Havuz

Open-source Telegram chat exporter, deleted & edited message logger, and OSINT forensics archiver. Save chat history, capture deleted messag

⚔️ Suite de hacking ético 100% client-side: +100 herramientas de ciberseguridad, forense, ingeniería inversa y anti-phishing que corren en t

A swarm of forensic agents, on your machine, on the record. Open-source agentic digital forensics and incident response under the AGPL: agen

Open-source digital forensics and incident response for AI agents (Claude Code, Codex, Cursor, Gemini, Copilot…). One command: detect → coll

Interactive static pattern discovery tool to locate structures from frequent patterns

Browser-based CTF toolkit. Drop a file, every check runs at once, nothing uploads. Hand-written Rust/WASM core, zero dependencies.

Your agentic system rescue companion, especially for broken host Hermes. Hermes Agent on a USB stick — zero install & portable, hot-swappabl

Don't trust an autoresearch paper at face value. Reviewer-side integrity forensics (self-consistency + fabrication), deterministic verdict.

本地优先的取证工作台 - CTF/MISC/编码解码/元数据

Static file analyzer for malware triage — hashing, binary headers, entropy, signature rules, and IOC matching.

VERDICT — a DFIR agent (Claude Code as the engine) that produces a signed, offline-verifiable verdict. SANS Find Evil! 2026.

Laravel audit log & change history with real actor attribution (user / job / command / scheduler), cross-model change traces, time machine,

An analytics tool to explore Claude code usage patterns, errors, and token costs

Your AI Assistant for Weekend Forensics

A professional, high-fidelity de-anonymization and vulnerability diagnostic framework. Features a zero-coupling modular architecture for bro

CLI tool for extracting files from damaged, corrupted, or encrypted APFS disk images. Written in C11, macOS-first (Linux supported). Handles

面向小白用户的 CTF / 逆向 Skills 整合包：自动分流、头脑风暴、教学模式、比赛模式、只提示模式

A vendor-neutral collection of Sigma, YARA, and Suricata rules for detecting compromise of LLM applications, MCP servers, ML supply chains,

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process with

Sovereign OSINT platform for modern investigators. Local-first, open-source, and privacy-centric.

Agentic DFIR

What's hiding inside your ~/claude/ folder?