Tools

bazad/xpc-string-leak

CVE-2018-4248: Out-of-bounds read in libxpc during string serialization.

xchwarze/magic-extractor

Universal Windows extraction tool that detects unknown files and routes them to the right bundled extractor.

nccgroup/memgrep

Memory searching utilities

rshipp/awesome-malware-analysis

Defund the Police.

simsong/bulk_extractor

This is the development tree. Production downloads are at:

anssi-fr/bmc-tools

RDP Bitmap Cache parser

maldev-academy/dumpbrowsersecrets

Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bookmarks from…

attackercan/teamviewer-dumper

Dump TeamViewer ID and password from memory. Works much better than other tools.

nccgroup/mnemosyne

A Generic Windows Memory Scraping Tool

lifars/gargamel

A forensic evidence acquirer

eurecom-s3/linux_screenshot_xwindows

Volatility plugin to extract X screenshots from a memory dump

maldiohead/cve-2019-8540

Kernel Stack info leak at exportObjectToClient function

bazad/ctl_ctloutput-leak

CVE-2017-13868: Information leak of uninitialized kernel heap data in XNU.

bughuntar/cve-2025-5777

CVE-2025-5777 Citrix NetScaler Memory Leak Exploit (CitrixBleed 2)

peterpan0927/cve-2017-2370

on Mac 10.12.2

wotmd/virtualbox-6.0.0-exploit-1-day

CVE-2019-2525 / CVE-2019-2548

3ndg4me/cve-2016-6415-benigncertain-monitor

Re-implementation of VirtueSecurity's benigncertain-monitor

farazsth98/freebsd-dirent-info-leak-bugs

CVE-2020-25578 and CVE-2020-25579: Some FreeBSD info leak bugs I found in 2020.