Volatility 3 ported to Rust. Same output, much faster.
☆200Oct 6, 2026Updated last month
Alternatives and similar repositories for vol-rs
Users that are interested in vol-rs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆18Oct 3, 2026Updated last month
- Linux Memory Forensics Framework That Transforms Memory Dumps Into a Navigable Filesystem☆211Oct 11, 2026Updated 3 weeks ago
- Bulk-run Hayabusa across a folder of triage collections, one run per host, with per-host reports and a cross-host triage dashboard☆20Updated this week
- various methods of making API calls☆19Feb 1, 2025Updated last year
- Rust-based Fast Forensics Tool for Windows☆15Aug 9, 2026Updated 2 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Rust DFIR tool that massively parses cross-platform evidence, even deleted logs, into a lateral movement timeline and graph database.☆32Updated this week
- Windows Kernel-Mode Shellcode Development Framework (WKMSDF)☆91Aug 1, 2026Updated 3 months ago
- A CET-compatible Windows x64 loader that produces fully backed call stacks through runtime function table manipulation, code cave injecti…☆135Sep 6, 2026Updated 2 months ago
- DFIR forensics companion server + capture extension☆36Updated this week
- ☆37May 19, 2026Updated 5 months ago
- Run unsigned kernel payloads in a signed kernel driver via wasm3. No JIT/W^x (HVCI/etc., compliant)☆155Aug 18, 2026Updated 2 months ago
- Decrypt VMware vTPM-encrypted .vmem/.vmsn/.vmss/.nvram from the VM password, and flatten the .vmem to a Volatility-ready image.☆55Jul 4, 2026Updated 4 months ago
- BingusLdr is a DLL loader built with Crystal Palace that uses a CET compatible stack spoofing technique.☆117Jul 14, 2026Updated 3 months ago
- CVE-2026-66804 Windows Cross Device virtual camera EoP - Standard user to SYSTEM☆25Aug 13, 2026Updated 2 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Multiplatform MEMORY.DMP analysis tool with a WinDbg flavor☆179Apr 20, 2026Updated 6 months ago
- A Volatility plugin to detect hidden Linux Kernel Modules☆17Jul 11, 2025Updated last year
- Open Source implementation of PsPipeJack☆27May 27, 2026Updated 5 months ago
- Silent;Call — Pre-authentication remote root on Cisco CUCM 15.x (CVSS 10.0)☆30Aug 4, 2026Updated 3 months ago
- ☆37Aug 21, 2024Updated 2 years ago
- A compiled language for Windows position-independent x86-64 shellcode and Beacon Object Files.☆322Jun 28, 2026Updated 4 months ago
- Workshop materials for “Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel” presented at DEF CON 34 and BSidesLV 20…☆397Aug 16, 2026Updated 2 months ago
- Passive backdoor implant that sniffs for a covert magic-packet trigger and runs tasks written in a custom 23-opcode bytecode command lang…☆57Aug 26, 2026Updated 2 months ago
- DCOM in memory and fileless lateral movement techniques through .Net deserilization☆296Jun 22, 2026Updated 4 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- WhatAboutSAM is my custom PoC of a Windows SAM dumper☆50Oct 25, 2026Updated last week
- Extract Windows credentials directly from VM memory snapshots and virtual disks☆1,657Updated this week
- Framework-agnostic log sanitizer for browsers and Node.js. Redacts secrets and infrastructure identifiers with stable HMAC tokens so even…☆51Oct 14, 2026Updated 3 weeks ago
- Forensic cheatsheets for use with cheat☆16Dec 2, 2021Updated 4 years ago
- A foundational C library for building operationally credible offensive capabilities☆95Sep 21, 2026Updated last month
- SHELLSILO is a cutting-edge tool that translates C syntax into syscall assembly and its corresponding shellcode. It streamlines the proce…☆153Aug 4, 2025Updated last year
- Collection of reversed vulnerable drivers weaponized into process killers. PPL won't save you.☆115Oct 18, 2026Updated 2 weeks ago
- KslDump — Why bring your own knife when Defender already left one in the kitchen?☆420Apr 13, 2026Updated 6 months ago
- $I30 INDX Carver☆18Jun 23, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go bin…☆34Updated this week
- Kassandra is a custom Mythic C2 agent written in Rust, containerized via a Python-based builder☆25Jul 31, 2026Updated 3 months ago
- Chisel new generation, written in rust. SSH under WSS with some customization.☆138Jan 24, 2026Updated 9 months ago
- InfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution☆334Oct 22, 2026Updated 2 weeks ago
- This repo contains the results of an internal re-write of impacket I undertook at my current company. It contains some of the IoCs found …☆360Sep 7, 2026Updated last month
- DFIR Timeline Analysis for macOS — SQLite-backed viewer for CSV, TSV, XLSX, EVTX, Plaso, $MFT, and $J files with AI Artifacts, AI Secret …☆390Sep 8, 2026Updated last month
- A poor man's attempt to replicate the shellcode execution technique demo'd by @3lk during STHACK 2026 (https://www.youtube.com/watch?v=al…☆40Oct 14, 2026Updated 3 weeks ago