Tools

strongcourage/uafuzz

Binary-level directed fuzzer specialized in detecting Use-After-Free vulnerabilities via ordering-aware input metrics and static analysis, enabling…

ioactive/platbox

Platform security assessment tool for dumping and analyzing UEFI/SMM registers, PCI config space, physical memory, SPI flash, and S3 bootscripts with…

angr/angr

A powerful and user-friendly binary analysis platform!

hugsy/windbg_js_scripts

Toy scripts for playing with WinDbg JS API

cornerpirate/java-stager

A PoC Java Stager which can download, compile, and execute a Java file in memory.

amossys/memitm

Tool to make in memory man in the middle

zhuowei/apple-positional-audio-codec-invalid-header

CVE-2025-31200 - @Noahhw46 figured it out

hunters-sec/cve-2025-43300

This is POC for IOS 0click CVE-2025-43300

nccgroup/memscan

Searches for strings, regex, credit card numbers of magnetic stripe card tracks in a Windows process's memory space

sharif-bot-cmd/quantum-silicon-core-loader

Executes at the silicon boundary

nccgroup/mnemosyne

A Generic Windows Memory Scraping Tool

dougwithseismic/dezlock-dump

Runtime schema + RTTI extraction tool for Deadlock, CS2, Dota, and others (Source 2). No source2gen required.

flankerhqd/cve-2015-6620-poc

POC for CVE-2015-6620, AMessage unmarshal arbitrary write

awrped/splinter

Runtime JVM analysis toolkit for inspecting classes, methods, fields, constant pool, and bytecode

kashithecomfy/comfyengine

ComfyEngine is a memory exploration toolkit built for people who need to monitor, patch, and script a running process.

billy-ellis/exr-imageio-poc

PoC for CVE-2026-28990, an ImageIO bug patched in iOS/macOS 26.5

zeusbox/cve-2021-21017

Proof-of-concept exploit for Adobe Reader type confusion leading to heap overflow, with detailed root-cause analysis and detection guidance.

zhuowei/cve-2025-27363-proof-of-concept

Proof-of-concept for CVE-2025-27363 demonstrating a heap buffer overflow in FreeType 2.13.0 via a crafted variable font, with ASAN-verified crash…