antiforensics 开源项目推荐（30 个）

bleachbit /bleachbit

适用于 Windows 和 Linux 的 BleachBit 系统清理工具

aforensics /HiddenVM

HiddenVM — Use any desktop OS without leaving a trace.

shadawck /awesome-anti-forensic

Tools and packages that are used for countering forensic activities, including encryption, steganography, and anything that modify attributes. This all includes tools to work with anything in general that makes changes to a system for the purposes of hiding information.

anvilsecure /ulexecve

ulexecve is a userland execve() implementation which helps you execute arbitrary ELF binaries on Linux from userland without the binaries ever having to touch storage. This is useful for red-teaming and anti-forensics purposes.

bakad3v /Android-AntiForensic-Tools

An application designed to silently protect user data from powerful adversaries.

vxfemboy /wipedicks

Wipe files and drives securely with random ASCII dicks

Drewsif /wipedicks

Wipe files and drives securely with randoms ASCII dicks

Anish-M-code /Metadata-Remover

A simple Metadata Removal Tool for images and videos using exiftool and ffmpeg in C and Python3.

levlesec /cellebrite-decryptor

A python script to decrypt Cellebrite UFED EPR files.

AndrewRathbun /Anti-Forensics-VHDX

A sample VHDX file with multiple verbose examples of forensic and anti-forensics artifacts. Meant to be basic and can be expanded upon. Please add a new issue if you have an idea for something to add.

levlesec /cellebrite-ioc

An IOC collection for the Cellebrite UFED forensic toolkit.

kpcyrd /tr1pd

tamper resistant audit log

phosphore /BURN

[WIP] Anti-Forensics ToolKit to clear post-intrusion sensible logfiles 🔥 (For Research Only)

FezFamiliar /benzyne

benzyne is a data-hiding library written in pure PHP, intended for hiding data on any Windows machine.

masq /pnger

PNG file parser, for forensic/anti-forensic purposes primarily.

peter2233finn /Anti-forensics-time-randomiser-linux

A tool to spoof a forensics investigator by randomising the hardware clock so it is difficult to tell when a files were written, making the job much harder and time consuming.

diskurse /pagurus-webshell

Pagarus Webshell - Windows webshell with command line obfuscation.

kuritsutianu /AFDT

Anti Forensic Detection Tool, multifunctional application to detect the presence of anti-forensic techniques in Windows systems. It was my Master's Thesis, in the cybersecurity master's degree that I did with the IMF Smart Education school and the Deloitte company.

nullnullseven /qubes-antiforensic-modes

Simple script for Qubes OS that adds 3 new modes to the GRUB menu: an encrypted ephemeral overlay, RAM-based overlay and fully RAM-based zram mode, providing anonymity and forensic protection by mounting dom0 in read-only mode and wiping memory upon shutdown.

bakad3v /0sakaCrypt

Advanced Android app for plausibly deniable encryption using VeraCrypt containers