
DMA-ProcessDumper
Simple Process Dumper using DMA over a PCIe FPGA device

Simple Process Dumper using DMA over a PCIe FPGA device
Visualize the virtual address space of a Windows process on a Hilbert curve.

A repository hosting example goodware evtx logs containing sample software installation and basic user interaction

A Mac OS X forensic utility which manages file system mounting in support of forensic procedures.

Incarcero is a tool that creates Virtual Machines (VMs) preconfigured with malware analysis tools and security settings tailored for malware analysis…

Playground Sessions - Storing User Credentials in Plaintext

This repository provides a high-fidelity technical deconstruction and production-ready exploitation suite for CVE-2019-5736. It demonstrates how a…

Vulnerable web application to test CVE-2021-44228 / log4shell and forensic artifacts from an example attack

Extract a concerning amount of user information from Unisoc ZTE devices using CVE-2022-38694.

Read-only WordPress User Registration CVE-2026-1492 checker for hidden admins, plugin version, uploads PHP, cron, and compromise IOCs.

Read-only Windows forensic scanner for software traces — persistence, execution artifacts (Prefetch, Shimcache, BAM), user activity and Ghost Tasks…

Bypassing NTFS permissions to read any files as unprivileged user.

Patches the zero-click Apple Mail vulnerability (CVE-2020-9922) on macOS, preventing remote code execution without user interaction.

A report on Dirty Frag, which is a Linux Local Privilege Escalation (LPE) vulnerability chain that allows an unprivileged user to gain root access

USB packet capture for Windows

Windows passwords decryption from dump files

VirtualBox Disk Image Encryption password cracker