
TangledWinExec
PoCs and tools for investigation of Windows process execution techniques

PoCs and tools for investigation of Windows process execution techniques

A lightweight dynamic instrumentation library

A pure-Python library, app and MCP that lets you inspect, modify and search the memory of any running process in a few lines of Python :snake: .

A dynamic VMP dumper and import fixer, powered by VTIL.

Drltrace is a library calls tracer for Windows and Linux applications.

Easywork Enterprise 2.1.3.354 is vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound…

Dump cookies and credentials directly from Chrome/Edge process memory

ComfyEngine is a memory exploration toolkit built for people who need to monitor, patch, and script a running process.

CVE-2025-65320 proof-of-concept demonstrating cleartext license key extraction from process memory via debugger attachment, enabling software…

Cross-platform CUI process memory scanner built on Frida for finding, filtering, patching, and dumping live process memory during reverse engineering…

All reasonably stable tools

An API hooking framework for intercepting and monitoring Windows applications