forensics-extra for Debian
--------------------------

LIST OF PACKAGES INSTALLED BY forensics-extra


COMMON PACKAGES (available for all machines)

7zip - 7-Zip file archiver with a high compression ratio
ancient - decompression routines for ancient formats
ansifilter - parse common (terminal) ANSI codes and remove or convert them
arc - archive utility based on the MS-DOS ARC program
bfbtester - Brute Force Binary Tester
bind9-dnsutils - Clients provided with BIND 9
binutils - GNU assembler, linker and binary utilities
brotli - lossless compression algorithm and format (command line utility)
bzip2 - high-quality block-sorting file compressor - utilities
bzip3 - better, faster and stronger spiritual successor to bzip2 - utilities
cabextract - Microsoft Cabinet file unpacker
clzip - C, lossless data compressor based on the LZMA algorithm
comprez - frontend to many compression programs
crunch - tool for creating wordlist
cryptmount - Management of encrypted file systems
cupp - generate dictionaries for attacks from personal data
curl - command line tool for transferring data with URL syntax
dares - rescue files from damaged CDs and DVDs (ncurses-interface)
dcfldd - enhanced version of dd for forensics and security
ddrutility - set of data recovery utilities for use with GNU ddrescue
dhcpdump - Parse DHCP packets from a network interface
dictconv - convert a dictionary file type to another dictionary file type
diffstat - produces graph of changes introduced by a diff file
disktype - detection of content format of a disk or disk image
dtach - emulates the detach/attach feature of screen
erofs-utils - Utilities for EROFS File System
ethstatus - console-based ethernet statistics monitor
ethtool - display or change Ethernet device settings
exif - command-line utility to show EXIF information in JPEG files
exiftags - utility to read Exif tags from a digital camera JPEG file
exiv2 - EXIF/IPTC/XMP metadata manipulation tool
fdupes - identifies duplicate files within given directories
foremost - forensic program to recover lost files
funcoeszz - script with 170+ useful mini applications
gddrescue - GNU data recovery tool
gdisk - GPT fdisk text-mode partitioning tool
geoip-bin - IP lookup command line tools that use the GeoIP library
gifshuffle - Steganography program to gif images
heartbleeder - test servers for OpenSSL CVE-2014-0160 aka Heartbleed
hexcompare - utility to compare and identify binary files
hexedit - viewer and editor in hexadecimal or ASCII for files or devices
horst - Highly Optimized Radio Scanning Tool
hping3 - Active Network Smashing Tool
imageindex - generate static HTML galleries from images
inxi - full featured system information script
ipgrab - tcpdump-like utility that prints detailed header information
ipv6toolkit - Security assessment and troubleshooting tool for the IPv6 protocols
jdupes - identify and delete or link duplicate files
less - pager program similar to more
libimage-exiftool-perl - library and program to read and write meta information in multimedia files
lltdscan - Scan for LLTD-enabled hosts on your network
lrzip - compression program with a very high compression ratio
lshw - information about hardware configuration
lynis - security auditing tool for Unix based systems
lz4 - Fast LZ compression algorithm library - tool
lzma - Compression and decompression in the LZMA format - command line utility
lzop - fast compression program
mblaze - UNIX utilities to deal with Maildir
mboxgrep - Grep through mailboxes
mc - Midnight Commander - a powerful file manager
mdns-scan - Scan for mDNS/DNS-SD services published on the local network
memstat - Identify what's using up virtual memory
minizip - compression library - minizip tools
mpack - tools for encoding/decoding MIME messages
mscompress - Microsoft "compress.exe/expand.exe" compatible (de)compressor
nasm - General-purpose x86 assembler
ncompress - original Lempel-Ziv compress/uncompress programs
netcat-openbsd - TCP/IP swiss army knife
netdiscover - active/passive network address scanner using ARP requests
nomarch - Unpacks .ARC and .ARK MS-DOS archives
ntfs-3g - read/write NTFS driver for FUSE
openpace - cryptographic library for EAC version 2 (tools)
parted - disk partition manipulator
pcapfix - repairs broken pcap and pcapng files
pcaputils - specialized libpcap utilities
pdfcrack - PDF files password cracker
pecomato - Picture-embedded contents manipulation tool
plzip - parallel, lossless data compressor based on the LZMA algorithm
