memory-dump

inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques

Utils use to dump android ELF from memory and do some fix including the ELF section header rebuilding

A python application designed to remotely dump RAM of a Linux client and create a volatility profile for later analysis on your local host.

SMDA is a minimalist recursive disassembler library that is optimized for accurate Control Flow Graph (CFG) recovery from memory dumps.

The Volatility Collaborative GUI

Implementation of the DIMVA 2017 publication "Quincy: Detecting Host-Based Code Injection Attacks in Memory Dumps"

Advanced diagnostics techniques home

A simple node module to access V8 inspector + some tools to export and read the data.

Volatility Explorer Suit

Code for the DIMVA 2018 paper: "MemScrimper: Time- and Space-Efficient Storage of Malware Sandbox Memory Dumps"

C++ client library for Crasher dump/crash server

💥 Crasher - open source dump/crash server for different programming languages (used for crash analysis in various applications)

Yet another tool for dump mapped memory regions of process, designed to work with Android

Frida Python Tool

A simple tool that helps you run common diagnostics steps instead of battling with WinDbg.

a Forensic Script to remotely obtain information from a target machine.

Volatility plugin to retrieve namespaces and relative processes from a memory dump.

Yaesu VX-8DR/DE received APRS beacons map.

💀 🔥 ❄️ A basic analyzer for memory dumps containing managed code

Frida Memory Dumper and Scanner for native Linux apps and Windows apps

Incoming APRS messages parser for Yaesu VX-8DR/DE.

This is a C++ command line tool for performing highly configurable pointer searches

Small Yet Flexible Logger In C

Simple Imager has been created for performing forensic imaging of Windows based systems

Examine .Net memory dumps with F# interactive

An easy-to-use utility which dumps automatically PcaClient from explorer.exe process

Diagnostics utility to analyze memory dumps of a .NET application

a memory dumper in C++17

A little script to extract info out of stack traces