
SuperMem
A python script developed to process Windows memory images based on triage type.

A python script developed to process Windows memory images based on triage type.

Executes arbitrary ELF binaries directly from memory on Linux without touching disk, enabling stealthy red-teaming and anti-forensic operations via a…

Python script for carving Bitlocker VMK keys

libtalloc is a python script for use with GDB that can be used to analyse the "trivial allocator" (talloc)

This repo contains my python script version of CVE-2025-14847 (MongoBleed)

Heap analysis tooling for dlmalloc

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

Automated Linux incident response script with live triage, memory acquisition (LiME), disk imaging, YARA scanning, and HTML report generation.

ComfyEngine is a memory exploration toolkit built for people who need to monitor, patch, and script a running process.

Proof-of-concept exploit for CVE-2026-31431 (Copy-Fail), a Linux kernel AF_ALG and splice() flaw enabling page cache poisoning and local privilege…

CVE-2025-14847 (MongoBleed)

Grab ssh keys from ssh-agent

Retrieve the master password of a keepass database <= 2.53.1