#1Tools for analyzing RAM dumps to find running processes, network connections, and hidden malware.
Kitploit recommended
jedai47/cve-2017-16994Linux kernel local privilege escalation exploit for CVE-2017-16994, leveraging null pointer dereference and mmap_min_addr bypass to achieve root…
colaoo123/cve-2022-22555Exploit for CVE-2022-22555, a Linux kernel heap buffer overflow vulnerability enabling local privilege escalation. Includes proof-of-concept code and…
natleoj/cve-2019-11933Heap corruption in WhatsApp's media picker
tarantula-team/cve-2019-19012An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read
day6reak/cve-2014-4140Technical notes and debugger analysis for CVE-2014-4140, a use-after-free vulnerability in MSHTML's CHtmRootParseCtx::AddText leading to remote code…
beraphin/cve-2017-16943Technical analysis and proof-of-concept for CVE-2017-16943, a use-after-free in Exim's receive_msg function, demonstrating heap manipulation and RIP…
dev0558/cve-2023-32784-exploit-reportEducational demonstration of CVE-2023-32784 KeePass master password recovery via memory dump analysis, with step-by-step exploit setup and mitigation…
ra3edaj/lab-dfir-cve-2023-38831d
bl4ck5un/cve-2013-2072Buffer overflow in the Python bindings for the xc_vcpu_setaffinity call in Xen
nipund513/exploiting-uaf-by-ret2bpf-in-android-kernel-cve-2021-0399-
tagatac/linux-cve-2006-4814A deadlock on the mmap semaphore ‘mmap sem’ in the CentOS 3.9 kernel, that is triggered by a specific interleaving of concurrent threads, one calling…
renukaselvar/libunwind_cve-2015-3239C library for stack unwinding and backtrace generation, supporting multiple architectures and operating systems, with build and regression testing…
renukaselvar/libunwind_cve-2015-3239_afterLibrary for unwinding processor call stacks, supporting multiple architectures and operating systems, with build and regression testing instructions.
r3n3r0/cve-2026-0006-step-2Research package demonstrating a leak-assisted ROP chain in Android media.swcodec via the CVE-2026-0006 APV decoder heap overflow, with payload…
blendin/3snakeTool for extracting information from newly spawned processes
gmh5225/minidumpreaderParses Windows MiniDump (MDMP) files with Kaitai Struct, extracting memory strings and scanning them against YARA rules for forensic and malware…
abraxas/vbox-lsilogic-sas-configVirtualBox 7.2.20 - Critical - Local - Type confusion / arb R/W - SAS1068 CONFIG SCSI-SPI overlay
abraxas/vbox-hgcm-ssm-cparmsVirtualBox 7.2.20 - High - Local - Heap overflow - HGCM SSM cParms wrap
