Memory Forensics

werwolv/imhex

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

radareorg/radare2

UNIX-like reverse engineering framework and command-line toolset

meirwah/awesome-incident-response

Curated index of incident response and DFIR tools, including memory and disk forensics, evidence collection, log analysis, playbooks, and educational…

winsiderss/systeminformer

Real-time Windows system monitor with advanced process, network, and disk analysis, stack trace debugging, malware detection, and service management.…

rshipp/awesome-malware-analysis

Defund the Police.

pwndbg/pwndbg

Exploit Development and Reverse Engineering with GDB & LLDB Made Easy

angr/angr

A powerful and user-friendly binary analysis platform!

sensepost/objection

Frida-powered runtime mobile exploration toolkit for assessing iOS and Android app security. Bypass SSL pinning, dump keychains, manipulate heap…

cheat-engine/cheat-engine

Cheat Engine. A development environment focused on modding

kevoreilly/capev2

Malware Configuration And Payload Extraction

dnspyex/dnspy

Unofficial revival of the well known .NET debugger and assembly editor, dnSpy

mandiant/capa

Rule-based static and dynamic analysis tool that identifies capabilities in PE, ELF, .NET, and shellcode files, mapping them to MITRE ATT&CK…

google/grr

Remote live forensics and incident response framework with Python agent for collecting forensic data from endpoints, including memory, disk, and…

darthton/blackbone

Windows memory hacking library

frankwxu/digital-forensics-lab

Free hands-on digital forensics labs for students and faculty

alessandroz/lazagne

Cross-platform credential recovery tool that extracts stored passwords from browsers, email clients, databases, system mechanisms, and network…