
volatility3
Advanced framework for extracting digital artifacts from volatile memory (RAM) samples, enabling deep forensic analysis of system runtime state…

Advanced framework for extracting digital artifacts from volatile memory (RAM) samples, enabling deep forensic analysis of system runtime state…

Dump lsass using only NTAPI functions by hand-crafting Minidump files (without MiniDumpWriteDump!!!)

Dump lsass using only NTAPI functions creating 3 JSON and 1 ZIP file... and generate the MiniDump file later!

"In-depth reverse engineering analysis of Vidar Stealer 2.0 covering Task Scheduler tampering (1999 timestamps), Explorer.exe process hollowing, and…


All reasonably stable tools

Software sandbox for storage of sensitive information in memory.


A BOF designed to inspect processes memory and addresses

Offline AI Security Assistant for Air-Gapped Pentesting

Portable, dependency-free incident response tool that automates forensic artifact collection from Unix-like systems, including memory acquisition,…

Dump cookies and credentials directly from Chrome/Edge process memory


CVE-2025-14847 (MongoBleed)

MongoDB 内存泄露漏洞 (CVE-2025-14847) 检测工具



Leaking kernel addresses from ETW consumers. Requires Administrator privileges.