
BiBi-Windows-Wiper-Analysis
Technical Analysis of Bibi-Windows Wiper Targeting Israeli Organizations

Technical Analysis of Bibi-Windows Wiper Targeting Israeli Organizations

Volatility plugins for memory forensics, including detection of Gargoyle memory scanning evasion techniques.

CVE-2021-44228 DFIR Notes


Vitrina profesional: writeups de Hack The Box, informes, casos de estudio GRC (ISO 27001/27002/27005/27035, ISO 31000 + MAGERIT), scripts de…

Static analysis of 2 suspicious Office documents on REMnux using oletools; one matched CVE-2017-11882, the other was inconclusive.

Interactive DFIR walkthrough of CVE-2026-31431 (Copy Fail) - from SIEM alert to confirmed verdict. Real Volatility 3 commands, verified methodology.

Shell Companies Inside Apple's Privacy Relay

Passive hybrid fingerprinting engine — identify hosts without sending a single packet

Windows Linux DMA、Dump 、Direct、inject 内存读取、写入工具

Extract a concerning amount of user information from Unisoc ZTE devices using CVE-2022-38694.

Proof-of-concept script that analyzes Windows memory dumps to recover visited Tor onion services, bypassing Tor Browser's anonymity by exploiting…

Lack of argument sanitization leading to password leakage in Ghostscript PDF versions up to 10.05.0.

Kalim backdooe Malware Report

Automated forensic script hunting for cve-2019-19781

Detection of malicious VHD files for CVE-2025-24985

Recovery notes for proxmox advisory ID: PSA-2026-00043-1 (CVE-2023-54391)

Network forensics writeup + tooling for a TryHackMe DFIR challenge: reverses a hex→Base64→XOR exfiltration chain from PCAP traffic, then recovers a…