

QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames, among other things.

This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone is created,…

Windows Analysis and Research Toolkit

Main repository to pull all NCC Group Cisco ASA-related tool projects.

A Generic Windows Memory Scraping Tool

RansomLord is a proof-of-concept Anti-Ransomware exploitation tool that automates the creation of PE files, used to compromise ransomware…

This is the development tree. Production downloads are at:

Panic button for protection against cold boot attacks

Inception is a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard,…

Interrogate is a proof-of-concept tool for identification of cryptographic keys in binary material (regardless of target operating system), first and…

tool to extract passwords from TeamViewer memory using Frida

DLL Injection tool to unlock guest VMs


This is a tool for exploiting Ticketbleed (CVE-2016-9244) vulnerability.

Poc for CVE-2025-7771 to modify PPL Protection

CVE-2025-14847 (MongoBleed) scanner and exploit tool. Unauthenticated MongoDB heap memory leak via zlib decompression. Detection, memory extraction,…