Utils use to dump android ELF from memory and do some fix including the ELF section header rebuilding

inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques

The Volatility Collaborative GUI

SMDA is a minimalist recursive disassembler library that is optimized for accurate Control Flow Graph (CFG) recovery from memory dumps.

A python application designed to remotely dump RAM of a Linux client and create a volatility profile for later analysis on your local host.

Utils use to dump android ELF from memory and do some fix including the ELF section header rebuilding

A sophisticated memory analysis library that extracts DEX files from running Android applications without requiring root access.

A simple node module to access V8 inspector + some tools to export and read the data.

Implementation of the DIMVA 2017 publication "Quincy: Detecting Host-Based Code Injection Attacks in Memory Dumps"

Volatility Explorer Suit

Visual Studio extension for enhanced C/C++, C# debugging. Dump blocks of data, load data in memory and more.

Make Linux crash dump small by filtering and compressing pages

Advanced diagnostics techniques home

Decrypt pyarmor 8 compiled program

Simple Imager has been created for performing live acquisition of Windows based systems in a forensically sound manner

Code for the DIMVA 2018 paper: "MemScrimper: Time- and Space-Efficient Storage of Malware Sandbox Memory Dumps"

A software development kit (SDK) for inspecting and interacting with the Magic: The Gathering Online (MTGO) client.

Frida Memory Dumper and Scanner for native Linux apps and Windows apps

Yet another tool for dump mapped memory regions of process, designed to work with Android

C++ client library for Crasher dump/crash server

💥 Crasher - open source dump/crash server for different programming languages (used for crash analysis in various applications)

memory dump tool mirror for version 3.0.20171228.1

An efficient C++ command line tool for performing highly configurable and parallelized pointer searches

Frida Python Tool

Heuristically recover relocations and imports from module memory dumps

A simple tool that helps you run common diagnostics steps instead of battling with WinDbg.

eBPF based memory dumper for linux systems

a Forensic Script to remotely obtain information from a target machine.

🤖 An AI-native MCP server for .NET memory dump investigations. Leverage LLMs (Claude/Gemini) to analyze heaps, threads, and exceptions using natural language. Built with ClrMD, token-efficient paging, and Docker support for cross-architecture (.NET/AMD64/ARM64) post-mortem analysis.

An efficient C++ command line utility for porting offsets and finding search patterns