#1Tools for acquiring, preserving, and analyzing digital evidence for legal or investigative purposes.
Kitploit recommended
suyash-r-k/dfir-malware-investigationSpring4Shell (CVE-2022-22965) DFIR lab with exploit simulation, Python WAF, IOC-based detection, and PCAP analysis.
sandi-go/cve-2018-8389Technical analysis and proof-of-concept for CVE-2018-8389, a use-after-free vulnerability in Internet Explorer's jscript.dll allowing remote code…
philsajdak/cve-2021-38304-pocCVE-2021-38304 Proof of Concept
nidhihcl/linux-4.19.72_cve-2022-29581Linux kernel 4.19.72 with a targeted patch or exploit for CVE-2022-29581, demonstrating a specific kernel vulnerability for security research and…
mkdemir/activemq-lockbit-analysisApache ActiveMQ (CVE-2023-46604) zafiyetinden LockBit ransomware aşamasına uzanan 419 saatlik sızma vakasının uçtan uca analizi, SIEM korelasyon…
mesutgungor/xz-backdoor-vulnerabilityCVE-2024-3094
ldebug/extra_recipeIan Beer's exploit for CVE-2017-2370 (kernel memory r/w on iOS 10.2)
hyunjungg/cve-2025-62821Microsoft HEIF Extension (msheif_store.dll) OOB-read
hau-zy/keepass-dump-pyRe-write of original KeePass 2.X Master Password Dumper (CVE-2023-32784) POC in python.
fengjixuchui/cve-2003-0358By passing an overly large string when invoking nethack, it is possible to corrupt memory. jnethack and falconseye are also prone to this…
czabatta/thm-tempestTryHackMe SOC Level 1 — Follina CVE-2022-30190, Nim C2, Chisel, PrintSpoofer, backdoor accounts
beraphin/cve-2017-16943Technical analysis and proof-of-concept for CVE-2017-16943, a use-after-free in Exim's receive_msg function, demonstrating heap manipulation and RIP…
renukaselvar/libunwind_cve-2015-3239C library for stack unwinding and backtrace generation, supporting multiple architectures and operating systems, with build and regression testing…
sneakynachos/cve-2026-84118-who-labeled-the-crit-as-a-highProof-of-concept for CVE-2026-84118, a SpiderMonkey GC use-after-free leading to out-of-bounds read/write and potential code execution. Includes…
amperclock/cve-2023-32784-kdbxpassdmpRetrieves the master password from Keepass memory dump, using a hint of bruteforce.
withsecurelabs/memory-carving-scriptsScripts for extracting useful information from infected memory dumps
withsecurelabs/dotnet-gargoyleA spiritual .NET equivalent to the Gargoyle memory scanning evasion technique
withsecurelabs/esfangESF modular ingestion tool for development and research.
