memory-dump

There are 1 repository under memory-dump topic.

maiyao1988 / elf-dump-fix
Utils use to dump android ELF from memory and do some fix including the ELF section header rebuilding
elf memory-dump reverse-engineering android elf-dump
Language:C 465
ShaneK2 / inVtero.net
inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques
forensics hypervisor memory-dump reverse-engineering memory-hacking memory-analysis integrity-monitoring secure-hash virtual-machine attestation cloud-computing patch-management microarchitecture
Language:C# 289
LDO-CERT / orochi
The Volatility Collaborative GUI
volatility-gui volatility-framework volatility memory-dump orochi dask hacktoberfest
Language:JavaScript 255
danielplohmann / smda
SMDA is a minimalist recursive disassembler library that is optimized for accurate Control Flow Graph (CFG) recovery from memory dumps.
disassembler code-analysis control-flow-graph control-flow-analysis memory-dump x86 x64
Language:Python 250
kd8bny / LiMEaide
A python application designed to remotely dump RAM of a Linux client and create a volatility profile for later analysis on your local host.
digital-forensics linux memory-dump volatility-profiles
Language:Python 161
wallet77 / v8-inspector-api
A simple node module to access V8 inspector + some tools to export and read the data.
inspector coverage v8-javascript-engine v8js cpu-profiling cpu-profiler memory-dump memory nodejs
Language:JavaScript 75
strazzere / elf-dump-fix
Utils use to dump android ELF from memory and do some fix including the ELF section header rebuilding
android elf elf-dump memory-dump reverse-engineering
Language:C 71
tbarabosch / quincy
Implementation of the DIMVA 2017 publication "Quincy: Detecting Host-Based Code Injection Attacks in Memory Dumps"
injection-attacks machine-learning memory-dump volatility
Language:Python 69
Vol3xp
memoryforensics1 / Vol3xp
Volatility Explorer Suit
vol3xp volexp plugin memory volatility-framework procexp sysinternals volatility-sysinternals sysinternals-volatility volatilityexplorer process-hacker forensics volatility-master volatility-explorer volatility process-explorer volatility-plugins analysis memory-dump volatility-plugin
Language:Python 66
ovidiuvio / VSDebugPro
Visual Studio extension for enhanced C/C++, C# debugging. Dump blocks of data, load data in memory and more.
visual-studio visual-studio-extension debugger dump-memory vsdebugpro memory-dump image-processing memdump memory debug-tools vs2022 debugging-tools debugging-extension export-object stackwalk json-serialization serialization hexdump json
Language:C# 60
makedumpfile / makedumpfile
Make Linux crash dump small by filtering and compressing pages
linux memory-dump
Language:C 55
mitikov / KeepSitecoreSimple
Advanced diagnostics techniques home
diagnostics memory-dump sitecore performance-analysis
43
vxnetrip / pyarmor-8-decrypt
Decrypt pyarmor 8 compiled program
decrypt-pyarmor deobf-pyarmor deobfuscation deobfuscator extractor hack linux memory-dump pyarmor pyarmor-decompilator pyarmor-decryptor pyarmor-deobfuscator pyarmor-reversed pyarmor7 pyarmor8 reverse-pyarmor windows
Language:Python 34
SimpleImager
QXJ6YW4 / SimpleImager
Simple Imager has been created for performing live acquisition of Windows based systems in a forensically sound manner
dfir dfir-automation ir-diag forensics forensics-tools forensics-101 blueteam memory-dump memory-dumper digital-forensics digital-forensics-incident-response forensic-imager
Language:Batchfile 32
mbrengel / memscrimper
Code for the DIMVA 2018 paper: "MemScrimper: Time- and Space-Efficient Storage of Malware Sandbox Memory Dumps"
compression forensics malware malware-research memory-dump sandbox
Language:C++ 27
circleous / memdump
Yet another tool for dump mapped memory regions of process, designed to work with Android
andorid linux memory-dump
Language:C++ 19
lymbin / frida-scripts
Frida Memory Dumper and Scanner for native Linux apps and Windows apps
dump linux memory-dump python search-bytes windows
Language:Python 19
VladimirBalun / Crashser
💥 Crasher - open source dump/crash server for different programming languages (used for crash analysis in various applications)
crash crash-reporting crash-reporting-tool crash-detection crush-dump dump memory-dump
Language:Go 18
videre-project / MTGOSDK
A software development kit (SDK) for inspecting and interacting with the Magic: The Gathering Online (MTGO) client.
