Tools

thalium/icebox

Virtual Machine Introspection, Tracing & Debugging

mastercodeon314/ksdumper-11

A revival of the classic and legendary KsDumper

cryptolok/crykex

Linux Memory Cryptographic Keys Extractor

nccgroup/detectwindowscopyonwriteforapi

Enumerate various traits from Windows processes as an aid to threat hunting

amossys/memitm

Tool to make in memory man in the middle

ntdallas/bof_runpe

BOF to run PE in Cobalt Strike Beacon without console creation

ffri/cve-2025-24204

PoC and technical details of CVE-2025-24204

nccgroup/killedprocesscanary

A canary designed to minimize the impact from certain Ransomware actors

blacksnufkin/credshunter

PoC for CVE-2026-3609 - XIGNCODE3 xhunter1.sys handle leak enabling PPL bypass and LSASS dumping

maherazzouzi/cve-2024-26817-amdkfd

Potential Integer Overflow Leading To Heap Overflow in AMD KFD.

v31l0x1/throttlestopppl

Poc for CVE-2025-7771 to modify PPL Protection

jackhuyh/cve-2016-3308

Use CVE-2016-3308 corrupt win32k desktop heap

cenobyte-vincit/memdumper

Abuses macOS debugger entitlements and DYLD_INSERT_LIBRARIES to dump or search a running process's memory while shifting EDR attribution to a signed…

starrynightsecurity/cve-2025-54574-squid-heap-buffer-overflow

Vulnerability Found on Squid Proxy.

structio-labs/n0xis

AI-first reverse-engineering toolkit: static analysis, SSA decompiler, live memory, provenance. Source-available (PolyForm Noncommercial).

intezer/linux-explorer

Easy-to-use live forensics toolbox for Linux endpoints

ivan-sincek/invoker

Penetration testing utility and antivirus assessment tool.