#1Tools for analyzing RAM dumps to find running processes, network connections, and hidden malware.
Kitploit recommended
theflink/deepsleepA variant of Gargoyle for x64 to hide memory artifacts using ROP only and PIC
winsiderss/systeminformerReal-time Windows system monitor with advanced process, network, and disk analysis, stack trace debugging, malware detection, and service management.…
google/grrRemote live forensics and incident response framework with Python agent for collecting forensic data from endpoints, including memory, disk, and…
forrest-orr/monetaMoneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs
alessandroz/lazagneCross-platform credential recovery tool that extracts stored passwords from browsers, email clients, databases, system mechanisms, and network…
x64dbg/x64dbgAn open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
fatmike-gh/mcpdebuggerA MCP Debugger Server for Windows executables (x86 and x64). Exposes debugger functionality as MCP Tools for static / dynamic analysis of the…
darnellwashingtonjr94-art/sandb0x-xtract0rAutomated cross-platform sandbox that detonates suspicious files in isolated VMs/emulators, captures network and memory artifacts, and creates LLM…
alex-cart/leafLinux Evidence Acquisition Framework
magnetforensics/swishdbgextIncident Response & Digital Forensics Debugging Extension
bughuntar/cve-2025-5777CVE-2025-5777 Citrix NetScaler Memory Leak Exploit (CitrixBleed 2)
polo35/cve-2020-0022CVE-2020-0022 vulnerability exploitation on Bouygues BBox Miami (Android TV 8.0 - ARM32 Cortex A9)
rshipp/awesome-malware-analysisDefund the Police.
equifox/ksdumperDumping processes using the power of kernel space !
paolomonti42/saltSALT - SLUB ALlocator Tracer for the Linux kernel
secunnix/cve-2024-27398CVE-2024-27398 POC
