Cybersecurity tools directory
158 reviewed tools with install guidance, safe example commands and legal-use notes. Every record links to the official website, documentation and source; use tools only on systems you own or are authorised to test.
Autopsy is a graphical digital-forensics platform built on The Sleuth Kit that analyses disk images and recovers files,...
Binwalk analyses binary files, such as firmware images, to find and extract embedded files and compressed data.
ExifTool reads, writes and edits metadata in a very wide range of file types, such as images, PDFs and Office documents.
Foremost recovers files from disk images or raw data by their headers and footers, without needing a file system.
Plaso (log2timeline) extracts timestamps from many artefacts in a disk image and merges them into one super-timeline.
TestDisk repairs partition tables and recovers lost partitions; its companion PhotoRec recovers files by signature.
The Sleuth Kit is a library and collection of command-line tools for analysing disk images and file systems.
Velociraptor is an open-source endpoint monitoring, digital forensics and incident-response platform that collects artef...
Volatility 3 is the memory-forensics framework for analysing RAM captures to list processes, network connections and inj...
bulk_extractor scans disk images or files and extracts features such as email addresses, URLs and credit-card-like numbe...