The most advanced, powerful and yet beautiful penetration testing distribution ever created.Lined up with ultimate collection of tools for pro Ethical Hackers and Cyber Security Experts.
Platforms
- Linux
United Kingdom


+5
Oxygen Forensic Suite 2012 - Mobile forensic software for cell phones, smartphones and other mobile devices.
Cost / License
- Paid
- Proprietary
Platforms
- Windows
Program written in python that attempts to reconstruct and recover data from disks or disk images. Recommended for use from disk images, works well with ddrescue. Currently only works on ntfs filesystems. Can be ran on any operating system that supports python.
Cost / License
- Free
- Open Source (GPL-3.0)
Application typeApplication types
Platforms
- Mac
- Windows
- Linux
- BSD

This is also a disk editor. It comes with a very clean and usable UI and offers comprehensive information about NTFS.
Cost / License
- Paid
- Proprietary
Platforms
- Windows
United States



Free USB Analyzer is a non-intrusive software USB sniffer and protocol analyzer for Windows.
Cost / License
- Freemium
- Proprietary
Platforms
- Windows
United Kingdom


Cost / License
- Free
- Proprietary
Platforms
- Windows
Israel

This application allows to read files containing Windows 9x,NT,2K,XP,2K3 registry hives. It extracts many useful information about configuration and windows installation settings of host machine.
Cost / License
- Free
- Proprietary
Platforms
- Windows
Czechia
EU



Keep the Apple Silicon version, trash the x86_64. Duplicate apps, ready for deletion. AppVoid shows which app is the newest and best to keep, personalized for your Mac. Identify the technology running behind any apps user interface, whether it's SwiftUI, Object Pascal, wxWidgets etc.
Cost / License
- Free
- Proprietary
Platforms
- Mac
United States

OSForensics lets you discover all relevant forensic evidence from a system, quickly and easily.
Cost / License
- Paid
- Proprietary
Platforms
- Windows
Australia


+4
yaru started as a simple version of a registry viewer and has grown in capability as it matured. yaru is designed to be a portable Windows registry hive parser and viewer. Currently there are compiled versions of yaru that will run on Windows, Linux and OS-X.
Cost / License
- Paid
- Proprietary
Platforms
- Mac
- Windows
- Linux
United States

Configuration Auditing of IT Infrastructure
Netwrix disruptively changes the way configuration auditing is done, exclusively focuses on this #1 rising security technology and offers the most simple, efficient and affordable solution.
Netwrix solution provides detection of secur.
Cost / License
- Paid
- Proprietary
Platforms
- Windows
United States



The Virtual USB Analyzer is a free and open source tool for visualizing logs of USB packets, from hardware or software USB sniffer tools. As far as we know, it's the world's first tool to provide a graphical visualization along with raw hex dumps and high-level protocol...
Cost / License
- Free
- Open Source
Alerts
- Discontinued
Platforms
- Mac
- Windows
- Linux
- Python

PDF Auditor is a native macOS application designed for developers, QA engineers, and security analysts who need to see "under the hood" of a PDF file.
Cost / License
- Freemium
- Proprietary
Application typeApplication types
Platforms
- Mac


+10
DEFT (Digital Evidence & Forensic Toolkit) is a customised distribution of the Ubuntu live Linux CD. It is an easy-to-use system that includes excellent hardware detection and some of the best open-source applications dedicated to incident response and computer forensics.
Cost / License
- Free
- Open Source
Alerts
- Discontinued
Platforms
- Linux


+3
The email examiner software changed view of almost all forensic expert that email evidence investigation can be performed in low cost & short span of time. The mail examiner utility has multiple features like recover email of different email storage data & collect them...
Cost / License
- Paid
- Proprietary
Platforms
- Windows
United States

Patriot is a 'Host IDS' tool which allows real time monitoring of changes in Windows systems or Network attacks.
Cost / License
- Free
- Proprietary
Platforms
- Windows
Cado Live is a free bootable USB image to image disks to cloud storage such as AWS, Azure and Google Cloud.
Cost / License
- Free
- Proprietary
Application type
Platforms
- Mac
- Windows
- Linux
United Kingdom



Open-source suite for Windows removing 255 forensic artifacts, covering logs, registry, NTFS, browser traces, RAM, encrypted volume keys, and more with zero-footprint design.
Cost / License
- Free
- Open Source (GPL-3.0)
Application typeApplication types
Platforms
- Windows
Ethiopia

Acquire and analyze WhatsApp communication histories from multiple sources. Extract WhatsApp databases from Android phones with and without root access, download WhatsApp backups from iCloud Drive or extract from local and cloud iOS system backups.
Cost / License
- Paid
- Proprietary
Platforms
- Windows
Blockchain forensics tool tracing stolen crypto across 6 EVM chains and Bitcoin with multi-hop fund tracking, sanctions screening, AI incident reports, and wallet monitoring.
Cost / License
- Freemium
- Proprietary
Platforms
- Online
- Software as a Service (SaaS)
Ukraine



CapLoader performs indexing of PCAP/PcapNG files and visualizes their contents as a list of TCP and UDP flows. Users can select the flows of interest and quickly filter out those packets from the loaded PCAP files.
Cost / License
- Freemium
- Proprietary
Platforms
- Windows
Sweden
EU


+1
Drive Badger is a software tool for data exfiltration – which means, for copying data from the computer to external USB drive. But unlike many other tools from IT security area, Drive Badger is not a Proof-of-Concept kind of tool, bringing some groundbreaking techniques.
Cost / License
- Free
- Open Source
Platforms
- Mac
- Windows
- Linux

Timesketch is an open-source tool for collaborative forensic timeline analysis. Using sketches you and your collaborators can easily organize your timelines and analyze them all at the same time. Add meaning to your raw data with rich annotations, comments, tags and stars.
Cost / License
- Free
- Open Source (Apache-2.0)
Platforms
- Docker
- Self-Hosted
United States


+1











































































