Digital Forensics

idiom/pftriage

Python tool and library to help analyze files during malware triage and analysis.

circl/factual-rules-generator

Generates YARA rules from installed software on a running OS to baseline known software and find similar installations across digital forensic…

benadia/an-integrated-wireless-network-forensic-analysis-framework

This framework combines a set of existing open source tools into an integrated package that automates the forensics investigation process. It is able…

billy-ellis/exr-imageio-poc

PoC for CVE-2026-28990, an ImageIO bug patched in iOS/macOS 26.5

trinitor/netstat2neo4j

create cypher create statements for neo4j out of netstat files from multiple machines

synacktiv/pcapan

A pcap capture analysis helper

hacksysteam/cve-2021-45067

Exploit for Adobe Reader DC out-of-bounds read vulnerability (CVE-2021-45067) that leaks sensitive information from the sandboxed process via…

mhelwig/adwind-decryptor

Simple decrypter for Java AdWind, jRAT, jBifrost trojan

itres-labs/cve-2025-31702

Repository with tools, exploits, and material associated with the analysis and discovery process of CVE-2025-31702 and other related security issues.

delsploit/cve-2022-2078

Proof-of-concept exploit for CVE-2022-2078 demonstrating kernel memory leak via buffer manipulation, with leaked kernel address disclosure.

huskyhacks/pmat-labs

Labs for Practical Malware Analysis & Triage

alex3434/wmi-static-spoofer

Spoofing the Windows 10 HDD/diskdrive serialnumber from kernel without hooking

cecio/xenoboxx

Hardware Sandbox Toolkit

kkaanozturk/hyperos-directory-traversal-analysis

Xiaomi HyperOS AVCodec Medya Framework'ündeki Use-After-Free (CVE-2025-21082) Zafiyetinin Derinlemesine Analizi, Rust Simülasyonu ve İnteraktif Web…

learningdisordercapital35/cve_2025_24257----not-mine

Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read/write and panic analysis

ngtuonghung/cve-2021-3156

POC for CVE-2021-3156 - Heap-based buffer overflow in sudo