#1Tools for acquiring, preserving, and analyzing digital evidence for legal or investigative purposes.
Kitploit recommended
shirabo/cve-2025-2082-povProof-of-Concept for CVE-2025-2082, demonstrating function pointer overwrite via signed-to-unsigned integer conversion bug in Tesla VCSEC, leading to…
respondiq/jsp-webshell-scanner🔍 A simple Bash script to detect malicious JSP webshells, including those used in exploits of SAP NetWeaver CVE-2025-31324.
devianntsec/cve-2024-30051Master's Thesis research on CVE-2024-30051 (Windows DWM Heap Overflow). Features a high-reliability exploit with automated heap spray optimization,…
barhen12/cve-2025-0288Arbitrary Kernel Memory Write (Unchecked memmove)
b401/clickstudio-compromised-certificateRepository containing the compromised certificate seen in recent CVE-2022-30190 (Follina) attacks.
zedocun/soc-investigation-powershell-edrfreezeSOC investigation of CVE-2024-49138 exploitation alert involving PowerShell, EDRFreeze execution, and defense evasion behavior in a simulated…
spiralbl0ck/sidechannel-cve-2022-38029SIDECHANNEL+CVE-2022-38029
mo200909/office-malware-forensics-lab-remnux-static-analysisStatic analysis of 2 malicious Office documents on REMnux using oletools; identified CVE-2017-11882 and obfuscated macros.
michaael01/letsdefend--soc-342-cve-2025-53770-sharepoint-exploit-toolshellDetailed walkthrough of CVE-2025-53770 (ToolShell) SharePoint zero-day exploitation, including RCE analysis, MachineKey exfiltration, payload…
jajangjaman/cve-2021-41160FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious server…
hyhy100/chrome-skia-cve-2024-8636PoC for a Chrome integer overflow -> OOB write vulnerability I reported to Google in Skia.
hyhy100/chrome-skia-cve-2024-8198PoC for a Chrome integer overflow -> OOB write vulnerability I reported to Google in Skia.
eap2468/cve-2022-3699Proof of Concept exploit for CVE-2022-3699
cyprianatsyor/letsdefend-cve-2024-49138-investigationHands-on SOC investigation of CVE-2024-49138 using LetsDefend, VirusTotal, Hybrid Analysis, TrueFort, and ChatGPT.
cyprianatsyor/cve-2024-24919-incident-report.mdDetailed incident report analyzing CVE-2024-24919 arbitrary file read exploit on Check Point Security Gateway, including technical analysis, response…
zach115th/toolshellfinderScans Windows IIS logs for signs of CVE-2025-53770 & CVE-2025-53771
valium007/qiomemToshiba Qiomem.sys vulnerable driver POC (CVE-2026-56129)
tarantula-team/cve-2019-19012An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read
