepcidr |
glogg |
|
Kibana |
Logstash |
Elastic Search |
multitail |
|
csvgrep |
csvformat |
csvcut |
csvclean |
|
csvpy |
csvlook |
csvjson |
csvjoin |
|
csvstat |
csvstack |
csvsql |
csvsort |
|
sql2csv |
in2csv |
datamash |
csvtool |
|
|
|
|
xls2csv |
|
dshell-decode |
dshell |
driftnet |
CapTipper |
|
Ettercap GUI |
Ettercap |
editcap |
dsniff |
|
msgsnarf |
mailsnarf |
filesnarf |
fatt |
|
pcapfix |
passiveDNS |
ngrep |
net-creds |
|
tcpflow |
tcpdump |
RDP replay |
PcapViz |
|
tcptrack |
tcptrace |
tcpstat |
tcpick |
|
Wireshark |
urlsnarf |
tshark |
tcpxtract |
|
websnort localhost |
websnort |
CapAnalysis localhost |
CapAnalysis |
|
Xplico localhost |
Xplico |
procmon2dot |
procdot |
|
kismet |
find3 |
airmon-ng |
airodump-ng |
|
|
|
|
LinSSID |
|
exifprobe |
exif |
driftnet |
Darktable |
|
ForensicPlate |
exiv2 |
exiftool |
exiftime |
|
MAT GUI |
mat |
jpeg_extract |
gocr |
|
outguess-histogram |
outguess-extract |
outguess |
OpenStego |
|
stegbreak |
SteCoSteg |
pngcrush |
pija |
|
steghide |
stegdetect |
stegdeimage |
stegcompare |
|
zsteg |
vinetto |
tifig |
stegsolve |
|
|
|
zsteg-reflow |
zsteg-mask |
|
android_triage |
adb2recGUI |
adb2rec |
adb |
|
e2fsdroid |
dmtracedump |
apktool |
Android Free Forensic Toolkit |
|
make_f2fs |
hprof-conv |
fastboot |
etc1tool |
|
|
systrace |
sload_f2fs |
mke2fs |
|
checkra1n |
artemis |
apollo |
|
iphoneBackupAnalyzer2 |
iOSbackupexaminer |
ios_bfu_triage |
|
sysdiagnose-mobilebackup |
sysdiagnose-mobileactivation |
sysdiagnose-appconduit |
|
sysdiagnose-networkprefs |
sysdiagnose-networkinterfaces |
sysdiagnose-net-ext-cache |
|
sysdiagnose-wifi-kml |
sysdiagnose-wifi-icloud |
sysdiagnose-uuid2path |
|
sysdiagnose-wifi-net |
sysdiagnose-sys |
sysdiagnose-wifi-plist |
|
sysdiagnose-mobilecontainermanager |
mib_parser.pl |
IdeviceBackup2 |
|
Whagodri |
Whademe |
Guasap_Forensic |
Whapa |
|
s3fs |
margaritashotgun |
aws_respond |
aws_ir |
|
|
|
Turbinia |
sshfs |
|
Entro.py |
Tor Browser |
OSINT browser |
OSINT Switcher |
|
danger-zone |
buster |
aquatone |
creepy |
|
findomain |
FinalRecon |
EmailHarvester |
dnstwist |
|
kamerka |
instaLooter |
Infoga |
gasmask |
|
onioff |
Maltego Memory Config |
Maltego |
linkedin2username |
|
pwnedornot |
pymeta |
Photon |
osif |
|
recon-ng |
recon-cli |
reconcat |
raven |
|
skiptracer |
SnapStory |
recon-web |
recon-rpc |
|
TorCrawl |
tinfoleak |
sublist3r |
spiderfoot |
|
userrecon |
URLextractor |
tweets_analyzer |
totalhash |
|
youtube-dl |
WhatBreach |
waybackpack |
userrecon-py |
|
Bruteforece-Wallet |
Bitcoin-Tool |
Bitcoin Bash Tools |
BitAddress |
|
Coinbin |
BX Bitcoin Explorer |
BTCscan |
BTCrecover |
|
|
|
keyhunter |
Electrum |
|
nfc-list |
mfoc |
mfcuk |
|
Pluma Text editor |
Mobius Forensics |
KeepNote |
CherryTree |
|
ScITE Text Editor |
RecordMyDesktop [GUI] |
RecordMyDesktop [CLI] |
Recoll |
|
Zim Desktop Wiki |
Take screenshot |
System Profiler and Benchmark |
Shutter |
