ToolWar | Information Security (InfoSec) Tools: Recovery

Distributed Network Attack (DNA) :: Framework

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="Distributed Network Attack (DNA)" border="0" height="356" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgN1ZMHUWsjTC9Dt1gSGHwIb7uX_fVP2wEVefcDrl4xAEhFWtrS40MMQJeHNbsyJpHPAyBuMo5re53V-mtj7tDVo_foJL2k5V5G6MGzC34betwn72UCVNwMKUzShO9IwPYFmaiSd_gp0vu3/s1600/Distributed+Network+Attack+(DNA).jpg" title="Distributed Network Attack (DNA)" width="640" /></div>
<b>Distributed Network Attack (DNA)</b> is a new approach to <i>recovering password protected files</i>. 
     In the past, recoveries have been limited to the processing 
     power of one machine. <b>Distributed Network Attack (DNA)</b> uses the power of machines across 
     the <a href="http://www.toolwar.com/search/label/Network" target="_blank">network</a> or across the world to decrypt <a href="http://www.toolwar.com/search/label/Password" target="_blank">passwords</a>. The DNA 
     Server is installed in a central location where machines running 
     the <b>Distributed Network Attack (DNA)</b> Client can access it over the network. DNA Manager coordinates 
     the attack, assigning small portions of the key search to machines 
     distributed throughout the network. The DNA Client will run 
     in the background, only taking unused processor time. <b>Distributed Network Attack (DNA)</b> is used in many different environments to provide specific,  <b>password <a href="http://www.toolwar.com/search/label/Cracking" target="_blank">cracking</a></b> related functions. <b><i>For example</i></b>, law enforcement and  corporate <a href="http://www.toolwar.com/search/label/Security" target="_blank">security</a> professionals can use <b>PRTK and DNA</b> in <i>computer  <a href="http://www.toolwar.com/search/label/Forensics" target="_blank">forensic</a> investigations</i> to access password-protected files. IT  administrators can use <b>DNA</b> to recover system passwords, while individual  users can use PRTK and DNA to recover lost passwords to personal files.  These two products provide access to passwords for a large number of  popular software applications. <b>DNA</b> uses multiple machines across the  network or across the world to conduct key space and dictionary <a href="http://www.toolwar.com/search/label/Attack" target="_blank">attacks</a>.  In many cases, this makes use of time those computers would normally be  idle, saving the cost of additional hardware. Many organizations find  that the cost of additional hardware is justified for a secure,  dedicated password recovery lab. </div>
<div style="text-align: justify;">
<br />
<div class="ui-tabs-panel ui-widget-content ui-corner-bottom" id="dna-features">
<div class="featurewrapper">
<div class="FeatureRow">
<b>Distributed Network Attack® (DNA®) Features ::</b><br />
<ul class="square">
<li>Leverage graphic processing units on Microsoft Windows machines with CUDA-enabled GPUs.</li>
<li>Easy to read Statistics and Graphs</li>
<li>Add user dictionaries</li>
<li>Optimization for password attacks for specific <a href="http://www.toolwar.com/search/label/Language" target="_blank">languages</a></li>
<li>Customize user dictionaries</li>
<li>Stealth client installation functionality</li>
<li>Automatic Client update when updating the DNA Server</li>
<li>Control which clients work on certain jobs</li>
</ul>
</div>
</div>
</div>
<b>DNA® Worker Minimum Requirements :: </b><br />
<ul class="square">
<li>Operating System:</li>
</ul>
<ul class="square"><ul class="square">
<li><a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a>® XP/2000</li>
<li>Macintosh OSX 10.3.9/10.4.x</li>
<li><a href="http://www.toolwar.com/search/label/Linux" target="_blank">Linux</a> Red Hat/Fedora Core 4</li>
<li>Solaris</li>
</ul>
</ul>
<ul class="square">
<li>Processor:</li>
</ul>
<ul class="square"><ul class="square">
<li>Intel Pentium® III/P4/AMD Athlon™</li>
<li>Power PC G4/G5</li>
<li>Sparc</li>
</ul>
</ul>
<ul class="square">
<li>RAM: 1 Gb</li>
<li>Hard Disk Space: 40 Gb</li>
</ul>
</div>
<h3>
Tutorials ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/EJxrRbrf12I?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/ghaOJoJ08cw?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Windows :: </b><a href="http://marketing.accessdata.com/acton/attachment/4390/u-001a/0/-/-/-/-/" target="_blank">Distributed Network Attack (DNA) version 7.0.0 (.iso)</a></div>
<div style="text-align: justify;">
<b>Official Website ::</b> <a href="http://www.accessdata.com/">http://www.accessdata.com/</a>
</div>

Distributed Network Attack (DNA) :: Framework

Distributed Network Attack (DNA) is a new approach to recovering password protected files . In the past, recoveries have been limi...

