Skip to content
@fox-it

Fox-IT

Part of NCC Group

Popular repositories Loading

  1. dissect dissect Public

    Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (pa…

    1.1k 80

  2. aclpwn.py aclpwn.py Public

    Active Directory ACL exploitation with BloodHound

    Python 755 105

  3. Invoke-ACLPwn Invoke-ACLPwn Public

    PowerShell 526 87

  4. log4j-finder log4j-finder Public

    Find vulnerable Log4j2 versions on disk and also inside Java Archive Files (Log4Shell CVE-2021-44228, CVE-2021-45046, CVE-2021-45105)

    Python 438 97

  5. cve-2019-1040-scanner cve-2019-1040-scanner Public

    Python 299 59

  6. dissect.cstruct_legacy dissect.cstruct_legacy Public

    A no-nonsense c-like structure parsing library for Python

    Python 240 25

Repositories

Showing 10 of 96 repositories
  • dissect.database Public

    A Dissect module implementing parsers for various database formats

    fox-it/dissect.database’s past year of commit activity
    Python 3 Apache-2.0 6 9 (1 issue needs help) 6 Updated Feb 23, 2026
  • dissect.target Public

    The Dissect module tying all other Dissect modules together. It provides a programming API and command line tools which allow easy access to various data sources inside disk images or file collections (a.k.a. targets).

    fox-it/dissect.target’s past year of commit activity
    Python 79 AGPL-3.0 81 212 (1 issue needs help) 49 Updated Feb 23, 2026
  • dissect.evidence Public

    A Dissect module implementing a parsers for various forensic evidence file containers, currently: AD1, ASDF and EWF.

    fox-it/dissect.evidence’s past year of commit activity
    Python 11 AGPL-3.0 3 6 4 Updated Feb 19, 2026
  • dissect.hypervisor Public

    A Dissect module implementing parsers for various hypervisor disk, backup and configuration files.

    fox-it/dissect.hypervisor’s past year of commit activity
    Python 8 AGPL-3.0 11 8 (1 issue needs help) 2 Updated Feb 18, 2026
  • dissect Public

    Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).

    fox-it/dissect’s past year of commit activity
    1,078 AGPL-3.0 80 7 1 Updated Feb 18, 2026
  • acquire Public

    acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.

    fox-it/acquire’s past year of commit activity
    Python 117 AGPL-3.0 38 31 (5 issues need help) 10 Updated Feb 18, 2026
  • flow.record Public

    Recordization library

    fox-it/flow.record’s past year of commit activity
    Python 11 AGPL-3.0 13 10 3 Updated Feb 17, 2026
  • dissect.volume Public

    A Dissect module implementing a parser for different disk volume and partition systems, for example LVM2, GPT and MBR.

    fox-it/dissect.volume’s past year of commit activity
    Python 5 AGPL-3.0 3 3 2 Updated Feb 16, 2026
  • dissect.cstruct Public

    A Dissect module implementing a parser for C-like structures.

    fox-it/dissect.cstruct’s past year of commit activity
    Python 56 Apache-2.0 20 15 (1 issue needs help) 5 Updated Feb 13, 2026
  • dissect.ntfs Public

    A Dissect module implementing a parser for the NTFS file system, used by the Windows operating system.

    fox-it/dissect.ntfs’s past year of commit activity
    Python 10 AGPL-3.0 7 5 2 Updated Feb 11, 2026
View all repositories