
sorry-ransomware-analysis
Sorry ransomware (.sorry) IOCs, YARA rules and forensic analysis - CVE-2026-41940 cPanel campaign

Sorry ransomware (.sorry) IOCs, YARA rules and forensic analysis - CVE-2026-41940 cPanel campaign

Utility to find AES keys in running processes

Labtainers: A Docker-based cyber lab framework

A DFIR tool to extract cryptocoin addresses and other indicators of compromise from binaries.

Finding secrets in kernel and user memory

A bare-metal x86 utility to dump physical RAM directly to disk. Built and tested for Cold Boot Attack experiments on frozen memory.

CVE-2026-43499 exploit adapter for MT6985 MediaTek Dimensity 9300 (vivo PD2241)

Disk partitioning suite for GPT and MBR disks, offering interactive and scriptable tools to create, modify, and repair partition tables, including…

Platform Security Assessment Framework

Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.

Retrieves the master password from Keepass memory dump, using a hint of bruteforce.

A lightweight CLI tool to detect and reconstruct cropped images vulnerable to Acropalypse (CVE-2023-21036 and CVE-2023-28303) written in Python.

Herramienta para revisar si es que un payload tiene componente malicioso de acuerdo a CVE-2018-20250

Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps.

Portable, dependency-free incident response tool that automates forensic artifact collection from Unix-like systems, including memory acquisition,…

Live kernel signal observability tool using eBPF tracepoints to stream every signal raised on a Linux host, showing sender, target, disposition,…

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.