
systeminformer
Real-time Windows system monitor with advanced process, network, and disk analysis, stack trace debugging, malware detection, and service management.…

Real-time Windows system monitor with advanced process, network, and disk analysis, stack trace debugging, malware detection, and service management.…


Cross-platform credential recovery tool that extracts stored passwords from browsers, email clients, databases, system mechanisms, and network…

Rule-based static and dynamic analysis tool that identifies capabilities in PE, ELF, .NET, and shellcode files, mapping them to MITRE ATT&CK…

SALT - SLUB ALlocator Tracer for the Linux kernel

Temporary root (uid 0) on a bootloader-locked ASUS Zenfone 9 via CVE-2025-21479 + a perf-based physical-address leak. GPLv3.

Offset Independent Credential Extraction Tool

Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs

This is the development tree. Production downloads are at:

All reasonably stable tools

Collaborative forensic timeline analysis platform for ingesting, searching, and annotating event logs to support incident response and DFIR…

IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by…

The multi-platform memory acquisition tool.

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).


Tool for extracting information from newly spawned processes

A memory-based evasion technique which makes shellcode invisible from process start to end.

CVE-2025-5777 Citrix NetScaler Memory Leak Exploit (CitrixBleed 2)