Didier Stevens is an MVP releasing many free open source security and forensic tools on his blog http://blog.didierstevens.com.