#1Tools for analyzing RAM dumps to find running processes, network connections, and hidden malware.
Kitploit recommended
leesh3288/cve-2025-32023PoC & Exploit for CVE-2025-32023 / PlaidCTF 2025 "Zerodeo"
kd8bny/limeaideA python application designed to remotely dump RAM of a Linux client and create a volatility profile for later analysis on your local host.
nccgroup/detectwindowscopyonwriteforapiEnumerate various traits from Windows processes as an aid to threat hunting
hugsy/windbg_js_scriptsToy scripts for playing with WinDbg JS API
cornerpirate/java-stagerA PoC Java Stager which can download, compile, and execute a Java file in memory.
amossys/memitmTool to make in memory man in the middle
ynwarcs/cve-2025-21298Proof of concept & details for CVE-2025-21298
kudaes/rustchainHide memory artifacts using ROP and hardware breakpoints.
xuanxuan0/tietwagentPoC memory injection detection agent based on ETW, for offensive and defensive research purposes
zerozenxlabs/cve-2023-36424Windows Kernel Pool (clfs.sys) Corruption Privilege Escalation
idov31/novahypervisorWindows hypervisor for Intel x64: defensive host hypervisor for Windows designed to mitigate kernel-level attacks including BYOVD, compatible with…
ntdallas/bof_runpeBOF to run PE in Cobalt Strike Beacon without console creation
enkomio/shed.NET runtime inspector
squalr/squalrA generic game/software hacking tool written from the ground up in Rust.
alfarom256/cve-2022-3699Lenovo Diagnostics Driver EoP - Arbitrary R/W
alex-cart/leafLinux Evidence Acquisition Framework
ioactive/platboxPlatform security assessment tool for dumping and analyzing UEFI/SMM registers, PCI config space, physical memory, SPI flash, and S3 bootscripts with…
h4k6/cve-2023-0179-poc针对（CVE-2023-0179）漏洞利用 该漏洞被分配为CVE-2023-0179，影响了从5.5到6.2-rc3的所有Linux版本，该漏洞在6.1.6上被测试。 漏洞的细节和文章可以在os-security上找到。