png-definitive-guide - PNG: The Definitive Guide
pngcheck - print info and check PNG, JNG and MNG files
poppler-utils - PDF utilities (based on Poppler)
psrip - Extract images from PostScript files
rarcrack - Password cracker for rar archives
readstat - read/write data sets from SAS, Stata, and SPSS
rzip - compression program for large files
scrot - command line screen capture utility
secure-delete - tools to wipe files, free disk space, swap and memory
sipcrack - SIP login dumper/cracker
sipgrep - command line tool to sniff, capture, display SIP messages
sipvicious - tools to audit SIP based VoIP systems
sngrep - Ncurses SIP Messages flow viewer
squashfs-tools-ng - New set of tools for working with SquashFS images
ssh-audit - tool for ssh server & client auditing
sslscan - Tests SSL/TLS enabled services to discover supported cipher suites
stepic - Python 3 Steganography in Images
tcpflow - TCP flow recorder
tshark - network traffic analyzer - console version
ugrep - faster grep with an interactive query UI
unrar-free - Unarchiver for .rar files
unzip - De-archiver for .zip files
wamerican - American English dictionary words for /usr/share/dict
wamerican-huge - American English dictionary words for /usr/share/dict
wamerican-insane - American English dictionary words for /usr/share/dict
wamerican-large - American English dictionary words for /usr/share/dict
wamerican-small - American English dictionary words for /usr/share/dict
wbrazilian - Brazilian Portuguese wordlist
wbritish - British English dictionary words for /usr/share/dict
wbritish-huge - British English dictionary words for /usr/share/dict
wbritish-insane - British English dictionary words for /usr/share/dict
wbritish-large - British English dictionary words for /usr/share/dict
wbritish-small - British English dictionary words for /usr/share/dict
wbulgarian - Bulgarian dictionary words for /usr/share/dict
wcanadian - Canadian English dictionary words for /usr/share/dict
wcanadian-huge - Canadian English dictionary words for /usr/share/dict
wcanadian-insane - Canadian English dictionary words for /usr/share/dict
wcanadian-large - Canadian English dictionary words for /usr/share/dict
wcanadian-small - Canadian English dictionary words for /usr/share/dict
wcatalan - Catalan dictionary words for /usr/share/dict
weplab - tool designed to break WEP keys
wesperanto - Esperanto dictionary words for /usr/share/dict
wfaroese - Faroese dictionary / wordlist
wfrench - French dictionary words for /usr/share/dict
wgaelic - Scots Gaelic word list
wgerman-medical - German medical dictionary words for /usr/share/dict
whatweb - Next generation web scanner
whois - intelligent WHOIS client
wirish - Irish (Gaeilge) dictionary words for /usr/share/dict
witalian - Italian dictionary words for /usr/share/dict/
wmanx - Manx Gaelic dictionary words for /usr/share/dict
wngerman - New German orthography wordlist
wpolish - Polish dictionary words for /usr/share/dict
wportuguese - European Portuguese wordlist
wspanish - Spanish dictionary words for /usr/share/dict
wswedish - Swedish dictionary words for /usr/share/dict
wswiss - Swiss (German) orthography wordlist
wukrainian - Ukrainian dictionary words for /usr/share/dict
wzip - Lossy compression and denoising
xxd - tool to make (or reverse) a hex dump
xz-utils - XZ-format compression utilities
zpaq - maximum reference compressor for ZPAQ open standard

RECOMMENDED PACKAGES (available for some architectures only)

chntpw - NT SAM password recovery utility
cmospwd - decrypt BIOS passwords from CMOS
dact - multi-algorithm compression
dmidecode - SMBIOS/DMI table decoder
dmitry - Deepmagic Information Gathering Tool
exfatprogs - exFAT file system utilities
guestfs-tools - guest disk image management system - tools
hwinfo - Hardware identification system
nast - packet sniffer and lan analyzer
nstreams - network streams - a tcpdump output analyzer
nwipe - Utility to securely erase disks
packit - network packet generator and capture tool
ree - extract ROM extensions
tcpreplay - Tool to replay saved tcpdump files at arbitrary speeds
tcpxtract - extract files from network traffic based on file signatures
testdisk - Partition scanner and disk recovery tool, and PhotoRec file recovery tool
uni2ascii - UTF-8 to 7-bit ASCII and vice versa converter
xva-img - Citrix XenServer .xva disk extraction tool


 -- Joao Eriberto Mota Filho <eriberto@debian.org>  Mon, 03 Nov 2025 21:01:06 -0300