awesome-forensicstools
Forensic toolkit
A curated collection of digital forensics tools and resources.
Awesome list of digital forensic tools
487 stars
23 watching
81 forks
last commit: about 4 years ago
Linked from 1 awesome list
awesomeawesome-listdigital-forensicsforensic-analysisforensicsinvestigative-journalismmetadata
Collections of tools | |||
| osintframework.com | OSINT Tools - huge collection of open source intelligence tools | ||
Satellite and mapping services | |||
| bing.com/maps | Bing Maps, satellite and mapping service, has more recent and sharper imagery than Google in several areas such as Iraq, | ||
| mvexel.dev.openstreetmap.org/bing | Date of the Bing imagery? Check: | ||
| synnatschke.de/geo-tools/coordinate-converter.php | conversion of coordinates, convert geographic coordinates between different notation styles, | ||
| browse.digitalglobe.com/imagefinder | DigitalGlobe, paid satellite imagery, but preview available for free via the catalogus, | ||
| geograph.org | Geograph, georeferenced images, | ||
| geonames.org | GeoNames, an online database of (various spellings of) locations names, | ||
| google.com/earth/download/gep/agree.html | Google Earth Pro, | ||
| ge-map-overlays.appspot.com/bing-maps/aerial | Bing Maps satellite imagery layer: | ||
| maps.google.com | Google Maps, | ||
| wego.here.com | HERE WeGo, mapping service which includes more recent satellite imagery from e.g. Iraq, | ||
| mapillary.com | Mapillary, crowdsourced street-level photos, | ||
| OpenStreetCam, crowdsourced street-level photos, | |||
| openstreetmap.org | OpenStreetMap, | ||
| panoramio.com | Panoramio, (no longer available) | ||
| apps.sentinel-hub.com/sentinel-playground | Sentinel Playground, | ||
| terraserver.com | TerraServer, also a commercial company selling satellite imagery, but previews available: | ||
| wikimapia.org | Wikimapia, crowdsourced information related to geographic locations, works like Google Maps but possibility to switch between Google, Bing, OSM, etc., | ||
| yandex.ru | Yandex Maps, | ||
Geobased searches | |||
| echosec.net | ($) Echosec, (Instagram, Twitter, VK, Foursquare) | ||
| liveuamap.com | LiveUAmap, aggregated open source information, | ||
| afghanistan.liveuamap.com | Afghanistan: | ||
| isis.liveuamap.com | Islamic State: | ||
| syria.liveuamap.com | Syria: | ||
| ukraine.liveuamap.com | Ukraine: | ||
| warwire.net | ($) WarWire, (Twitter, Instagram, VK, YouTube) | ||
| yomapic.com | Yomapic, | ||
Geobased searches / Geobased search on: | |||
| youtube.github.io/geo-search-tool/search.html | YouTube | ||
Documents metadata | |||
| https://github.com/haypo/hachoir3] | Hachoir3 [ ( ). Python library for metadata extraction from binary streams including MS Office documents | ||
| list of metadata extractors | Forensic wiki | ||
| github | 2,590 | 3 months ago | Metadata extractor |
Images, videos and metadata / Image and videos tools | |||
| amnestyusa.org/sites/default/custom-scripts/citizenevidence | Amnesty YouTube Dataviewer, Reverse image (still of video) search and exact uploading time, | ||
| images.google.com | Google Reverse Image Search, (also available as Chrome and Firefox add-on) | ||
| tineye.com | TinEye, | ||
| example | Yandex, be aware that sometimes Russia’s Yandex has better results ( than Google’s reverse image search, | ||
Images, videos and metadata / Photo/video metadata (EXIF and e.t.c.) | |||
| exif.regex.info/exif.cgi | Jeffrey's Image Metadata Viewer, to view the metadata of (online) photos, | ||
| irfanview.com | Irfanview, | ||
| elevenpaths.com | Foca. Metadata extraction tool | ||
| Goofile | . Download and extract metadata | ||
| Splunk | Splunk and Metadata automation | ||
| fotoforensics.com | Foto Forensics, | ||
| https://29a.ch/photo-forensics/#level-sweep | Image Forensics, | ||
| http://www.invid-project.eu/invid-releases-fake-video-news-debunker-firefox-provides-code-open-source-mit-licence/ | InVID, verification plugin to help journalists verify images and videos and debunk fake news, [invid-project.eu] ) (plugins for and Firefox ( , , | ||
Images, videos and metadata / Guides | |||
| firstdraftnews.com/resource/visual-verification-guide-photos | First Draft News, | ||
Social media / Multiple social networks | |||
| namechk.com | NacheChk. Same name check over dozens of social networks | ||
Social media / Facebook | |||
| stalkscan.com | Facebook Scanner, automatically advanced searched for Facebook profiles, | ||
| netbootcamp.org/facebook.html | Facebook Search Tool, find accounts by name, email, screen name and phone, | ||
| lookup-id.com | Lookup-ID, another very complete Facebook search tool, | ||
| graph.tips | Facebook Graph tips, automatically advanced searches for Facebook profiles, | ||
| facebook.com/livemap | Facebook Livemap, live broadcasts around the world, mapped on the world, | ||
| fbdown.net | Facebook Video Downloader Online, for downloading Facebook videos, | ||