DFF (Digital Forensics Framework) :: Framework

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgIl1DdbsO0WfC9qJDGu02Asu8jmU-fMvvGqJMnoXYIsycbH4eFW775XwZteITm_g2b8WSSdGZMbd7O8O3wZHb-6a1jsPqXb98HsFnIMVxzOlcFkVtQFC1j5SodKKFdqH5k_nWuugslcbtP/s1600/DFF+LOgo.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="DFF Logo" border="0" height="166" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgIl1DdbsO0WfC9qJDGu02Asu8jmU-fMvvGqJMnoXYIsycbH4eFW775XwZteITm_g2b8WSSdGZMbd7O8O3wZHb-6a1jsPqXb98HsFnIMVxzOlcFkVtQFC1j5SodKKFdqH5k_nWuugslcbtP/s1600/DFF+LOgo.png" title="DFF Logo" width="400" /></a></div>
<div style="text-align: justify;">
<b>DFF (Digital Forensics Framework)</b> is a free and Open Source <b>computer  forensics software</b> built on top of a dedicated Application Programming  Interface (API). It can be used both by professional and non-expert people in order to quickly  and easily collect, preserve and reveal digital evidences without  compromising systems and data.</div>
<h3 style="text-align: justify;">
Features :: </h3>
<ul style="text-align: justify;">
<li>Preserve digital chain of custody - Software write blocker, cryptographic <a href="http://www.toolwar.com/search/label/Hash" target="_blank">hash</a> calculation</li>
<li>Access to local and remote devices - Disk drives, removable devices, remote file systems</li>
<li>Read standard <a href="http://www.toolwar.com/search/label/Forensics" target="_blank">digital forensics</a> file formats - Raw, Encase EWF, AFF 3 file formats</li>
<li><a href="http://www.toolwar.com/search/label/Virtual" target="_blank">Virtual machine</a> disk reconstruction - VmWare (VMDK) compatible</li>
<li><a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a> and <a href="http://www.toolwar.com/search/label/Linux" target="_blank">Linux OS</a> forensics - <a href="http://www.toolwar.com/search/label/Registry" target="_blank">Registry</a>, Mailboxes, NTFS, EXTFS 2/3/4, FAT 12/16/32 file systems</li>
<li>Quickly triage and search for (meta-)data - Regular expressions, dictionaries, content search, tags, time-line</li>
<li><a href="http://www.toolwar.com/search/label/Recovery" target="_blank">Recover</a> hidden and deleted artifacts - Deleted files / folders, unallocated spaces, carving</li>
<li>Volatile <a href="http://www.toolwar.com/search/label/Memory" target="_blank">memory forensics</a> - Processes, local files, binary extraction, network connections</li>
</ul>
<div style="text-align: justify;">
<b>Digital Forensics Framework (DFF)</b> is an open source computer forensics software. It advertises the ability to be used by both professionals and non-experts to collect, preserve, and reveal digital evidence without compromising systems and data. </div>
<div style="text-align: justify;">
<b>Digital Forensics Framework</b> offers two user interfaces, a graphical one developed in PyQt and providing classical tree view but also more advanced features such as recursive view, tagging, live search or bookmarking. Its command line interface enables to perform <a href="http://www.toolwar.com/search/label/Investigation" target="_blank">digital investigation</a> remotely and comes with usual functionnalities available in common shell such as completion, tasks management, globing or keyboard shortcuts. DFF can also run batch scripts at startup to automate repetitive tasks. Advanced users and developers can also use DFF directly from a <a href="http://www.toolwar.com/search/label/Python" target="_blank">Python</a> interpreter to script their investigation.</div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div style="text-align: justify;">
<b>DFF Blog :: </b><a href="http://www.digital-forensic.org/blog/" target="_blank">Click Here</a><b><br />
</b></div>
<b>DFF Wiki :: </b><a href="http://wiki.digital-forensic.org/" target="_blank">Click Here</a><br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/02uZv72KS88?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Linux | Windows :: </b><a href="http://www.digital-forensic.org/en/downloads/dff/" target="_blank">DFF v1.3.0</a> (Free Edition)</div>
<div style="text-align: justify;">
<b>Official Website ::</b> <a href="http://wiki.digital-forensic.org/index.php/Main_Page">http://wiki.digital-forensic.org/index.php/Main_Page</a></div>

DFF (Digital Forensics Framework) :: Framework

DFF (Digital Forensics Framework) is a free and Open Source computer forensics software built on top of a dedicated Application Progra...

