Pcapxray❄️ PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction
Stars: ✭ 1,096 (+6347.06%)
JoincapMerge multiple pcap files together, gracefully.
Stars: ✭ 159 (+835.29%)
GosintOSINT Swiss Army Knife
Stars: ✭ 401 (+2258.82%)
SngrepNcurses SIP Messages flow viewer
Stars: ✭ 605 (+3458.82%)
PacketqA tool that provides a basic SQL-frontend to PCAP-files
Stars: ✭ 363 (+2035.29%)
IfuseA fuse filesystem to access the contents of iOS devices
Stars: ✭ 433 (+2447.06%)
DokanyUser mode file system library for windows with FUSE Wrapper
Stars: ✭ 4,055 (+23752.94%)
Docker ExplorerA tool to help forensicate offline docker acquisitions
Stars: ✭ 328 (+1829.41%)
ExfatFree exFAT file system implementation
Stars: ✭ 528 (+3005.88%)
MalconfscanVolatility plugin for extracts configuration data of known malware
Stars: ✭ 327 (+1823.53%)
TurbiniaAutomation and Scaling of Digital Forensics Tools
Stars: ✭ 461 (+2611.76%)
Fuse RsRust library for filesystems in userspace (FUSE)
Stars: ✭ 735 (+4223.53%)
Packet AgentA toolset for network packet capture in Cloud/Kubernetes and Virtualized environment.
Stars: ✭ 419 (+2364.71%)
UsbripTracking history of USB events on GNU/Linux
Stars: ✭ 903 (+5211.76%)
PigA Linux packet crafting tool.
Stars: ✭ 384 (+2158.82%)
SniffglueSecure multithreaded packet sniffer
Stars: ✭ 651 (+3729.41%)
Infosec referenceAn Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.
Stars: ✭ 4,162 (+24382.35%)
Node pcaplibpcap bindings for node
Stars: ✭ 849 (+4894.12%)
Swap digger swap_digger is a tool used to automate Linux swap analysis during post-exploitation or forensics. It automates swap extraction and searches for Linux user credentials, web forms credentials, web forms emails, http basic authentication, Wifi SSID and keys, etc.
Stars: ✭ 354 (+1982.35%)
S3fs FuseFUSE-based file system backed by Amazon S3
Stars: ✭ 5,733 (+33623.53%)
Mac aptmacOS Artifact Parsing Tool
Stars: ✭ 329 (+1835.29%)
OsxfuseFUSE extends macOS by adding support for user space file systems
Stars: ✭ 7,184 (+42158.82%)
Awesome FuseA curated list of awesome Fuse applications, articles, and plugins
Stars: ✭ 314 (+1747.06%)
ArkimeArkime (formerly Moloch) is an open source, large scale, full packet capturing, indexing, and database system.
Stars: ✭ 4,994 (+29276.47%)
Ir RescueA Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
Stars: ✭ 311 (+1729.41%)
SeqboxA single file container/archive that can be reconstructed even after total loss of file system structures
Stars: ✭ 480 (+2723.53%)
TcpreplayPcap editing and replay tools for *NIX and Windows - Users please download source from
Stars: ✭ 745 (+4282.35%)
Awesome ForensicsAwesome Forensics Resources. Almost 300 open source forensics tools, and 600 blog posts about forensics.
Stars: ✭ 446 (+2523.53%)
KauditAlcide Kubernetes Audit Log Analyzer - Alcide kAudit
Stars: ✭ 23 (+35.29%)
MemlabsEducational, CTF-styled labs for individuals interested in Memory Forensics
Stars: ✭ 696 (+3994.12%)
CatfsCache AnyThing filesystem written in Rust
Stars: ✭ 404 (+2276.47%)
HomerHOMER - 100% Open-Source SIP / VoIP Packet Capture & Monitoring
Stars: ✭ 855 (+4929.41%)
S3monkeyA Python library that allows you to interact with Amazon S3 Buckets as if they are your local filesystem.
Stars: ✭ 399 (+2247.06%)
DbxfsUser-space file system for Dropbox
Stars: ✭ 673 (+3858.82%)
ZeekZeek is a powerful network analysis framework that is much different from the typical IDS you may know.
Stars: ✭ 4,180 (+24488.24%)
TapirxFree and open-source medical device discovery and identification
Stars: ✭ 19 (+11.76%)
SvfsThe Swift Virtual File System
Stars: ✭ 375 (+2105.88%)
NfstreamNFStream: a Flexible Network Data Analysis Framework.
Stars: ✭ 622 (+3558.82%)
InfinitThe Infinit policy-based software-defined storage platform.
Stars: ✭ 363 (+2035.29%)
GensumPowerful checksum generator!
Stars: ✭ 12 (-29.41%)
SiftSIFT
Stars: ✭ 355 (+1988.24%)
HindsightWeb browser forensics for Google Chrome/Chromium
Stars: ✭ 589 (+3364.71%)
Goofysa high-performance, POSIX-ish Amazon S3 file system written in Go
Stars: ✭ 3,932 (+23029.41%)
KameneNetwork packet and pcap file crafting/sniffing/manipulation/visualization security tool. Originally forked from scapy in 2015 and providing python3 compatibility since then.
Stars: ✭ 827 (+4764.71%)
X11fsA tool for manipulating X windows
Stars: ✭ 330 (+1841.18%)
DiffyDiffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
Stars: ✭ 555 (+3164.71%)
Fusell SeedFUSE (the low-level interface) file system boilerplate 📂 🔌 💾
Stars: ✭ 9 (-47.06%)
SecurefsFilesystem in userspace (FUSE) with transparent authenticated encryption
Stars: ✭ 518 (+2947.06%)
Fuse StudioFuse Studio is a visual desktop tool suite for working with the Fuse framework.
Stars: ✭ 312 (+1735.29%)
Distribyted📂 ➡️ 📺 🎶 🎮 Torrent client with on-demand file downloading as a filesystem.
Stars: ✭ 791 (+4552.94%)
HackdroidAndroid Apps, Roms and Platforms for Pentesting
Stars: ✭ 310 (+1723.53%)
Operative Frameworkoperative framework is a OSINT investigation framework, you can interact with multiple targets, execute multiple modules, create links with target, export rapport to PDF file, add note to target or results, interact with RESTFul API, write your own modules.
Stars: ✭ 511 (+2905.88%)
Tr1pdtamper resistant audit log
Stars: ✭ 13 (-23.53%)
PonifusePonifies files at load and de-ponifies them at write time (fuse module)
Stars: ✭ 11 (-35.29%)
Fuse CopyfsCopyFS is the copy-on-write (COW) versioned filesystem for FUSE. Years ago I added features to CopyFS 1.0, then 1.0.1 came out and I never bothered to forward-port my changes. Now I have. Master is 1.3.1M, which is CopyFS 1.0.1 + 1.3M
Stars: ✭ 24 (+41.18%)