Forensic & Malware Analysis

From ImHex

From sleuthkit

From CyLR

From drltrace

From mitmproxy

From ImHex

From mitmproxy

From ImHex

From mitmproxy

From Sherloq

From Sherloq

From Sherloq

From Sherloq

From Sherloq

From Sherloq

From Sherloq

From Kuiper

From Kuiper

From Kuiper

Edit text files, XML, HTML, Unicode and UTF-8 files, C/C++ source code, PHP, etc. Unlimited undo and powerful editing and scripting tools.

From Kuiper

From Kuiper

From CyLR

Sandbox for analyzing Android malware.

Interactive malware sandbox for real-time analysis and threat intelligence.

Digital forensics platform and graphical interface for The Sleuth Kit and other tools.

From ImHex

Comprehensive digital forensics and incident response platform.

Digital forensics platform for comprehensive incident response.

From dynStruct

Bluetooth honeypot for monitoring and capturing malicious activity.

From ImHex

From dynStruct

Finds Cross-Site Scripting (XSS) vulnerabilities in web applications.

From dynStruct

From drltrace

Ubuntu-based tool that provides a complete forensic environment with a graphical interface.

Malware sandbox designed for executing and analyzing malicious files.

Java decompiler supporting features up to Java 14.

From REKALL

A cross-platform GUI web debugging proxy for viewing intercepted HTTP and HTTPS/SSL live traffic.

From Sherloq

From dynStruct

Automated malware analysis and detection in an isolated environment.

Automated DFIR software for investigating malware, ransomware, and account takeovers.

Powerful open-source XSS scanner for automation.

From ImHex

From ImHex

From ImHex

From Kuiper

Framework for orchestrating forensic collection, processing, and export.

From drltrace

Malware analysis tool that helps distribute files for analysis.

From Kuiper

Tool to extract forensic data from Firefox, Iceweasel, and Seamonkey browsers.

A debugger for reverse engineers and security analysts.

From dynStruct

From drltrace

Free Data Recovery Software Recover up to 2GB data for free on Windows 11/10/8/7

From dynStruct

From ImHex

Signature-based YARA rules for detecting threats across multiple platforms.

Suite of digital investigation products by Guidance Software.

From RegRipper4.0

Tool for fixing acquired Windows Event Log files.

From dynStruct

Demonstrates techniques for bypassing AppLocker and executing commands with PowerShell diagnostic scripts.

Automates cybersecurity reporting with open-source tools and templates.

A simple DOM-based XSS vulnerability scanner.

Instantly find exploits from local and online databases.

From dynStruct

From Kuiper

From CyLR

Searches Git repositories for sensitive data.

From REKALL

Introduction to using Gscript as a dropper tool in red team operations.

From ImHex

From ImHex

Tool for collecting and parsing Windows artifacts for digital forensics.

From Kuiper

A hex editor which, additionally to raw disk editing and modifying of main memory (RAM), handles files of any size

Provides in-depth static and dynamic analysis of files.

Hybrid Analysis is a Malaware analysis service it's free and has ai or someone does it for free it's reliable and more accurate than total virus.

From ImHex

From ImHex

From ImHex

From ImHex

AI-based IT security platform for identifying and stopping advanced malware.

Brazilian Federal Police forensic investigation tool.

Open-source tool for analyzing disk images and file systems.

From ImHex

From CyLR

From ImHex

From ImHex

Python script to test for JWT vulnerabilities.

From Kuiper

Distributed Python system to help hunt for new malware using Yara rules.

Library for parsing Windows Event Logs for forensic analysis.

From ImHex

Library for accessing and parsing Windows NT Registry files.

From sleuthkit

Tool for creating timelines for forensic analysis.

From drltrace

From ImHex

Tool for automatic analysis of malware behavior using machine learning.

Platform for uploading, searching, and downloading malware samples.

Analyzes malicious network traffic to detect malware activity.

Malware detection and prevention for advanced cyber threats.