Android Data Extractor Lite (ADEL) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhQBpxZgandE5D5alwBw5L_UGL3iMqOEB0ajg_cfYZfsGPuJNAb6b2XDZfvsItEsMGGwHvN19IrpDsUI8B7mEdp8miG2w4DADZEoN2Q964MIdgKQA_fMBhm-xtiEUygQ23IwbcP7PNdMoOI/s1600/ADEL+Image.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="ADEL Android" border="0" height="287" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhQBpxZgandE5D5alwBw5L_UGL3iMqOEB0ajg_cfYZfsGPuJNAb6b2XDZfvsItEsMGGwHvN19IrpDsUI8B7mEdp8miG2w4DADZEoN2Q964MIdgKQA_fMBhm-xtiEUygQ23IwbcP7PNdMoOI/s1600/ADEL+Image.png" title="ADEL Android" width="400" /></a></div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
<b>Android Data Extractor Lite (ADEL)</b> is a <a href="http://www.toolwar.com/search/label/Python" target="_blank">Python</a> script that dumps all important SQLite Databases from a 
connected <a href="http://www.toolwar.com/search/label/Android" target="_blank">Android</a> smartphone to the local disk and analyzes these files 
in a forensically accurate workflow. If no smartphone is connected you 
can specify a local directory which contains the databases you want to <a href="http://www.toolwar.com/search/label/Anaysis" target="_blank">analyze</a>. Afterwards this script creates a clearly structured XML report.</div>
<div style="text-align: justify;">
If you connect a smartphone you need a rooted and insecure kernel or a custom recovery installed on the smartphone.</div>
<div style="text-align: justify;">
</div>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div style="text-align: justify;">
ADEL needs a predefined configuration for each device to work proper. This configuration has to be added in the following file:</div>
<div style="text-align: justify;">
<pre><code>xml/phone_configs.xml</code></pre>
<pre><code> </code></pre>
</div>
<div style="text-align: justify;">
As an example we added the configuration for the Samsung Galaxy S2 running Android 2.3.3, more phone configurations will follow. Example for the use of ADEL with a connected smartphone:</div>
<div style="text-align: justify;">
<pre><code>adel.py -d device -l 4</code></pre>
<pre><code> </code></pre>
</div>
<div style="text-align: justify;">
Example for the use of ADEL with database backups:</div>
<div style="text-align: justify;">
<pre><code>adel.py -d /home/user/backup -l 4
</code></pre>
</div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Python Supported Platform :: </b><a href="https://github.com/mspreitz/ADEL/archive/master.zip" target="_blank">ADEL</a> (.py)<br /><b>Source Website ::</b> <a href="https://github.com/mspreitz/ADEL">https://github.com/mspreitz/ADEL</a></div>

Android Data Extractor Lite (ADEL) :: Tools

Android Data Extractor Lite (ADEL) is a Python script that dumps all important SQLite Databases from a connected Android smartphone...

