VS Code |
|
This is properly one of the most advanced editors out there today with great OS support and customization |
|
Audacity |
|
Audio editor for Windows, Mac or Linux |
|
Ffmpeg |
|
A complete, cross-platform solution to analyse, record, convert and stream audio and video |
|
Strings |
|
Easy way to find sequences of printable characters in files |
|
Foremost |
|
Finds stuff in binary files and recover it |
|
Grep |
|
Print lines that match patterns |
|
File |
|
Attempt to classify any file |
|
Extundelete |
|
Utility that can recover deleted files from an ext3 or ext4 partition |
|
Dirtycow |
|
Dirty COW (CVE-2016-5195) is a privilege escalation vulnerability in the Linux Kernel (Old exploit) 2.6.22 and below |
|
Rootend |
|
A *nix Enumerator & Auto Privilege Escalation tool |
|
LinEnum |
|
Best scripted local Linux enumeration & privilege escalation checks |
|
Binutils |
|
This is in most linux distributions default, but still it's important to know the tools. So check out the link! This is etc where strings, objdump is from. |
|
Xocopy |
|
xocopy is a program that can copy executables with execute, but no read permission. It has been tested on FreeBSD and Linux kernels 2.[246].x |
|
W3m <3 |
|
apt install w3m w3m-img w3m-el |
|
Kali Linux |
|
Open-source, Debian-based Linux distribution geared towards various information security tasks, such as Penetration Testing, Security Research, Computer Forensics and Reverse Engineering |
|
Tor Browser |
|
Protect yourself against tracking, surveillance, and censorship. Always have the Tor browser installed, it's just a must :) |
|
Hetty |
|
Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community |
|
VirtualBox |
|
VirtualBox is a powerful x86 and AMD64/Intel64 virtualization product for enterprise as well as home use. Can read raw images, img, iso, vmdk, vdi, vhdx, vpc, vm ware images and qemu qcow - qcow2 |
|
QEMU |
|
QEmu is a powerful generic and open source machine emulator and virtualizer. Can read raw images, img, iso, vmdk, vdi, vhdx, vpc, vm ware images and qcow + qcow2 + coop |
|
Dumpzilla |
|
Dumpzilla application is developed in Python 3.x and has as purpose extract all forensic interesting information of Firefox, Iceweasel and Seamonkey browsers to be analyzed. |
|
Qemu-img |
|
qemu-img allows you to create, convert and modify images offline. It can handle all image formats supported by QEMU. Raw images, img, iso, vmdk, vdi, vhdx, vpc, vm ware images and qcow + qcow2 + coop. |
|
Vbox-img |
|
vbox-img allows you to create, convert and modify images offline. It can handle all image formats supported by QEMU. Raw images, img, iso, vmdk, vdi, vhdx, vpc, vm ware images and qcow + qcow2 + coop. |
|
Docker |
|
Docker Engine is the industry’s de facto container runtime that runs on various Linux (CentOS, Debian, Fedora, Oracle Linux, RHEL, SUSE, and Ubuntu) and Windows Server operating systems images |
|
Volatility3 |
|
Volatility3 (python3) is the world's most widely used framework for extracting digital artifacts from volatile raw physical memory (RAM) dump and samples. The extraction techniques are performed completely independent of the system being investigated |
|