BleachBit system cleaner for Windows and Linux

desktop-app python windows linux open-source security gui privacy cross-platform gplv3 tui free disk-cleaner windows-desktop cleaner linux-desktop antiforensics bleachbit system-cleaner ccleaner-alternative

• Updated Nov 12, 2026
• Python

HiddenVM — Use any desktop OS without leaving a trace.

linux vm privacy debian virtualbox virtualization tor deniability snowden antiforensics opsec anti-forensics veracrypt tails

• Updated Jul 18, 2024
• Shell

Tools and packages that are used for countering forensic activities, including encryption, steganography, and anything that modify attributes. This all includes tools to work with anything in general that makes changes to a system for the purposes of hiding information.

security awesome cybersecurity awesome-list antiforensics forensic-analysis anti-forensics anti-forensic

• Updated Nov 27, 2023
• HTML

ulexecve is a userland execve() implementation which helps you execute arbitrary ELF binaries on Linux from userland without the binaries ever having to touch storage. This is useful for red-teaming and anti-forensics purposes.

userland antiforensics execve redteaming redteam-tools python-hacking-tools

• Updated Jan 3, 2024
• Python

An application designed to silently protect user data from powerful adversaries.

android security antiforensics

• Updated Nov 4, 2026
• Kotlin

Wipe files and drives securely with random ASCII dicks

rust forensics wipe-files antiforensics random-ascii-dicks anti-forensics

• Updated Aug 8, 2026
• Rust

Wipe files and drives securely with randoms ASCII dicks

forensics wipe-files antiforensics random-ascii-dicks anti-forensics

• Updated Nov 25, 2019
• Python

A simple Metadata Removal Tool for images and videos using exiftool and ffmpeg in C and Python3.

anonymity anonymisation hacktoberfest antiforensics anti-forensics anti-fingerprinting anonymization anti-forensic hactoberfest metadata-remove metadata-remover hacktoberfest-accepted

• Updated Aug 3, 2026
• Python

A python script to decrypt Cellebrite UFED EPR files.

cryptography malware antiforensics

• Updated Mar 3, 2021
• Python

A sample VHDX file with multiple verbose examples of forensic and anti-forensics artifacts. Meant to be basic and can be expanded upon. Please add a new issue if you have an idea for something to add.

dfir antiforensics kape computerforensics digitalforensics

• Updated Jan 2, 2023
• HTML

An IOC collection for the Cellebrite UFED forensic toolkit.

malware antiforensics indicators-of-compromise

• Updated Mar 1, 2021

tamper resistant audit log

rust security forensics intrusion-detection security-incidents sandboxed antiforensics physical-security perimeter-security

• Updated Aug 30, 2018
• Rust

[WIP] Anti-Forensics ToolKit to clear post-intrusion sensible logfiles 🔥 (For Research Only)

forensics penetration-testing intrusion-detection post-exploitation security-incidents antiforensics

• Updated Jun 12, 2017
• Shell

benzyne is a data-hiding library written in pure PHP, intended for hiding data on any Windows machine.

windows cryptography forensics steganography antiforensics data-hiding

• Updated Oct 1, 2021
• PHP

PNG file parser, for forensic/anti-forensic purposes primarily.

parser png parse python3 forensics antiforensics forensic-analysis anti-forensics anti-forensic forensic

• Updated Mar 11, 2023
• Python

A tool to spoof a forensics investigator by randomising the hardware clock so it is difficult to tell when a files were written, making the job much harder and time consuming.

linux forensics spoof antiforensics forensic-analysis anti-forensics foren hardware-clock

• Updated Jan 29, 2020
• Shell

Pagarus Webshell - Windows webshell with command line obfuscation.

windows php obfuscation logging iis forensics antiforensics webshell redteam pagurus-webshell

• Updated Oct 22, 2020
• PHP

Anti Forensic Detection Tool, multifunctional application to detect the presence of anti-forensic techniques in Windows systems. It was my Master's Thesis, in the cybersecurity master's degree that I did with the IMF Smart Education school and the Deloitte company.

python forensics antiforensics malwaredetection

• Updated Jun 29, 2026

Simple script for Qubes OS that adds 3 new modes to the GRUB menu: an encrypted ephemeral overlay, RAM-based overlay and fully RAM-based zram mode, providing anonymity and forensic protection by mounting dom0 in read-only mode and wiping memory upon shutdown.

antiforensics qubes-os qubes anti-forensics overlayfs anti-forensic qubesos zram-devices ram-wipe

• Updated Sep 19, 2026
• Shell

Advanced Android app for plausibly deniable encryption using VeraCrypt containers

android encryption antiforensics encryption-tool plausible-deniability

• Updated Jul 28, 2026
• Java