SIMCon (SIM Card Forensics) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjHcbHgI1KTIu4rmmAdo69Nj17IqYlV2WPKktjKhCbkMQBPwpqTzel7B8MPrdXLAqZkXD54OvdPGwZKqHHVuaOpP3vSrZ3rX4sOG1qP07Yuo1UUobEy1owOvZloIZbYyQb_ZslJi3c539ze/s1600/SIMCon.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="SIMCon Forensics" border="0" height="338" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjHcbHgI1KTIu4rmmAdo69Nj17IqYlV2WPKktjKhCbkMQBPwpqTzel7B8MPrdXLAqZkXD54OvdPGwZKqHHVuaOpP3vSrZ3rX4sOG1qP07Yuo1UUobEy1owOvZloIZbYyQb_ZslJi3c539ze/s1600/SIMCon.gif" title="SIMCon Forensics" width="400" /></a></div>
<div style="text-align: justify;">
<b>SIMCon</b> is a program that securely images all files on a <b>GSM SIM Card</b> with a standard PC-SC smart card reader, either serial or <a href="http://www.toolwar.com/search/label/USB" target="_blank">USB</a>. After imaging, the <a href="http://www.toolwar.com/search/label/Forensics" target="_blank">forensic investigator</a> can then analyze the contents of the card. Remove the SIM card from any GSM phone and insert it into your forensic <b>SIMCon</b> sim card reader. Plug your sim card reader into your computer and launch the SIMCon 
application. Follow the steps of the software to access the data on the 
SIM card. Specific information regarding stored numbers, call history, and text messages are available. </div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
All GSM cell phones today have a subscriber identity module (SIM) to identify the phone onto the <a href="http://www.toolwar.com/search/label/Network" target="_blank">network</a>. <b>SIMCon</b> is an application to acquire all of the information from the SIM Card.</div>
<div style="text-align: justify;">
<br />The SIM Card provides secure storing of the key identifying a mobile phone service subscriber, subscription information, preferences and text messages. Network state information, such as the current location area identity (LAI), is also stored on the card. When a handset is turned off and then back on, it will search for the LAI that it was in, rather than having to search all frequencies that the phone operates in. This saves time when trying to log on to the network. <br /><br />By using <b>SIMCon</b> and a smart card reader, all of the above information and more can be pulled off of the card without knowing the PIN or the PUK of the card. The PIN and the PUK are ways to keep the information on the card secure. They also can be used as a <a href="http://www.toolwar.com/search/label/Security" target="_blank">security</a> feature on the <a href="http://www.toolwar.com/search/label/Phone" target="_blank">phone</a>, not allowing anyone to use a phone to access the SIM Card without knowing the codes.<br /><br /><b>SIMCon</b> is an application developed by Inside Out <a href="http://www.toolwar.com/search/label/Forensics" target="_blank">Forensics</a> in Norway. It is designed for use by the law enforcement community, and it can be obtained free of charge by emailing <b>SIMCon</b> and identifying the officers and unit. However, for anyone outside the law enforcement community, it is not free. </div>
<h3 style="text-align: justify;">
 <span class="mw-headline" id="Features"> Features :: </span></h3>
<ul style="text-align: justify;">
<li> Acquire all available files on a SIM Card and store in an archive file
</li>
<li> Analyze and interpret content of files 
</li>
<li> Recover deleted text messages stored on the card 
</li>
<li> Manage PIN and PUK codes
</li>
<li> Compatible with SIM Cards and USIM Cards
</li>
<li> Print reports of evidence 
</li>
<li> Secure file archive using hashing
</li>
<li> Export items to popular spreadsheet programs
</li>
<li> Supports international charsets
</li>
<li> Contains a "content" view for plain text viewing of data, as well as a hexadecimal view for more specific analysis.
</li>
</ul>
<h3 style="text-align: justify;">
 <span class="mw-headline" id="Data_Acquisition"> Data Acquisition :: </span></h3>
<div style="text-align: justify;">
SIMCon is also capable of aquiring the following data from a SIM Card:
</div>
<ul style="text-align: justify;">
<li> Abbreviated Dialing Numbers (ADN), 
</li>
<li> Last Dialed Numbers (LDN)
</li>
<li> Short Message Service (SMS)
</li>
<li> Public Land Mobile Network (PLMN) selector
</li>
<li> Forbidden PLMNs, Location Information (LOCI)
</li>
<li> General Packet Radio Service (GPRS) location
</li>
<li> International Mobile Subscriber Identity (IMSI)
</li>
<li> Integrated Circuit Card Identifier (ICCID)
</li>
<li> Mobile Subscriber ISDN (MSISDN)
</li>
<li> Service Provider Name (SPN)
</li>
<li> Phase Identification
</li>
<li> SIM Service Table (SST)
</li>
<li> Language Preference (LP)
</li>
<li> Card Holder Verification (CHV1) and (CHV2)
</li>
<li> Broadcast Control Channels (BCCH)
</li>
<li> Ciphering Key (Kc)
</li>
<li> Ciphering Key Sequence Number
</li>
<li> Emergency Call Code
</li>
<li> Fixed Dialing Numbers (FDN)
</li>
<li> Forbidden PLMNs
</li>
<li> Local Area Identitity (LAI)
</li>
<li> Own Dialing Number
</li>
<li> Temporary Mobile Subscriber Identity (TMSI)
</li>
<li> Routing Area Identifier (RIA) netowrk code
</li>
<li> Service Dialing Numbers (SDNs)
</li>
<li> Service Provider Name
</li>
<li> Depersonalizatoin Keys </li>
</ul>
Tutorials ::<br /><b>Buy :: </b><a href="http://www.simcon.no/buy/index.html" target="_blank">SIMCon  $79.95</a><br />
<b>Official Website :: </b><a href="http://www.simcon.no/index.html">http://www.simcon.no/index.html</a>

