Skip to content
@fox-it

Fox-IT

Part of NCC Group

Popular repositories Loading

  1. dissect dissect Public

    Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (pa…

    1.2k 89

  2. aclpwn.py aclpwn.py Public

    Active Directory ACL exploitation with BloodHound

    Python 767 100

  3. Invoke-ACLPwn Invoke-ACLPwn Public

    PowerShell 523 83

  4. log4j-finder log4j-finder Public

    Find vulnerable Log4j2 versions on disk and also inside Java Archive Files (Log4Shell CVE-2021-44228, CVE-2021-45046, CVE-2021-45105)

    Python 439 96

  5. cve-2019-1040-scanner cve-2019-1040-scanner Public

    Python 300 58

  6. dissect.cstruct_legacy dissect.cstruct_legacy Public

    A no-nonsense c-like structure parsing library for Python

    Python 239 26

Repositories

Showing 10 of 98 repositories
  • citrix-netscaler-triage Public

    Dissect triage scripts for Citrix NetScaler devices

    fox-it/citrix-netscaler-triage's past year of commit activity
    Python 74 Apache-2.0 19 0 0 Updated Oct 2, 2026
  • dissect.cobaltstrike Public

    Python library for dissecting and parsing Cobalt Strike related data such as Beacon payloads and Malleable C2 Profiles

    fox-it/dissect.cobaltstrike's past year of commit activity
    Python 198 MIT 27 0 0 Updated Oct 1, 2026
  • cisco-ios-xe-implant-detection Public

    Cisco IOS XE implant scanning & detection (CVE-2023-20198, CVE-2023-20273)

    fox-it/cisco-ios-xe-implant-detection's past year of commit activity
    Python 41 Apache-2.0 9 0 0 Updated Sep 30, 2026
  • dissect.cstruct Public

    A Dissect module implementing a parser for C-like structures.

    fox-it/dissect.cstruct's past year of commit activity
    Python 68 Apache-2.0 23 11 4 Updated Sep 25, 2026
  • dissect.target Public

    The Dissect module tying all other Dissect modules together. It provides a programming API and command line tools which allow easy access to various data sources inside disk images or file collections (a.k.a. targets).

    fox-it/dissect.target's past year of commit activity
    Python 93 AGPL-3.0 99 366 (1 issue needs help) 124 Updated Sep 25, 2026
  • dissect.fve Public

    A Dissect module implementing a parsers for full volume encryption implementations, currently Microsoft's Bitlocker Disk Encryption (BDE) and Linux Unified Key Setup (LUKS1 and LUKS2).

    fox-it/dissect.fve's past year of commit activity
    Python 8 AGPL-3.0 4 1 0 Updated Sep 24, 2026
  • dissect Public

    Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).

    fox-it/dissect's past year of commit activity
    1,162 AGPL-3.0 89 10 3 Updated Sep 24, 2026
  • dissect.evidence Public

    A Dissect module implementing a parsers for various forensic evidence file containers, currently: AD1, ASDF and EWF.

    fox-it/dissect.evidence's past year of commit activity
    Python 11 AGPL-3.0 6 10 4 Updated Sep 2, 2026
  • python-build-pystandalone Public Forked from astral-sh/python-build-standalone

    Produce redistributable builds of Python

    fox-it/python-build-pystandalone's past year of commit activity
    Python 0 MPL-2.0 371 0 14 Updated Sep 2, 2026
  • dissect.database Public

    A Dissect module implementing parsers for various database formats

    fox-it/dissect.database's past year of commit activity
    Python 5 Apache-2.0 10 14 (1 issue needs help) 6 Updated Aug 27, 2026
View all repositories