#1Tools for acquiring, preserving, and analyzing digital evidence for legal or investigative purposes.
Kitploit recommended
neo23x0/lokiIOC and YARA-based scanner for detecting indicators of compromise via file name regex, YARA signatures, hash matching, and C2 back-connect checks on…
emrekybs/bryobioIt was developed to speed up the processes of SOC Analysts during analysis
blacksnufkin/credshunterPoC for CVE-2026-3609 - XIGNCODE3 xhunter1.sys handle leak enabling PPL bypass and LSASS dumping
0xblackash/cve-2026-23111CVE-2026-23111
datntsec/cve-2020-1206Technical analysis of CVE-2020-1206 (SMBleed) kernel information disclosure vulnerability in Windows SMBv3, including unauthenticated memory leak…
volatilityfoundation/dwarf2jsonconvert ELF/DWARF symbol and type information into vol3's intermediate JSON
syvaidya/openstegoOpenStego is a steganography application that provides two functionalities: a) Data Hiding: It can hide any data within an image file. b)…
joshuavanderpoll/cve-2025-14847CVE-2025-14847 (MongoBleed)
alonemonkey/frida-ios-dumpExtracts decrypted IPA files from jailbroken iOS devices using Frida for reverse engineering, security analysis, and mobile app pentesting.
almounah/silphStealthy In-Memory Local Password Harvester (SILPH) tool: dump LSA, SAM and DCC2 with indirect syscall
day6reak/cve-2014-4140Technical notes and debugger analysis for CVE-2014-4140, a use-after-free vulnerability in MSHTML's CHtmRootParseCtx::AddText leading to remote code…
0xxa/google-pocThis repo contains instructions to reproduce CVE-2025-13425: Null Pointer dereference / Array over-indexing vulnerability that I found in Google's…
volatilityfoundation/communityCommunity-maintained Volatility plugin collection for memory forensics, extending memory dump analysis with modules for malware and process…
sherlock-project/sherlockHunt down social media accounts by username across social networks
0vercl0k/cve-2022-21974PoC for CVE-2022-21974 "Roaming Security Rights Management Services Remote Code Execution Vulnerability"
m10ust/machscopemacOS IPC, launchd, Mach-O, and trust relationship explorer — zero-dependency terminal-native forensic tool
ph4l4nx/ctf-s-toolsRepository to index useful tools for CTF's
korczis/foremostFile carving utility that recovers deleted files from disk images and raw drives by matching headers, footers, and internal structures via…
