anti-forensic

Tools and packages that are used for countering forensic activities, including encryption, steganography, and anything that modify attributes. This all includes tools to work with anything in general that makes changes to a system for the purposes of hiding information.

A simple Metadata Removal Tool for images and videos using exiftool and ffmpeg in C and Python3.

USB device as a kill-switch - map any USB device as a key that triggers immediate forced shutdown when USB is removed.

🖥️ Windows 🚀 A Windows tool for emergency privacy: instantly deletes sensitive data and active logins to protect my information during unexpected searches or house warrants.

‎StegX is a modern, open-source steganography toolkit designed for digital forensics experts and cybersecurity professionals. It offers fast, accurate, and stealthy methods by non-linear lsb algorithm to embed and extract hidden data within images outperforming traditional tools, detection evasion, and cross-format compatibility

Chrome/Firefox extension that removes metadata before upload files

This tool is a Python script that removes all traces from software, browsers, and the system (files, caches, histories, logs, and registry) with secure data overwriting to prevent forensic analysis.

Python Powered Repository

Windows anti-forensics made easy

PNG file parser, for forensic/anti-forensic purposes primarily.

SSH & RDP BruteForce Tool with Port Scanner, Archive Cracker, Honeypot Detection, and Post-Exploitation Modules

Anti-forensic duress-wipe system for Android

Universal anti-forensic dead-man gate for ESP32 security firmware. Successor to Suicide Marauder.

Owner-only anti-forensic boot-gate + secure-wipe layer for ESP32 Marauder (boot password, 2-fail wipe, GPIO dead-man switch). Defensive/duress use on hardware you own. Flashed via the headless Marauder flasher.

Log Cleaner

Simple script for Qubes OS that adds two new modes to the GRUB menu: an encrypted ephemeral overlay and a fully RAM-based zram mode, providing anonymity and forensic protection by mounting dom0 in read-only mode and wiping memory upon shutdown.

Simple ephemeral dvm thin pools in Qubes OS

Military-grade hardware-locked encryption tool — triple-layer ChaCha20-Poly1305 + AES-256-GCM + Fernet with scrypt KDF. Locks files to the exact machine that created them. By Death Legion Team.

ARYWIPE is a secure file deletion tool for educational and pentesting purposes. It permanently erases files to prevent recovery in a controlled environment. This tool should be used only on systems and data you own or are authorized to test, never on unauthorized devices.