
PrologWinDbg
Use Prolog to analyze memory dumps and stopped live processes in WinDbg.

Use Prolog to analyze memory dumps and stopped live processes in WinDbg.

Proof-of-concept lab for CVE-2026-19445, a CPython ssl SNI SSLContext use-after-free where a remote TLS client frees the server's dispatch context…

Cross-platform CUI process memory scanner built on Frida for finding, filtering, patching, and dumping live process memory during reverse engineering…

Dynamic unpacker based on PE-sieve

Use YARA rules on Time Travel Debugging traces

Heap analysis tooling for dlmalloc

Heap analysis tooling for ptmalloc

Heap analysis tooling for mempool

libtalloc is a python script for use with GDB that can be used to analyse the "trivial allocator" (talloc)

This Python application scans for the CVE-2023-38831 vulnerability in WinRAR.

A pure-Python library, app and MCP that lets you inspect, modify and search the memory of any running process in a few lines of Python :snake: .

ComfyEngine is a memory exploration toolkit built for people who need to monitor, patch, and script a running process.

An MCP (Model Context Protocol) server that turns all pybag Windows debugger functions into native MCP tools. It lets MCP-compatible clients (Claude…


Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators…

Tool to make in memory man in the middle

An interactive memory info for pwning / exploiting

Analyze, extract and visualize features, artifacts and IoCs of files and memory dumps (Windows, Linux, Android, iPhone, Blackberry, macOS binaries,…