A single file container/archive that can be reconstructed even after total loss of file system structures

A port of Kaitai to the Hiew hex editor

Recover files using lists of blocks hashes, bypassing the File System entirely

It is based on bulk_extractor (https://github.com/simsong/bulk_extractor) and add scanners for record carving

Toolkit for manual buffer exploitation, which features a basic network socket fuzzer, offset pattern generator and detector, bad character identifier, shellcode carver, and a vanilla EIP exploiter

A tutorial in Go focused around resizing pictures of rockets. Learn about Go's syntax, HTTP Handlers, API calls, JSON parsing, Channels and more.

Implementation of SeqBox in OCaml

🛠️ Not your average network forensic tool 🛠️

Scripts for extracting useful information from infected memory dumps

Bash script for computer forensics - It's possible to resolve the file name starting from the carved file name generated by the Foremost tool and save it, it generates an HTML report. It's possible to resolve the file name starting from the offset of a "grep" keywords search. The tool identifies automatically the change of the partition and, if …

File recovery tool for the FAT file system

Recovery deleted rows from SQLite3 databases

Keeps the content information intact by removing relatively unnoticeable parts of the image while resizing.

CompDec is a novel approach to automatically detect the compression algorithm used for file fragments using machine learning

Replication package of the paper titled "Generating Understandable Unit Tests through End-to-End Test Scenario Carving"

You deleted your only copy of an OpenPGP private key file. You wonder if the key material can be recovered via forensic techniques such as file carving. Dodge may be able to help!

Extract embedded PNG images from a binary.

Naive magic number based file carver

2018 Spring Course, Computer Vision and Pattern Recognition, in XJTU

A configuration enabling the Scalpel data recovery / data carving tool to work with deleted private key data!