cil clrmd csharp debugging-tool dotnet memory-dump dotnet-framework magic-the-gathering mtgo mtg runtime sdk
Language:C# 17
VladimirBalun / crasher-cpp-client
C++ client library for Crasher dump/crash server
crash-reporting crash dump memory-dump crash-reporting-tool crash-detection crush-dump
Language:C++ 17
v-a-c-u-u-m / neomorph
Frida Python Tool
frida memory-dump memory-searching spoof interception frida-python hex
Language:Python 15
BullyWiiPlaza / Universal-Pointer-Searcher-Engine
An efficient C++ command line tool for performing highly configurable and parallelized pointer searches
command-line-tool cpp homebrew linux memory-dump memory-hacking memory-pointers nintendo nintendo-switch nintendo-wiiu platform-independent playstation pointer-depth pointer-map pointer-search pointer-searcher universal-pointer-searcher windows xbox
14
h4sh5 / DumpIt-mirror
memory dump tool mirror for version 3.0.20171228.1
dumpit memory-forensics memory-dump memory-dumper minidump
14
Flawww / Relocation-Reconstructor
Heuristically recover relocations and imports from module memory dumps
iat import memory-dump pe pe-format pe-header portable-executable re rebuild relocations relocs reverse-engineering windows
Language:C++ 13
indy-singh / AutomatedDumpAnalysis
A simple tool that helps you run common diagnostics steps instead of battling with WinDbg.
memory-dump windbg clrmd csharp
Language:C# 13
ph0llux / emd
eBPF based memory dumper for linux systems
ebpf forensics linux memory-dump memory-dumper rust security
Language:Rust 9
manta0101 / yaforto
a Forensic Script to remotely obtain information from a target machine.
windows forensics remote collection investigation incident-response memory-dump triage-content
Language:PowerShell 8
BullyWiiPlaza / Universal-Offset-Porter-Engine
An efficient C++ command line utility for porting offsets and finding search patterns
aob aob-scan auto-porter code-porter code-porting cpp cross-platform desktop homebrew linux memory-dump memory-dump-offset memory-hacking memory-offset offset-porter search-pattern search-template universal-offset-porter windows
6
4x1md / yaesu_aprs_maps
Yaesu VX-8DR/DE received APRS beacons map.
aprs-beacon yaesu-vx-8dr vx-8r parse google-maps memory-dump
Language:JavaScript 5
pasquale95 / lsns
Volatility plugin to retrieve namespaces and relative processes from a memory dump.
kernel lsns memory-dump namespaces volatility volatility-plugins
Language:C 5
schwindelig / postmortem
:skull: :fire: :snowflake: A basic analyzer for memory dumps containing managed code
crash dump analysis post-mortem crash-dump automated clrmd windbg memory-dump
Language:C# 5
ItaliannCheater / PcaClient-viewer
An easy-to-use utility which dumps automatically PcaClient from explorer.exe process
csharp memory-dump regex windows-10
Language:C# 4
4x1md / vx8_aprs_parser
Incoming APRS messages parser for Yaesu VX-8DR/DE.
yaesu yaesu-vx-8dr aprs aprs-beacon ham-radio parser memory-dump
Language:Python 2
Coldwave96 / MemoryAnalyzer
Detect malware through memory analysis.
malware memory-dump
Language:Python 2
lattas / private-browsing-RAM
We examine private browsing artifacts in RAM dumps. Is it really private?
browsing-history memory-dump web
Language:Shell 2
aDarkDev / memdumper
simple memory dumper tool for linux
memory memory-dump memory-dumper mem-dumper
Language:Go 1