#1Tools for analyzing RAM dumps to find running processes, network connections, and hidden malware.
Kitploit recommended
winsiderss/systeminformerReal-time Windows system monitor with advanced process, network, and disk analysis, stack trace debugging, malware detection, and service management.…
radareorg/radare2UNIX-like reverse engineering framework and command-line toolset
nationalsecurityagency/ghidraGhidra is a software reverse engineering (SRE) framework
angr/angrA powerful and user-friendly binary analysis platform!
nikaiw/vmkatzExtract Windows credentials directly from VM memory snapshots and virtual disks
kevoreilly/capev2Malware Configuration And Payload Extraction
bitbutter/godot-security-pocsPoC reproductions for security vulnerabilities in Godot Engine, published at disclosure
x64dbg/x64dbgAn open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
google/timesketchCollaborative forensic timeline analysis platform for ingesting, searching, and annotating event logs to support incident response and DFIR…
pwndbg/pwndbgExploit Development and Reverse Engineering with GDB & LLDB Made Easy
hasamba/dfir-companionDFIR forensics companion server + capture extension
killaboi/stealmybitcoin-pocA public release of the Steal My Bitcoin challenge
rabbitstack/fibratusSecurity sensor for realtime threat detection and protection
epasveer/seerSeer - a gui frontend to gdb
r3n3r0/cve-2026-0006-step-2Research package demonstrating a leak-assisted ROP chain in Android media.swcodec via the CVE-2026-0006 APV decoder heap overflow, with payload…
tani2shell/php2shell-labBlack-box pentest lab for the PHP2Shell engine memory-corruption family (CVE-2026-109618 / CVE-2026-109619, CVSS 9.8/9.2). Dual-flag verified attack…
