#1Tools for analyzing RAM dumps to find running processes, network connections, and hidden malware.
Kitploit recommended
0xcyberstan/cve-2026-53360-pocPoC for CVE-2026-53360: guest-triggered heap out-of-bounds read/write in KVM SEV-SNP Page State Change (PSC) handling.
lsinus/cachemeifyoucanSLUBStick exploitation of CVE-2022-2588. Converting a DF into a cross-cache arbitrary memory R/W primitive through PTE manipulation.
freax13/cve-2023-31355-pocExploit for AMD SEV-SNP firmware vulnerability (CVE-2023-31355) that decrypts arbitrary memory of decommissioned guests by corrupting the UMC key…
secunnix/cve-2024-27398CVE-2024-27398 POC
pwntoday/cve-2025-43300CVE-2025-43300: iOS/macOS DNG Image Processing Memory Corruption
smarttfoxx/cve-2026-29923The pstrip64.sys kernel driver exposes an IOCTL that allows low-privileged users to map arbitrary ranges of physical memory into their own virtual…
big5-sec/cve-2022-21877a demonstration PoC for CVE-2022-21877 (storage spaces controller memory leak)
hexrom/imagemagick-cve-2017-15277Proof-of-concept exploit for ImageMagick CVE-2017-15277 memory leak vulnerability, designed for use with the gifoeb fuzzing framework.
cecio/xenoboxxHardware Sandbox Toolkit
oxfemale/cve-2020-15999CVE-2020-15999
vnik5287/cve-2016-6187-poccve-2016-6187
0xblackash/cve-2026-23111CVE-2026-23111
exmak-s/cve-2021-46702Proof-of-concept script that analyzes Windows memory dumps to recover visited Tor onion services, bypassing Tor Browser's anonymity by exploiting…
springsec/cve-2022-22620Webkit (Safari) - Exploit
d0rb/cve-2023-49606Critical use-after-free vulnerability discovered in Tinyproxy
jackhuyh/cve-2016-3308Use CVE-2016-3308 corrupt win32k desktop heap
0neday/multi_pathCVE-2018-4241: XNU kernel heap overflow due to bad bounds checking in MPTCP for iOS 11 - 11.3.1released by Ian Beer
cenobyte-vincit/memdumperAbuses macOS debugger entitlements and DYLD_INSERT_LIBRARIES to dump or search a running process's memory while shifting EDR attribution to a signed…
