#1Tools for analyzing RAM dumps to find running processes, network connections, and hidden malware.
Kitploit recommended
smarttfoxx/cve-2026-29923The pstrip64.sys kernel driver exposes an IOCTL that allows low-privileged users to map arbitrary ranges of physical memory into their own virtual…
secunnix/cve-2024-27398CVE-2024-27398 POC
springsec/cve-2022-22620Webkit (Safari) - Exploit
3nou9h/cve-2026-9256-pocDemonstrates CVE-2026-9256 heap buffer overflow in nginx's ngx_http_rewrite_module with PoC scripts for heap/libc leaks and worker crash.
d0rb/cve-2023-49606Critical use-after-free vulnerability discovered in Tinyproxy
0neday/multi_pathCVE-2018-4241: XNU kernel heap overflow due to bad bounds checking in MPTCP for iOS 11 - 11.3.1released by Ian Beer
oxfemale/cve-2020-15999CVE-2020-15999
fortbridge-uk/libheif-grid-nextjs-rcePrivate Fortbridge PoC for the CVE-2026-32740 Next.js/sharp leak-to-memcpy-GOT RCE chain
pwndorei/cve-2023-36407PoC - CVE-2023-36407
abraxas/sqlite-wal-pagesizeSQLite 3.53.4 - High - Local - Info leak - WAL/DB page-size mismatch uninitialized page tail
abraxas/qemu-colo-l4-oobQEMU 11.1.2 - High - Local/Remote - OOB - COLO filter-rewriter short IPv4 L4 heap overflow
mister-turtle/cve-2023-32784Extracts KeePass master passwords from memory dumps of unlocked databases, outputting potential characters by position, a passphrase, and a…
gmh5225/driver-pidqserializationwrite-exampleHow to use PiDqSerializationWrite. Introduces how to safely read and write from mapped driver
tc4dy/cve-2026-64638-poc-exploit🛡️ CVE-2026-64638 - WordPress Security Assessment Suite (CVSS 8.9) | WordPress 4.7.0-7.0.2 pentest toolkit. Includes vulnerability assessment &…
abraxas/cve-2025-38502-linux-lpeResearch repository for CVE-2025-38502, a Linux kernel BPF cgroup local storage out-of-bounds access via tail calls enabling local privilege…
lsinus/cachemeifyoucanSLUBStick exploitation of CVE-2022-2588. Converting a DF into a cross-cache arbitrary memory R/W primitive through PTE manipulation.
franksec42/mongobleed-exploit-cve-2025-14847Explot, Lab, Scanner - external and docker container, for SMongobleed-CVE-2025-14847 plus phoenix security uploader
jackhuyh/cve-2016-3308Use CVE-2016-3308 corrupt win32k desktop heap
