WhatsApp in Plain Sight: Where and How You Can Collect Forensic Artifacts
https://blog.group-ib.com/whatsapp_forensic_artifacts
https://t.me/Digital_Forensics
#WhatsApp
https://blog.group-ib.com/whatsapp_forensic_artifacts
https://t.me/Digital_Forensics
👍11👏1
Magnet 6.5 released now.
Crack is ready.
To get the crack contact Telegram: @UnBin4A
or
@D3HKORDI
https://t.me/Digital_Forensics
#Magnet
Crack is ready.
To get the crack contact Telegram: @UnBin4A
or
@D3HKORDI
https://t.me/Digital_Forensics
#Magnet
🔥6👍2🤯1
UFED 4PC 7.58 released now.
Crack is ready.
To get the crack contact Telegram: @UnBin4A
or
@D3HKORDI
https://t.me/Digital_Forensics
#UFED_4PC
Crack is ready.
To get the crack contact Telegram: @UnBin4A
or
@D3HKORDI
https://t.me/Digital_Forensics
#UFED_4PC
👍16❤3🤔3
FVEAutoUnlock key unwrapping
https://github.com/libyal/libbde/issues/37
https://t.me/Digital_Forensics
#BitLocker
https://github.com/libyal/libbde/issues/37
https://t.me/Digital_Forensics
#BitLocker
GitHub
Implement FVEAutoUnlock key unwrapping · Issue #37 · libyal/libbde
Remember that metadata entry 0x000b? This is what that is for. Windows supports auto-unlocking BitLocker fixed volumes (which are unlocked before user login). This works only when the OS drive is i...
👍7
Anti-Forensic Techniques and Tools
https://book.hacktricks.xyz/generic-methodologies-and-resources/basic-forensic-methodology/anti-forensic-techniques
https://t.me/Digital_Forensics
#AntiForensics
https://book.hacktricks.xyz/generic-methodologies-and-resources/basic-forensic-methodology/anti-forensic-techniques
https://t.me/Digital_Forensics
#AntiForensics
HackTricks
Anti-Forensic Techniques - HackTricks
An attacker may be interested in changing the timestamps of files to avoid being detected. It’s possible to find the timestamps inside the MFT in attributes...
👍10🔥4
FinalMobile 2022.09.05 released.
To get the crack contact Telegram: @UnBin4A
or
@D3HKORDI
https://t.me/Digital_Forensics
#FinalMobile
To get the crack contact Telegram: @UnBin4A
or
@D3HKORDI
https://t.me/Digital_Forensics
#FinalMobile
👍6
Oxygen 15.0 released now.
Added the ability to extract encryption keys stored in the Android Keystore of Huawei devices based on the Qualcomm chipsets: MSM8917, MSM8937, and MSM8940.
Crack is ready
To get the crack contact Telegram: @UnBin4A
or
@D3HKORDI
https://t.me/Digital_Forensics
#Oxygen
Added the ability to extract encryption keys stored in the Android Keystore of Huawei devices based on the Qualcomm chipsets: MSM8917, MSM8937, and MSM8940.
Crack is ready
To get the crack contact Telegram: @UnBin4A
or
@D3HKORDI
https://t.me/Digital_Forensics
#Oxygen
👍15❤8👏1
Digital Forensics
Oxygen 15.0 released now. Added the ability to extract encryption keys stored in the Android Keystore of Huawei devices based on the Qualcomm chipsets: MSM8917, MSM8937, and MSM8940. Crack is ready To get the crack contact Telegram: @UnBin4A or @D3HKORDI…
The latest Oxygen Forensic® Detective v.15.0 allows screen lock bypass for Xiaomi devices based on MT6768 and MT6785 chipsets and having FBE.
https://t.me/Digital_Forensics
#Oxygen
https://t.me/Digital_Forensics
#Oxygen
Telegram
Digital Forensics
To get the products, contact @D3HKORDI or @UnBin4A:
UFED 4PC
Physical Analyzer (PA)
PA Ultra
PA Inseyets
Magnet
Oxygen
FinalMobile
Cellebrite Inspector
SPFPro
MDVideo
MDNext
MDLive
MDRED
MDCloud
MDDrone
Amped Five & Authenticate
Arsenal
FTK
CyberTriage
UFED 4PC
Physical Analyzer (PA)
PA Ultra
PA Inseyets
Magnet
Oxygen
FinalMobile
Cellebrite Inspector
SPFPro
MDVideo
MDNext
MDLive
MDRED
MDCloud
MDDrone
Amped Five & Authenticate
Arsenal
FTK
CyberTriage
👍12🔥3🤔3👏2🤯1
Magnet 6.6 released now.
Crack is ready.
To get the crack contact Telegram: @UnBin4A
or
@D3HKORDI
https://t.me/Digital_Forensics
#Magnet
Crack is ready.
To get the crack contact Telegram: @UnBin4A
or
@D3HKORDI
https://t.me/Digital_Forensics
#Magnet
🤔2
Messenger-Forensics
Forensic Analysis of Instant Messengers: Decrypt Signal, Wickr, and Threema
https://github.com/hunjison/Messenger-Forensics
https://t.me/Digital_Forensics
#Messenget_Forensics
Forensic Analysis of Instant Messengers: Decrypt Signal, Wickr, and Threema
https://github.com/hunjison/Messenger-Forensics
https://t.me/Digital_Forensics
#Messenget_Forensics
GitHub
GitHub - hunjison/Messenger-Forensics: Forensic Analysis of Signal, Wickr, Threema - Decrypt all databases and multimedia files
Forensic Analysis of Signal, Wickr, Threema - Decrypt all databases and multimedia files - hunjison/Messenger-Forensics
👍14❤1
FinalMobile 2022.10.03 released.
