mac-monitor
brandon7cc/mac-monitorAdvanced macOS system monitor leveraging Apple Endpoint Security to collect, enrich, and display process, file, memory, and XPC events for malware…
dynamic-analysis-sandboxingeducationforensics+2
1.4k
brandon7cc/mac-monitorAdvanced macOS system monitor leveraging Apple Endpoint Security to collect, enrich, and display process, file, memory, and XPC events for malware…
forrest-orr/artifacts-kitPseudo-malicious usermode memory artifact generator kit designed to easily mimic the footprints left by real malware on an infected Windows OS.
iqsec-lab/freemocaMemory-free continual learning framework for malware classification using mode connectivity-based interpolation. Supports class-incremental and…
shinycolumn/cve-2025-56799OS Command Injection Vulnerability via Cache Clearing Scheduler in Reolink Desktop Application
osmancanvural/cve-2026-21436Proof-of-concept exploit for CVE-2026-21436, demonstrating path traversal in Solus OS eopkg package manager allowing arbitrary file write during…
secunnix/cve-2024-27518SUPERAntiSpyware Professional X <=10.0.1264 LPE Vulnerability PoC
hluwa/frida-dexdumpA frida tool to dump dex in memory to support security engineers analyzing malware.
charles2gan/gda-android-reversing-toolthe fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which…
iss4cf0ng/openpetyaA Proof-of-Concept bootkit and UEFI boot application inspired by Petya ransomware, written in Assembly, C, and C++
j4ck3lsyn-gen2/cve-2026-6307-longinusCVE-2026-6307 PoC: Longinus - 2 Boundaries in One Bug https://nebusec.ai/research/v8-cve-2026-6307-writeup/)
gray-0men/cve-2024-22774Panoramic Dental Imaging software Stealthy Privilege Escalation Vulnerability
forrest-orr/monetaMoneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs
trailofbits/mquireZero-dependency Linux memory forensics, leveraging kernel-embedded BTF and kallsyms for type-aware memory analysis without external debug info.
mayhamad/memtracerLive memory analysis tool for detecting reflectively loaded .NET DLLs by scanning process memory regions for abnormal flags, page types, and PE…
k1nd0ne/volwebA centralized and enhanced memory analysis platform
monnappa22/limonLimon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators…
ignacioj/whacamoleLive memory analysis detecting malware IOCs in processes, modules, handles, tokens, threads, .NET assemblies, memory address space and environment…
