Tools

rr-debugger/rr

Record and replay framework for deterministic debugging of multi-threaded applications, enabling reverse execution, hardware watchpoints, and…

go-delve/delve

Source-level debugger for Go with CLI, API, and headless modes; supports breakpoints, variable inspection, and execution tracing for efficient…

dynamorio/dynamorio

Runtime instrumentation framework for building dynamic analysis tools: tracing, profiling, code coverage, memory debugging, fuzzing, and disassembly…

microsoft/detours

Runtime Windows API interception library for hooking, monitoring, and instrumenting function calls. Supports binary rewriting and DLL injection,…

whatswrongandwhy/ptrace

Linux ptrace-based process tracing and debugging utility for inspecting system calls, memory, and program execution flow.

ddudle/ctxdebug

MCP-powered reverse engineering platform connecting WinDbg, IDA Pro & x64dbg with 160+ AI-accessible debugging and analysis tools.

airbus-cert/ttddbg

Time Travel Debugging IDA plugin

therealdreg/ida_bochs_windows

Helper script for Windows kernel debugging with IDA Pro on native Bochs debugger (including PDB symbols)

pietroborrello/customprocessingunit

The first analysis framework for CPU microcode

mandiant/strace

A DTrace on Windows Reimplementation

avast/yari

YARI is an interactive debugger for YARA Language.

microsoft/windbg-samples

Sample extensions, scripts, and API uses for WinDbg.

nalen98/ghidraemu

Native Pcode emulator

hugsy/windbg_js_scripts

Toy scripts for playing with WinDbg JS API

rbmm/ntdetours

Detours implementation (x64/x86) which used only ntdll import

awslabs/snapchange

Lightweight fuzzing of a memory snapshot using KVM

skylined/bugid

Detect, analyze and uniquely identify crashes in Windows applications

advdebug/brovan

User-mode x86_64 binary emulator for malware analysis and reverse engineering. Supports PE, ELF, memory dumps, and raw binaries with syscall tracing,…