More than a ReClass port to the .NET platform.

Connect Cursor, Copilot & Claude AI directly to Cheat Engine via MCP. Automate reverse engineering, pointer scanning, and memory analysis using natural language.

ReClassEx

Historical Windows temporal memory-state research artifact for studying time-bound memory observations, validation limits, and defensive visibility.

A curated list of awesome Memory Forensics for DFIR

Detects process injection and memory manipulation used by malware. Finds RWX regions, shellcode patterns, API hooks, thread hijacking, and process hollowing. Built in Rust for speed. Includes CLI and TUI interfaces.

inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques

Allows you to quickly query a Windows machine for RAM artifacts

An automatically testing and analysis hprof library for android app (自动分析Android内存泄漏)

Kokkos C++ Performance Portability Programming Ecosystem: Profiling and Debugging Tools

Find memory leaks in Linux and macOS applications

Process heap analysis framework - Windows/Linux - record type inference and forensics

Scans game processes for most likely entity list addresses

Measure stack usage in Linux and macOS applications

MCP Cheat Engine Server — provides safe, structured read-only access to memory analysis and debugging functionality through the Model Context Protocol (MCP). For developers, security researchers, and game modders.

👀Dynamic memory watcher/tracer/analyzer for CTF pwn

This repository contains detailed Capture The Flag (CTF) writeups for challenges completed on CyberDefenders, TryHackMe, BTLO, and more. The writeups are provided in PDF format and cover areas such as digital forensics, malware analysis, network analysis and much more.

🔎 redis memory analyzer for golang

Live memory analysis detecting malware IOCs in processes, modules, handles, tokens, threads, .NET assemblies, memory address space and environment variables. Dumps, detects and dissasemble hooks, shellcode, memory regions, modules and processes.

PatternScan library for internal and external pattern scan