Top 6 antiforensic Open-Source Projects

byob

2 8,215 3.6 Python

An open-source post-exploitation framework for students, researchers and developers.

Project mention: Whats the Best and easiest Hacking Tool to do RAT windows and Linux | reddit.com/r/hacking | 2022-12-20

BYOB (Build Your Own Botnet) - BYOB is an open-source project that provides a framework for security researchers and developers to build and operate a basic botnet to deepen their understanding of the sophisticated malware that infects millions of devices every year and spawns modern botnets, in order to improve their ability to develop counter-measures against these threats.
bleachbit

76 2,065 6.1 Python

BleachBit system cleaner for Windows and Linux

Project mention: Merge, organize and dedupe (many hard drives to one) | reddit.com/r/homelab | 2023-03-19

Together with BleachBit and Geek Uninstaller are the go-to tools in my upkeep routine. You don't need those but just mentioning them.
Sonar

www.sonarsource.com
sponsored

Write Clean Python Code. Always.. Sonar helps you commit clean code every time. With over 225 unique rules to find Python bugs, code smells & vulnerabilities, Sonar finds the issues while you focus on the work.
HiddenVM

5 1,446 7.2 Shell

HiddenVM — Use any desktop OS without leaving a trace.

Project mention: A virtual machine ***within*** tails | reddit.com/r/tails | 2022-12-19
awesome-anti-forensic

1 275 0.0 HTML

Tools and packages that are used for countering forensic activities, including encryption, steganography, and anything that modify attributes. This all includes tools to work with anything in general that makes changes to a system for the purposes of hiding information.

Project mention: How to wipe a drive beyond forensic recoverability? | reddit.com/r/opsec | 2022-10-28

Take a look at awesome-anti-forensic
ulexecve

2 114 10.0 Python

ulexecve is a userland execve() implementation which helps you execute arbitrary ELF binaries on Linux from userland without the binaries ever having to touch storage. This is useful for red-teaming and anti-forensics purposes.

Project mention: Can I exec an new process without an executable file? (2015) | news.ycombinator.com | 2022-11-02

Definitely tricky. I solved it with a Python implementation by building up a big jumpbuffer so that the moment I leave Python-land I copy from temporary buffers to the right addresses and then ultimately jump at the entry point of the newly loaded binary. It's tricky and took quite some debugging to get right, but it's proven rather solid now.
See https://github.com/anvilsecure/ulexecve/blob/main/ulexecve.p... for details. Especially the `CodeGenerator` classes with implementations in x86, x86-64 and aarch64.
Metadata-Remover

1 33 4.1 Python

A simple Metadata Removal Tool for images and videos using exiftool and ffmpeg in C and Python3.

Project mention: Metadata-Remover: A simple Metadata Removal Tool for images and videos using exiftool and ffmpeg in C and Python3. | reddit.com/r/CKsTechNews | 2022-06-19

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020). The latest post mention was on 2023-03-19.