
MappedImagesDetector
Lightweight native Windows memory scanner for AV/EDR platforms, detecting suspicious mapped images and manual DLL injection techniques by IAT thunk

Lightweight native Windows memory scanner for AV/EDR platforms, detecting suspicious mapped images and manual DLL injection techniques by IAT thunk

CVE-2025-14847 MongoDB Memory Leak Exploit

Temporary root (uid 0) on a bootloader-locked ASUS Zenfone 9 via CVE-2025-21479 + a perf-based physical-address leak. GPLv3.

Differential Analysis of Malware in Memory

Software sandbox for storage of sensitive information in memory.

A memory-based evasion technique which makes shellcode invisible from process start to end.

Linux Memory Cryptographic Keys Extractor

Panic button for protection against cold boot attacks

PoC and technical details of CVE-2025-24204

A Runtime Crypter in C for Linux ELF binaries.

Exploit for AMD SEV-SNP firmware vulnerability CVE-2024-21978, enabling decryption of arbitrary guest memory via memory corruption of context pages.

Exploit for AMD SEV-SNP firmware vulnerability (CVE-2023-31355) that decrypts arbitrary memory of decommissioned guests by corrupting the UMC key…

Reverse-engineered Easy Anti-Cheat kernel driver bypass that intercepts memory allocation to suppress violation packets, with report decryption…