Memory Forensics

werwolv/imhex

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

radareorg/radare2

UNIX-like reverse engineering framework and command-line toolset

meirwah/awesome-incident-response

Curated index of incident response and DFIR tools, including memory and disk forensics, evidence collection, log analysis, playbooks, and educational…

winsiderss/systeminformer

Real-time Windows system monitor with advanced process, network, and disk analysis, stack trace debugging, malware detection, and service management.…

rshipp/awesome-malware-analysis

Defund the Police.

pwndbg/pwndbg

Exploit Development and Reverse Engineering with GDB & LLDB Made Easy

angr/angr

A powerful and user-friendly binary analysis platform!

dnspyex/dnspy

Unofficial revival of the well known .NET debugger and assembly editor, dnSpy

cheat-engine/cheat-engine

Cheat Engine. A development environment focused on modding

kevoreilly/capev2

Malware Configuration And Payload Extraction

hugsy/gef

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux

sensepost/objection

Frida-powered runtime mobile exploration toolkit for assessing iOS and Android app security. Bypass SSL pinning, dump keychains, manipulate heap…

mandiant/capa

Rule-based static and dynamic analysis tool that identifies capabilities in PE, ELF, .NET, and shellcode files, mapping them to MITRE ATT&CK…

mandiant/flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on…

darthton/blackbone

Windows memory hacking library

frankwxu/digital-forensics-lab

Free hands-on digital forensics labs for students and faculty