Malware hunting tool for analysis and detection.

From ImHex

From dynStruct

Static analysis framework for extracting key characteristics from files.

From ImHex

From ImHex

SAST and malware analysis tool for Android APKs.

Forensic tool for gathering traces from Android and iOS devices.

From Kuiper

From ImHex

From Sherloq

Yara module for Node.js for scanning with Yara rules.

Malware analysis platform with advanced threat detection.

From Sherloq

From CyLR

From CyLR

DFVFS-backed viewer for file extraction and viewing.

PhotoRec is file data recovery software designed to recover lost files including video, documents and archives from hard disks (Mechanical Hard drives, Solid State Drives...), CD-ROMs, and lost pictures (thus the Photo Recovery name) from digital camera memory.

From dynStruct

Multithreaded YARA scanner for incident response or malware zoos.

Python wrapper for Libemu for shellcode analysis.

From REKALL

Fuzzes query strings to identify security vulnerabilities.

Powerful framework for reverse engineering and binary analysis.

A reverse engineering tool for Windows executable analysis.

Recover your deleted files quickly and easily. Accidentally deleted an important file? Lost files after a computer crash? No problem - Recuva recovers files from your Windows computer, recycle bin, digital camera card, or MP3 player!

Host investigation and data acquisition tool.

Framework for reverse engineering Flutter apps.

From RegRipper4.0

From REKALL

From Forensic Tools

Detailed research on using CMSTP.exe for bypassing security restrictions and executing arbitrary code.

From ImHex

From Kuiper

Another Malaware sandbox and might be a better option if your testing runs.

Generates YARA rules for various string and encoded malware variations.

Anti-forensic Linux kernel module that acts as a USB port kill-switch.

Open-source tools for forensic artifact and image analysis.

A deep analysis tool for malicious files using ClamAV and YARA rules.

From ImHex

A machine learning tool for ranking strings for malware analysis.

A powerful command-line packet analyzer, along with libpcap for network traffic capture.

Data recovery software for recovering lost partitions and undeleting files.

From ImHex

In-depth threat intelligence reports and services.

From sleuthkit

From Sherloq

From sleuthkit

Dynamic binary analysis library with emulation capabilities.

Framework for automating forensic processing in cloud environments.

From Sherloq

From Kuiper

USB capture tool for Linux, used for monitoring USB traffic.

USB capture tool for Windows, useful for monitoring USB traffic.

Tool to detect and exploit Blind XSS vulnerabilities.

From Sherloq

Framework for memory forensics and analysis of volatile memory.

Framework for extracting data from volatile memory for system state analysis.

Automatically generates AV byte signatures for similar binaries.

From CyLR

A collection of XSS payloads for exploiting web vulnerabilities.

From ImHex

From sleuthkit

From drltrace

From drltrace

From sleuthkit

From sleuthkit

From sleuthkit

From sleuthkit

From sleuthkit

From sleuthkit

Explains one-liner PowerShell commands for downloading and executing malicious payloads.

Universal hex editor for forensics, data recovery, and IT security tasks.

A hexadecimal editor, helpful in the realm of computer forensics, data recovery, low-level data processing, and IT security

Cloud-native security platform for detecting and preventing security threats.

A case study on exploiting Windows Script Host (WSH) injection for command execution.

From ImHex

A simple XSS scanner for detecting vulnerabilities.

A tool for exploiting and testing XSS vulnerabilities in web apps.

Tool for testing and exploiting XSS vulnerabilities.

Creates Yara signatures from malware to identify similar samples.

From ImHex

From REKALL

Tool to decompress malware samples for running YARA rules.

A tool for creating YARA rules quickly to isolate malware families.

Management portal for LoKi scanner with a centralized database.

Yara bindings for Rust supporting various features like rule compilation.

Automatically generates YARA rules for malware repositories.

Management portal for Yara rule-based malware scanning.

Generates YARA rules by extracting strings from malware files.