SIMCon (SIM Card Forensics) :: Tools

SIMCon is a program that securely images all files on a GSM SIM Card with a standard PC-SC smart card reader, either serial or USB . Af...

CD/DVD Inspector (CD/DVD Forensics) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="CD/DVD Inspector" border="0" height="257" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi8t5ku03fzM66A_D-zGNtFxTSIjD8cNRhTQ49guzYkRb5UYgQxwPknB-Uau7TUenSzPl680Vn6g7c4O2r1LbbS6JEO3jDFJY1tkhvqEfzk27-4WiBBtCc9D38NquQt9ntGyY0A7BNNWROd/s1600/CD-DVD+Inspector.jpg" title="CD/DVD Inspector" width="640" /></div>
<div style="text-align: justify;">
<b>CD/DVD Inspector</b> for intensive <b>analysis and extraction</b> of data from CD-R, CD-RW and all types of DVD media - including HD DVD and Blu-Ray.. Tailored for professionals in <b>data recovery, <a href="http://www.toolwar.com/search/label/Forensics" target="_blank">forensics</a>, and law enforcement.</b>  Building on the <a href="http://www.toolwar.com/search/label/Recovery" target="_blank">data recovery</a> technology in CD/DVD Diagnostic™, it adds detailed displays and enhanced media search abilities, improving performance and usability.  With the release of the 4.1 version, this is now the forensic tool you should be using.  For information about the changes in each version see the release information page.<br /><br /><b>CD/DVD Inspector</b> reads all major CD and DVD filesystem formats including ISO-9660, Joliet, UDF, HSG, HFS and HFS+.  When the disc being examined contains more than a single filesystem, all filesystems found are displayed.  Multiple filesystems are present for hybrid Macintosh/PC discs as well as for discs that are produced by DirectCD and other packet-writing software. DVD Video discs include both the UDF and ISO-9660 filesystem as well.<br /><br /><b>CD/DVD Inspector </b>now includes a flexible report generator which can be tailored to your specific requirements.  Over 50 separate data items can be selected for reports with output in direct to print, HTML, text file or CSV.  With printed and HTML reports thumbnails can be included for pictures.  Reports can be sorted by any data item included in the report.<br /><br />Now available - Robotic Loader Extension.  This is the tool to automate your handling of the massive quantities of CD and DVD evidence that is being collected.  Includes support for photographing and tracking discs!  InfinaDyne now supports TEAC disc publishing systems for automated collection of CD and DVD evidence.</div>
<h3 style="text-align: justify;">
Features ::</h3>
<div style="text-align: justify;">
<b>Flexible Report Generator ::</b><br />Reports can be produced for print, HTML, text file or CSV output with over 50 different data items selectable.  An unlimited number of user-defined reports can be created.<br /><b> </b></div>
<div style="text-align: justify;">
<b>Automated Media Collection ::</b><br />Put up to 300 discs at once in one of the supported Robotic Loader systems and it will automatically collect all content from every disc.  Flexible reporting for each disc processed.  Import the results directly into EnCase or FTK.  Optionally photograph each disc as it is processed.<br /><b> </b></div>
<div style="text-align: justify;">
<b>Complete CD Imaging :: </b><br />Now CD/DVD Inspector can create an image file containing all of the information required to completely process any disc in a set of two files.  The first file contains the complete "raw" track data with all subchannels from a CD and all of the user sector data from all sessions on a DVD.  The second file is in XML format and contains all of the information that CD/DVD Inspector has extracted from the various control structures on the disc and the file systems.<br /><b> </b></div>
<div style="text-align: justify;">
<b>Transfer data collected to EnCase, FTK, etc. ::</b><br />Captures all files, even those not part of the directory structure (deleted or damaged) One-step image collection from otherwise inaccessible CD or DVD discs.Use of 'hard links" minimizes size of the image file while retaining complete content of the disc. Drag-and-drop a single file per disc<br /><br /><b>File scanning ::</b><br />“Inaccessible” discs files can be searched using scan specification syntax, including regular expressions.</div>
<div style="text-align: justify;">
<br /><b>Built-in Image Viewer :: </b><br />This tool identifies files containing graphic content (ART, BMP, GIF, JPEG, TIFF, etc.) independent of the file extension. Supports RAW images from over 125 different digital cameras.<br /><br /><b>Low-level sector examination and scanning ::</b></div>
<div style="text-align: justify;">
Displays sectors in hexadecimal and character. It  also scans all sectors of a disc for particular data   For example, it  locates an email address on a disc regardless of what file the mail  may be in.  This searches the complete disc, not just areas identified as belonging to files.<br /><b> </b></div>
<div style="text-align: justify;">
<b>Data pane ::</b></div>
<div style="text-align: justify;">
Allows direct examination of the contents of files on the disc from the main window.  The information can be displayed in either character or hexadecimal/character form.  The data pane can be resized and scrolled as needed.<br /><b> </b></div>
<div style="text-align: justify;">
<b>Disc Memory and Checkpoint ::</b><br />This feature eliminates lengthy re-discovery of the disc’s contents.  Additionally, it allows for interruption of a disc examination and then resumption of that same examination at a later time.  This is useful as some disc examinations can be lengthy, often taking more than 12 hours.<br /><b> </b></div>
<div style="text-align: justify;">
<b>Intensive Disc Examination ::</b><br />Locates data on discs that has been dropped from the file system, either because of software glitches, deletion or user action.  This is now done for all format discs.<br /><b> </b></div>
<div style="text-align: justify;">
<b>Expanded Retry Capabilities ::</b><br />Permits users to select the level of automatic retries performed whenever a data error is encountered.  This can make otherwise unreadable data sectors readable again.  This allows the user to balance examination speed with thoroughness.<br /><b> </b></div>
<div style="text-align: justify;">
<b>CD Text, ISRC and RID Audio Disc Display ::</b></div>
<ul style="text-align: justify;">
<li>CD Text contains album, track and artist names on Sony and home-produced music CDs.</li>
</ul>
<ul style="text-align: justify;">
<li>ISRC is the acronym for International Standard Recording Code.  It is a code used to identify the recording studio and publisher of a music track. </li>
</ul>
<ul style="text-align: justify;">
<li>RID is the acronym for Recorder Identification.  It is written to music CDs recorded on standalone CD recorders used with audio systems. </li>
</ul>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b>Buy :: </b>$699 - <a href="http://www.infinadyne.com/cddvd_inspector.html" target="_blank">Click Here for Purchase</a></div>
<div style="text-align: justify;">
<b>Official Website ::</b> <a href="http://www.infinadyne.com/cddvd_inspector.html">http://www.infinadyne.com/cddvd_inspector.html</a></div>