To get the crack contact Telegram: @UnBin4A
or
@D3HKORDI
https://t.me/Digital_Forensics
#FinalMobile
To get the crack contact Telegram: @UnBin4A
or
@D3HKORDI
https://t.me/Digital_Forensics
#FinalMobile
👍6
OSINT/FORENSICS-MOBILE
Tools for OSINT/FORENSICS MOBILE
https://github.com/CScorza/OSINT-FORENSICS-MOBILE
https://t.me/Digital_Forensics
#OSINT
Tools for OSINT/FORENSICS MOBILE
https://github.com/CScorza/OSINT-FORENSICS-MOBILE
https://t.me/Digital_Forensics
#OSINT
GitHub
GitHub - CScorza/OSINT-FORENSICS-MOBILE: Tools OSINT MOBILE
Tools OSINT MOBILE. Contribute to CScorza/OSINT-FORENSICS-MOBILE development by creating an account on GitHub.
Mobile Verification Toolkit
Mobile Verification Toolkit (MVT) is a collection of utilities to simplify and automate the process of gathering forensic traces helpful to identify a potential compromise of Android and iOS devices.
https://github.com/mvt-project/mvt
https://t.me/Digital_Forensics
#MobileForensics
Mobile Verification Toolkit (MVT) is a collection of utilities to simplify and automate the process of gathering forensic traces helpful to identify a potential compromise of Android and iOS devices.
https://github.com/mvt-project/mvt
https://t.me/Digital_Forensics
#MobileForensics
GitHub
GitHub - mvt-project/mvt: MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find…
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise. - mvt-project/mvt
👍2❤1
MD-VIDEO v3.12.0 released today.
Crack is ready.
To get the crack contact Telegram: @UnBin4A
or
@D3HKORDI
https://t.me/Digital_Forensics
#MD_VIDEO
Crack is ready.
To get the crack contact Telegram: @UnBin4A
or
@D3HKORDI
https://t.me/Digital_Forensics
#MD_VIDEO
👍3❤2
Magnet 6.7 released.
Crack is ready.
To get the crack contact Telegram: @UnBin4A
or
@D3HKORDI
https://t.me/Digital_Forensics
#Magnet
Crack is ready.
To get the crack contact Telegram: @UnBin4A
or
@D3HKORDI
https://t.me/Digital_Forensics
#Magnet
👍12
A UFED 4PC 7.59 (a minor version) released today.
To get the crack contact Telegram: @UnBin4A
or
@D3HKORDI
https://t.me/Digital_Forensics
#UFED4PC
To get the crack contact Telegram: @UnBin4A
or
@D3HKORDI
https://t.me/Digital_Forensics
#UFED4PC
👍10
Oxygen 15.1 released now.
Added the ability to bypass screen lock and decrypt data from Android devices having TEE Trusty, File-Based-Encryption (FBE) and based on the following MTK chipsets: MT6765, MT6580.
Added the ability to bypass screen lock and decrypt data from MTK-based Android devices having TEE Kinibi and full-disk encryption (FDE).
Crack is ready
To get the crack contact Telegram: @UnBin4A
or
@D3HKORDI
https://t.me/Digital_Forensics
#Oxygen
Added the ability to bypass screen lock and decrypt data from Android devices having TEE Trusty, File-Based-Encryption (FBE) and based on the following MTK chipsets: MT6765, MT6580.
Added the ability to bypass screen lock and decrypt data from MTK-based Android devices having TEE Kinibi and full-disk encryption (FDE).
Crack is ready
To get the crack contact Telegram: @UnBin4A
or
@D3HKORDI
https://t.me/Digital_Forensics
#Oxygen
👍12
MD-Next 1.91.14 released.
Crack is ready.
To get the crack contact Telegram: @UnBin4A
or
@D3HKORDI
https://t.me/Digital_Forensics
#MD_Next
Crack is ready.
To get the crack contact Telegram: @UnBin4A
or
@D3HKORDI
https://t.me/Digital_Forensics
#MD_Next
👍7
FinalMobile 2022.11.07 released.
To get the crack contact Telegram: @UnBin4A
or
@D3HKORDI
https://t.me/Digital_Forensics
#FinalMobile
To get the crack contact Telegram: @UnBin4A
or
@D3HKORDI
https://t.me/Digital_Forensics
#FinalMobile
👍5
user.sh
4.7 KB
User Accounts Hunting
The Script helps you to know all users that has a folder in /home/ and give you some user info Like:
1- Created Time
2- Last Change Password
3- Last Login
4- User Status
5- UID
6- GID
7- Has Password?
8- Sudo Access
9- etc/passwd
These informations are values especially when you work as DFIR.
Usage:
sudo bash user.sh > result.csv
https://t.me/Digital_Forensics
The Script helps you to know all users that has a folder in /home/ and give you some user info Like:
1- Created Time
2- Last Change Password
3- Last Login
4- User Status
5- UID
6- GID
7- Has Password?
8- Sudo Access
9- etc/passwd
These informations are values especially when you work as DFIR.
Usage:
sudo bash user.sh > result.csv
https://t.me/Digital_Forensics
👍7