Digital Forensics

MacinHashPython

Convert macOS plist password files to hashcat/John the Ripper compatible hash files for password cracking.

canarytokendetectorShell

A script to detect and remove Thinkst Canarytokens from files using signature-based detection.

cuckoo-modified-apiPython

A Python library for interfacing with the cuckoo-modified malware sandbox via its API.

FFRI Dataset ScriptsPython

Scripts to create malware analysis datasets in the same format as the FFRI Dataset, extracting features from executable files.

AMExtractorC

Extracts physical memory from Android devices without requiring kernel source code or LKM support.

Malware OrganiserPython

A Python tool that organizes malware and benign files into a structured database with tagging and querying capabilities.