#1Tools for acquiring, preserving, and analyzing digital evidence for legal or investigative purposes.
Kitploit recommended
moxie25/nanomq-memory-leak-researchPublic advisory and technical analysis for CVE-2026-36590, a NanoMQ v0.24.9 denial-of-service vulnerability.
macuchegit/detecting-and-analyzing-cve-2024-24919-exploitationStep-by-step walkthrough of detecting and analyzing CVE-2024-24919 exploitation using a SIEM platform, including traffic analysis, IOC documentation,…
l4r1k/citrixnetscaleranalysis🔬 Jupyter notebook to help automate some of the forensic analysis related to Citrix Netscalers compromised via CVE-2019-19781
justjeff211/conti-ransomware-writeupConducted a full SOC investigation into a Conti ransomware compromise of an Exchange server using Splunk 8.2.2. Analysed 28,145 events across Windows…
cyprianatsyor/toolshell-cve-2025-53770-sharepoint-exploit-lab-letsdefendStep-by-step walkthrough of exploiting CVE-2025-53770 (ToolShell) in a LetsDefend lab, covering RCE, web shell deployment, and incident response…
crowthearchfiend/rtcore64-probeA tiny cpp program to test reading memory using a vulnerable RTCore64.sys driver/device (CVE-2019-16098). It tries to read a "secret" from its own…
uname1able/cve-2025-21333Proof-of-concept exploit for CVE-2025-21333, a heap-based buffer overflow in Hyper-V's vkrnlintvsp.sys leading to local privilege escalation via I/O…
sandesh9978/cve-2022-0185-analysis-and-exploitResearch and proof-of-concept for CVE-2022-0185 Linux kernel heap overflow vulnerability.
nhh9905/cve-2023-36802Old CVE, but new way to leak everything.
jedai47/cve-2017-16994Linux kernel local privilege escalation exploit for CVE-2017-16994, leveraging null pointer dereference and mmap_min_addr bypass to achieve root…
iqbaalilmii/acropalypse-reconstructorA lightweight CLI tool to detect and reconstruct cropped images vulnerable to Acropalypse (CVE-2023-21036 and CVE-2023-28303) written in Python.
hackura/xz-cve-2024-3094Python demo simulating CVE-2024-3094: a supply chain backdoor in XZ Utils with a trigger-based stealth activation.
asdyxcyxc/cve-2020-1362writeup of CVE-2020-1362
simoesctt/ctt-heartbleed-temporal-resonance-memory-leak-exploit-heartbleed-cve-2014-0160Heartbleed (CVE-2014-0160) was devastating because it leaked adjacent memory. CTT-Heartbleed goes further—it uses 33-layer temporal resonance to map,…
bilalalshiekh912/incident-response-report-teamcity-compromise-cve-2024-27198-CyberDefenders JetBrains Lab
azeemering/cve-2019-19781-dfir-notesMy Citrix ADC NetScaler CVE-2019-19781 Vulnerability DFIR notes.
arkha-corvus/letsdefend-soc173-follina-0-day-detectedWe are presented with a security alert indicating the detection of the Follina (CVE-2022-30190) vulnerability. A malicious Word document triggered…
0xatharv/cve-2025-40019-pocA Proof Of Concept for CVE-2025-40019
