Fox-IT

Part of NCC Group

Verified
We've verified that the organization fox-it controls the domain:
- fox-it.com
Learn more about verified organizations

Popular repositories Loading

dissect dissect Public

Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (pa…

1.1k 84
aclpwn.py Public

Active Directory ACL exploitation with BloodHound

Python 763 102
Invoke-ACLPwn Invoke-ACLPwn Public

PowerShell 526 84
log4j-finder log4j-finder Public

Find vulnerable Log4j2 versions on disk and also inside Java Archive Files (Log4Shell CVE-2021-44228, CVE-2021-45046, CVE-2021-45105)

Python 439 97
cve-2019-1040-scanner cve-2019-1040-scanner Public

Python 300 57
dissect.cstruct_legacy dissect.cstruct_legacy Public

A no-nonsense c-like structure parsing library for Python

Python 240 25

Repositories

Type

Language

Sort

dissect.hypervisor Public
A Dissect module implementing parsers for various hypervisor disk, backup and configuration files.

fox-it/dissect.hypervisor’s past year of commit activity

Python 10 AGPL-3.0 12 10 (1 issue needs help) 2 Updated Jun 19, 2026
dissect.target Public
The Dissect module tying all other Dissect modules together. It provides a programming API and command line tools which allow easy access to various data sources inside disk images or file collections (a.k.a. targets).

fox-it/dissect.target’s past year of commit activity

Python 90 AGPL-3.0 95 357 (1 issue needs help) 95 Updated Jun 18, 2026
dissect.volume Public
A Dissect module implementing a parser for different disk volume and partition systems, for example LVM2, GPT and MBR.

fox-it/dissect.volume’s past year of commit activity

Python 5 AGPL-3.0 4 3 1 Updated Jun 18, 2026
dissect.apfs Public
Dissect module implementing a parser for the APFS file system, a commonly used Apple filesystem

fox-it/dissect.apfs’s past year of commit activity

Python 3 AGPL-3.0 1 0 0 Updated Jun 18, 2026
dissect.fve Public
A Dissect module implementing a parsers for full volume encryption implementations, currently Microsoft's Bitlocker Disk Encryption (BDE) and Linux Unified Key Setup (LUKS1 and LUKS2).

fox-it/dissect.fve’s past year of commit activity

Python 7 AGPL-3.0 4 1 0 Updated Jun 16, 2026
python-build-pystandalone Public Forked from astral-sh/python-build-standalone
Produce redistributable builds of Python

fox-it/python-build-pystandalone’s past year of commit activity

Python 0 MPL-2.0 344 0 5 Updated Jun 12, 2026
dissect.cstruct Public
A Dissect module implementing a parser for C-like structures.

fox-it/dissect.cstruct’s past year of commit activity

Python 57 Apache-2.0 23 16 6 Updated Jun 11, 2026
flow.record Public
Recordization library

Python 11 AGPL-3.0 15 12 4 Updated Jun 10, 2026
dissect.regf Public
A Dissect module implementing a parser for Windows registry file format, used to store application and OS configuration on Windows operating systems.

Python 5 AGPL-3.0 6 2 0 Updated Jun 10, 2026
dissect.evidence Public
A Dissect module implementing a parsers for various forensic evidence file containers, currently: AD1, ASDF and EWF.

fox-it/dissect.evidence’s past year of commit activity

Python 11 AGPL-3.0 5 9 5 Updated Jun 10, 2026