Indetectables Toolkit

[xchwarze]

I started making this toolkit for Indetectables.net a few years ago.
It currently has 90 tools, an auto-updater that keeps them up to date and several thoughtful add-ons to make your job easier.

You can download it from the official github: https://github.com/indetectables-net/toolkit
Greetings!

[xchwarze]

Today I published a new release of this project

Changelog

🆕 Added
* Add Choco GUI [^1]

🔧 Changed
* Update tools (20/05/2025)
* Bump Universal Updater to 2.4.0
* Fixes in tools updater regexs


Differences between versions

Currently the toolkit has two versions and two extensions to extend the toolkit tools. Together they make up a total of 100 tools.
These are:

* Toolkit Setup: It is the complete installer and consists of 79 tools.
* Toolkit Setup lite: It is the compact installer and consists of 48 tools.
* Toolkit Extras Ghidra: This installer integrates Ghidra in the toolkit and in the updater.
* Toolkit Extras Oldies: This installer focuses on the 15 tools that were most used at the time. Among them are PEiD, ProtectionID and ImpREC.
* Toolkit Extras Unpacking: This installer focuses on add 4 tools for Unpacking.

[Shub-Nigurrath]

Didn’t know .. wonderful collection

[Fyyre]

Thanks, found a few things I didn't have in my Utils folder

[xchwarze]

As I don't have any more ideas of tools, the updates are mostly from the other auxiliary projects to this one.
Like this https://github.com/xchwarze/universal-tool-updater/ and now this https://github.com/xchwarze/sendto-recomposed/ is added.

[xchwarze]

Christmas came in September this year...
https://github.com/indetectables-net...ses/tag/2026.9

## ������ Changelog

### ������ Added

- Add mitmproxy
- Add Fiddler
- Add Magic Extractor
- Add Network category (CurrPorts, RawCap, TCPView, mitmproxy, Fiddler)
- Add DeepTaskScan
- Add WMISubscriptionsView
- Add installer option to restore the classic context menu on Windows 11

### ������ Changed

- Replace De4Dot with de4dotEx
- Update tools (01/09/2026)
- Bump Universal Updater to 2.6.0
- Bump SendTo Recomposed to 1.3.0
- Enable persistent icon cache (/C) for the context-menu integration

### ❌ Removed

- Remove XPEViewer and VB Decompiler
- Remove MultiMon


## ������ Differences Between Versions

Currently the toolkit has two versions and four extensions to extend the toolkit tools. Together they make up a total of [102 tools](https://github.com/indetectables-net/toolkit/blob/master/TOOLS.md).
These are:
* Toolkit Setup: It is the complete installer and consists of 81 tools.
* Toolkit Setup lite: It is the compact installer and consists of 49 tools.
* Toolkit Extras Ghidra: This installer integrates Ghidra in the toolkit and in the updater.
* Toolkit Extras VBDEC: This installer integrates VBDEC in the toolkit and in the updater.
* Toolkit Extras Oldies: This installer focuses on the 15 tools that were most used at the time. Among them are PEiD, ProtectionID and ImpREC.
* Toolkit Extras Unpacking: This installer focuses on add 4 tools for Unpacking.


## ⚙️ Optional Extras

In addition to the tools that make up the pack, the installer can install the following tools:
- **Context-menu Entry**: Adds a “Send To” menu entry using SendTo Recomposed (x64/x86) for quick file actions.
- **Chocolatey Package Manager**: Installs Chocolatey and ChocolateyGUI for managing additional tools.
- **Java Oracle JRE 8**: Deploys Java 8 runtime for legacy Java apps.
- **Python 3**: Installs the latest Python 3 interpreter.
- **OpenHashTab**: Adds file hash shell extension for quick checksum lookups.
- **WinMerge**: Installs WinMerge diff/merge tool for file comparison.
- **Windows Terminal**: Sets up the new Windows Terminal.
- **VC++ Redistributables**: Installs Visual C++ runtimes (2008, 2013, 2015-2022) for broad compatibility.
- **Classic context menu (Windows 11)**: Restores the pre-Windows 11 full right-click menu, so the toolkit's entry shows without an extra "Show more options" click.


## ������️ Security & Integrity Measures

To ensure trust and transparency, we implement multiple security measures:
- All tools are sourced directly from official websites.
- SHA-256 hashes are provided for all files.
- Builds are created via GitHub Actions pipelines to ensure reproducibility.
- Installers are signed using `cosign`, and `.sig` files are included for verification.