CD/DVD Inspector (CD/DVD Forensics) :: Tools

CD/DVD Inspector for intensive analysis and extraction of data from CD-R, CD-RW and all types of DVD media - including HD DVD and Blu-R...

Foremost (File Carving) :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdkN2Ugs8yPIpW9bdhSCRtfTQisB-mmEgSeRyCTN_07YHLjIom3zkuOAPeUS8z8s7WHAT-qFoxrqYH6hrVHV9q-40PTsRzLLn9SMc0DbYBMNR944nbfhqU8fPWiPYTWV_PcywGGNhbEMS8/s1600/foremost+screenshot.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="foremost screenshot" border="0" height="275" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdkN2Ugs8yPIpW9bdhSCRtfTQisB-mmEgSeRyCTN_07YHLjIom3zkuOAPeUS8z8s7WHAT-qFoxrqYH6hrVHV9q-40PTsRzLLn9SMc0DbYBMNR944nbfhqU8fPWiPYTWV_PcywGGNhbEMS8/s400/foremost+screenshot.jpg" title="foremost screenshot" width="400" /></a></div>
<br />
<b>Foremost</b> is a <b><i>console program to recover files</i></b> based on their headers, footers, and internal data  structures.  This process is commonly referred to as data carving. <b> Foremost</b> can work on image files,  such as those generated by dd, Safeback, <a href="http://www.toolwar.com/2013/09/encase-forensics-v7-tools.html" target="_blank">Encase</a>, etc, or directly on a drive. The headers and footers can be specified by a configuration file or you can use <a href="http://www.toolwar.com/search/label/CLI" target="_blank">command line</a> switches to specify built-in file types.  These built-in types look at the data structures of a given  file format allowing for a more reliable and faster recovery. </div>
<div style="text-align: justify;">
<br />
<h3>
Tutorial ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/9AkY-IefI4Q?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<h3>
</h3>
</div>
<h3 style="text-align: justify;">
Download :: </h3>
<div style="text-align: justify;">
<b>Linux ::</b> <a href="http://foremost.sourceforge.net/pkg/foremost-1.5.7.tar.gz" target="_blank">Foremost 1.5.7 (.tar.gz)</a><br />
<b>Official Website :: </b><a href="http://foremost.sourceforge.net/" target="_blank">http://foremost.sourceforge.net/ </a></div>

