Skip to content
@fox-it

Fox-IT

Part of NCC Group

Popular repositories Loading

  1. dissect dissect Public

    Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (pa…

    977 72

  2. aclpwn.py aclpwn.py Public

    Active Directory ACL exploitation with BloodHound

    Python 721 108

  3. Invoke-ACLPwn Invoke-ACLPwn Public

    PowerShell 520 88

  4. log4j-finder log4j-finder Public

    Find vulnerable Log4j2 versions on disk and also inside Java Archive Files (Log4Shell CVE-2021-44228, CVE-2021-45046, CVE-2021-45105)

    Python 436 94

  5. cve-2019-1040-scanner cve-2019-1040-scanner Public

    Python 294 56

  6. dissect.cstruct_legacy dissect.cstruct_legacy Public

    A no-nonsense c-like structure parsing library for Python

    Python 241 24

Repositories

Showing 10 of 86 repositories
  • dissect.util Public

    A Dissect module implementing various utility functions for the other Dissect modules.

    Python 3 Apache-2.0 7 6 8 Updated Apr 17, 2025
  • dissect.archive Public

    A Dissect module implementing parsers for various archive and backup formats.

    Python 0 AGPL-3.0 2 1 2 Updated Apr 17, 2025
  • dissect.target Public

    The Dissect module tying all other Dissect modules together. It provides a programming API and command line tools which allow easy access to various data sources inside disk images or file collections (a.k.a. targets).

    Python 57 AGPL-3.0 57 118 (1 issue needs help) 24 Updated Apr 17, 2025
  • dissect-workflow-templates Public

    Workflow templates for the dissect projects

    2 3 0 0 Updated Apr 17, 2025
  • acquire Public

    acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.

    Python 101 AGPL-3.0 33 36 (6 issues need help) 7 Updated Apr 16, 2025
  • dissect.ntfs Public

    A Dissect module implementing a parser for the NTFS file system, used by the Windows operating system.

    Python 9 AGPL-3.0 5 2 1 Updated Apr 16, 2025
  • dissect.qnxfs Public

    A Dissect module implementing a parser for the QNX4 and QNX6 file systems, commonly used in the QNX RTOS.

    Python 0 AGPL-3.0 0 0 0 Updated Apr 15, 2025
  • dissect.cstruct Public

    A Dissect module implementing a parser for C-like structures.

    Python 46 Apache-2.0 18 8 (1 issue needs help) 3 Updated Apr 11, 2025
  • dissect.esedb Public

    A Dissect module implementing a parser for Microsofts Extensible Storage Engine Database (ESEDB), used for example in Active Directory, Exchange and Windows Update.

    Python 19 Apache-2.0 8 3 2 Updated Apr 9, 2025
  • dissect.fve Public

    A Dissect module implementing a parsers for full volume encryption implementations, currently Microsoft's Bitlocker Disk Encryption (BDE) and Linux Unified Key Setup (LUKS1 and LUKS2).

    Python 3 AGPL-3.0 2 0 0 Updated Apr 7, 2025