| http://inteltechniques.com/osint/menu.facebook.html | Facebook search tool, advanced search tool for Facebook profiles, | ||
| peoplefindthor.dk | peoplefindThor, advanced search tool for Facebook profiles, | ||
Social media / LinkedIn | |||
| socilab.com | Socilab, allows users to visualise and analyse your own LinkedIn network, | ||
Social media / Snapchat | |||
| here | Snap Map, a searchable map of geotagged snaps, via the mobile application, read how | ||
Social media / Tumblr | |||
| studiomoh.com/fun/tumblr_originals | Tumblr Originals, find posts uploaded by the account, thus excluding reblogs, | ||
Social media / Twitter | |||
| twitter.com/search-advanced | advanced search, | ||
| C | , | ||
Social media / YouTube | |||
| amnestyusa.org/sites/default/custom-scripts/citizenevidence | Amnesty YouTube Dataviewer, Reverse image (still of video) search and exact uploading time, | ||
Transport / Aircraft | |||
| opensky-network.org | OpenSky. Free aircraft tracking project | ||
| military aircraft | ADS-B Exchange Global Radar, which also includes a number of , | ||
| flightradar24.com | Flightradar24, to track (mostly) civilian aircraft currently in the air around the world, archive goes 12 months back but ($), | ||
| radarbox24.com | RadarBox, worldwide coverage, includes private and military jets, | ||
| flightview.com | FlightView, | ||
Transport / Boats | |||
| marinetraffic.com | MarineTraffic, | ||
| vesselfinder.com | VesselFinder, | ||
| fleetmon.com | Fleet Min, | ||
Transport / Trains | |||
| raildar.fr/#lat=46.810&lng=6.880&zoom=6 | France, full interactive map of the French railway system with live positions of trains, plus accuracy of schedule, | ||
| http://spoorkaart.mwnn.nl | Netherlands, full interactive map of the Dutch railway system, including live positions of trains, | ||
Transport / Misc | |||
| wikiroutes.info | WikiRoutes, public transport database, | ||
Date and time | |||
| suncalc.net | SunCalc, to make an approximation of the time of the day based on shadows, | ||
| wolframalpha.com | Weather, | ||
Date and time / Whois, IP lookups, website analysis | |||
| Censys | |||
| CentralOps | Central Ops, | ||
| crt.sh | Certificate search, | ||
| completedns.com/dns-history | Complete DNS, historical DNS records, | ||
| buildwith.com | BuildWith. Online database of web technologies used on website | ||
| DomainTools | Domain Tools, | ||
| IXMaps | IXMaps, | ||
| Network-Tools | |||
| Open Site Explorer | |||
Date and time / People search | |||
| peekyou.com | Peekyou, | ||
| pipl.com | Pipl, the world largest people search engine, find persons behind an e-mail address, social media username, or phone number, | ||
| yasni.com | Yasni, | ||
| zabasearch.com | Zaba Search, only US, | ||
| publicrecords.searchsystems.net | |||
| cemetery.canadagenweb.org/search.html | |||
| opencorporates.com | |||
Date and time / Networks | |||
| Robtex | |||
| BGPView | to find networks and it's prefixes | ||
| SearchIRC | |||
| Shodan Computer Search | |||
| Utrace | |||
| ViewDNS | |||
| D | , | ||
| SpyOnWeb | |||
| whois.net | Whois, for domain search and information, or | ||
Guides and handbooks / Weapons | |||
| itrace.conflictarm.com | Open guide called “Itrace” by Conflict Armament Research, lots of information on different kinds of munitions and weapons presented graphically on a map format, | ||
Data visualization | |||
| databasic.io/en | DataBasic.io, web tools for beginners that introduce concepts of working with data, | ||
| datawrapper.de | DataWrapper, easy to use chart and mapping tool, | ||
| maptia.com | Maptia, | ||
| vis.occrp.org | Visual investigative scenarios, | ||
| app.rawgraphs.io | RAWGraphs, free webtool to quickly visualize your data, | ||
Online security and privacy | |||
| twofactorauth.org | Check for every digital service you use whether you have enabled two factor authentication (2FA), | ||
| https://securityinabox.org/en/ | Security in a box guide: | ||
Search engines which protect privacy | |||
| duckduckgo.com | DuckDuckGo, Internet search engine, protecting privacy, | ||
| qwant.com | Qwant, Internet search engine, protecting privacy, | ||
List of sources per country / Iraq | |||
| umap.openstreetmap.fr | Provinces of the so-called Islamic State, | ||
List of sources per country / Russia | |||
| searchface.ru | SearchFace. Face search services for Vkontakte | ||
List of sources per country / Russia / OSINT guides | |||
| analyze person accounts | How to use google and other online instruments to . Russian language | ||
| API for OSINT purposes | How to use social networks | ||
List of sources per country / Syria | |||
| reddit.com | Opposition media, see this excellent list compiled by Noor Nahas of multimedia sources from Syrian opposition groups, | ||
| umap.openstreetmap.fr | Provinces of the so-called Islamic State, | ||
stuhli/awesome-event-ids
drewnoakes/metadata-extractor-dotnet