Foremost (File Carving) :: Tools

Foremost is a console program to recover files based on their headers, footers, and internal data structures. This process is common...

TCPXtract (Network Traffic Extracting) :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="tcpxtract" border="0" height="266" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgAqmL04htFo4cwsqJf60ruYKJbVcXmUbnsVr1NDB1wzSsk8wfB8iamSOsfzWyNH0v1iebn8mHNvwO-8axc4WJdJLZmoXI_3x0tQUpTiPg4Prr5CYbJTMM3xExj4w9FAXAXPlvmmPMw3Wm6/s1600/tcpxtract.jpg" title="tcpxtract" width="400" /></div>
<b>tcpxtract</b> is a tool for <b>extracting files from network traffic</b> based on file signatures. Extracting files based on file type headers and footers (sometimes called <i>"carving"</i>) is an age old data <a href="http://www.toolwar.com/search/label/Recovery" target="_blank">recovery</a> technique. Tools like <a href="http://www.toolwar.com/2013/11/foremost-tools.html" target="_blank">Foremost</a> employ this technique to recover files from arbitrary data streams. <b>Tcpxtract</b> uses this technique specifically for the application of intercepting files transmitted across a <a href="http://www.toolwar.com/search/label/Network" target="_blank">network</a>. Other <a href="http://www.toolwar.com/search/label/Tools" target="_blank">tools</a> that fill a similar need are driftnet and EtherPEG. driftnet and <b>EtherPEG</b> are tools for <a href="http://www.toolwar.com/search/label/Monitoring" target="_blank">monitoring</a> and extracting graphic files on a network and is commonly used by network administrators to police the internet activity of their users. The major limitations of driftnet and EtherPEG is that they only support three filetypes with no easy way of adding more. The search technique they use is also not scalable and does not search across <a href="http://www.toolwar.com/search/label/Packet" target="_blank">packet</a> boundries. <b>tcpxtract</b> features the following:<br />
<ul>
<li>Supports 26 popular file formats out-of-the-box. New formats can be added by simply editing its config file.</li>
<li>With a quick conversion, you can use your old Foremost config file with tcpxtract.</li>
<li>Custom written search algorithm is lightning fast and very scalable.</li>
<li>Search algorithm searches across packet boundries for total coverage and forensic quality.</li>
<li>Uses libpcap, a popular, portable and stable library for network data capture.</li>
<li>Can be used against a live network or a tcpdump formatted capture file. </li>
</ul>
<br />
<h3>
Tutorial ::</h3>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/uLQokDjcivU?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<br />
<h3>
Download :: </h3>
<b>Linux :: </b><a href="http://prdownloads.sourceforge.net/tcpxtract/tcpxtract-1.0.1.tar.gz?download" target="_blank">tcpxtract v1.01</a> (.tar.gz)<b> </b><br />
<b>Official Website ::</b> <a href="http://tcpxtract.sourceforge.net/">http://tcpxtract.sourceforge.net/</a></div>

TCPXtract (Network Traffic Extracting) :: Tools

tcpxtract is a tool for extracting files from network traffic based on file signatures. Extracting files based on file type headers and...

