
libmempool
Heap analysis tooling for mempool

Heap analysis tooling for mempool

Proof-of-concept exploit for CVE-2024-22532: heap-based buffer overflow in XnView Classic 2.51.5 and NConvert 7.163 via crafted .xwd file, enabling…

Reverse engineering Vidar Stealer: From obfuscated memory strings to Chrome process injection, malicious JS execution, and active session hijacking…

Proof-of-concept exploit for CVE-2025-21333, a heap-based buffer overflow in Hyper-V's vkrnlintvsp.sys leading to local privilege escalation via I/O…

Dynamic unpacker based on PE-sieve

A python script developed to process Windows memory images based on triage type.

A host based IDS written in C# Targetted at Metasploit

Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory…

mXtract - Memory Extractor & Analyzer

Linux Memory Cryptographic Keys Extractor

Using CVE-2023-21768 to manual map kernel mode driver

A Generic Windows Memory Scraping Tool

GoTEE - example application

CVE-2025-24201 WebKit Vulnerability Detector (PoC)

7-Zip XZ Decoder Heap Buffer Overflow - Full analysis, root cause, PoC, and RCE exploitation roadmap

Crash PoC