memory-analysis

More than a ReClass port to the .NET platform.

Connect Cursor, Copilot & Claude AI directly to Cheat Engine via MCP. Automate reverse engineering, pointer scanning, and memory analysis using natural language.

ReClassEx

Historical Windows temporal memory-state research artifact for studying time-bound memory observations, validation limits, and defensive visibility.

A curated list of awesome Memory Forensics for DFIR

Detects process injection and memory manipulation used by malware. Finds RWX regions, shellcode patterns, API hooks, thread hijacking, and process hollowing. Built in Rust for speed. Includes CLI and TUI interfaces.

inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques

Allows you to quickly query a Windows machine for RAM artifacts

An automatically testing and analysis hprof library for android app (自动分析Android内存泄漏)

Deep memory analysis for Windows processes — the tool that saves you hours of debugging

Kokkos C++ Performance Portability Programming Ecosystem: Profiling and Debugging Tools

Find memory leaks in Linux and macOS applications

Process heap analysis framework - Windows/Linux - record type inference and forensics

Scans game processes for most likely entity list addresses

Measure stack usage in Linux and macOS applications

MCP Cheat Engine Server — provides safe, structured read-only access to memory analysis and debugging functionality through the Model Context Protocol (MCP). For developers, security researchers, and game modders.

This repository contains detailed Capture The Flag (CTF) writeups for challenges completed on CyberDefenders, TryHackMe, BTLO, and more. The writeups are provided in PDF format and cover areas such as digital forensics, malware analysis, network analysis and much more.

TCP-enhanced fork of Cheat Engine MCP Bridge. Connect Cursor, Copilot and Claude AI directly to local or remote Cheat Engine via TCP. Automate reverse engineering, pointer scanning, and memory analysis using natural language.

👀Dynamic memory watcher/tracer/analyzer for CTF pwn

Full-stack mobile game-security research (Honor of Kings / sgame): kernel-mode cross-process memory reading (KernelPatch KPM), Tencent ACE anti-cheat & IL2CPP/native engine reverse engineering, and a real-time ESP overlay. Educational / research only; no proprietary binaries.