iPhone Analyzer :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="iphone analysis" border="0" height="265" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyVrxfsAbT1zhDHt5nIp-4u2AZSwoZbbGPfy91RQmjyHX4TU-0qcH4M5fHpd1PuEVma0RI6zVJLki1tJcwrYoHZ3x9BTvqnrE-LvuJsFDLDqOG_K8IX0B0eufoAkJj5cB1qEqlO8f79Kjw/s1600/iphone+analysis.jpg" title="iphone analysis" width="400" /></div>
</div>
<div style="text-align: justify;">
<b>iPhone Analzyer</b> allows you to <i>forensically examine or recover date from 
in iOS device</i>. It principally works by <i>importing backups</i> produced by 
iTunes or third party software, and providing you with a rich interface 
to explore, <i><a href="http://www.toolwar.com/search/label/Analysis" target="_blank">analyse</a> and recover data</i> in human readable formats. Because 
it works from the backup files everything is <a href="http://www.toolwar.com/search/label/Forensics" target="_blank">forensically</a> safe, and no 
changes are made to the original data.</div>
<h3 style="text-align: justify;">
<span style="font-size: small;">Features ::</span></h3>
<ul style="text-align: justify;">
<li>Supports iOS 2, iOS 3, iOS 4 and iOS 5 devices</li>
<li>Multi-platform (<a href="http://www.toolwar.com/search/label/Java" target="_blank">Java</a> based) product, supported on <a href="http://www.toolwar.com/search/label/Linux" target="_blank">Linux</a>, <a href="http://www.toolwar.com/search/label/Windows" target="_blank">Windows</a> and <a href="http://www.toolwar.com/search/label/Mac" target="_blank">Mac</a></li>
<li>Fast, powerful search across device including regular expressions</li>
<li>Integrated mapping supports visualisation of geo-tagged information,
 including google maps searches, photos, and cell-sites and <a href="http://www.toolwar.com/search/label/WiFi" target="_blank">wifi</a> 
locations observed by the device (the infamous "locationd" data)</li>
<li>Integrated support for text messages, voicemail, address book 
entries, photos (including metadata), call records and many many others</li>
<li>Recovery of "deleted" sqlite records (records that have been tagged 
as deleted, but have not yet been purged by the device can often be 
recovered),/li>
</li>
<li>Integrated visualisation of plist and sqlite files</li>
<li>Includes support for off-line mapping, supporting mapping on computers not connected to the Internet</li>
<li>Support for KML export and direct export to Google Earth</li>
<li>Browse the device file structure, navigate directly to key files or 
explore the device using concepts such as "who", "when", "what" and 
"where".</li>
<li>Analyse jail broken device directly over SSH without need for backup (experimental)</li>
<li class="feature">iPhone Backup Browsing</li>
<li class="feature">Native file viewing (plist, sqlite, etc)</li>
<li class="feature">Searching including regular expressions</li>
<li class="feature">ssh access for <a href="http://www.toolwar.com/search/label/Jailbreak" target="_blank">jailbroken</a> phones (beta)</li>
<li class="feature">Reports</li>
<li class="feature">Restore files</li>
<li class="feature">Recover backups</li>
<li class="feature">View all iPhone photos</li>
<li class="feature">examine address book, sms and loads of others</li>
<li class="feature">find and recover passwords</li>
<li class="feature">Export files to local filesytem </li>
<li class="feature"><a href="http://www.toolwar.com/search/label/Online" target="_blank">Online</a> and offline mapping</li>
<li class="feature">Geo track where a device has been</li>
<li class="feature">IOS5 and earlier versions supported</li>
<li class="feature">IOS6 is only partially supported (several known problems) </li>
</ul>
<h3 style="text-align: justify;">
Tutorials ::</h3>
<div style="text-align: justify;">
<b>User Manual (PDF) ::</b><a href="http://www.crypticbit.com/files/ipa_user_guide.pdf" target="_blank"> Click Here </a></div>
<h3 style="text-align: justify;">
Download ::  </h3>
<div style="text-align: justify;">
<b>JAR :: </b><a href="http://sourceforge.net/projects/iphoneanalyzer/files/latest/download" target="_blank">iPhone Analyzer (.jar)</a></div>
<div style="text-align: justify;">
<b>Official Website ::</b> <a href="http://www.crypticbit.com/zen/products/iphoneanalyzer">http://www.crypticbit.com/zen/products/iphoneanalyzer</a></div>

iPhone Analyzer :: Tools

iPhone Analzyer allows you to forensically examine or recover date from in iOS device . It principally works by importing backups pr...

Subscribe to: Posts ( Atom )