
ida_bochs_windows
Helper script for Windows kernel debugging with IDA Pro on native Bochs debugger (including PDB symbols)

Helper script for Windows kernel debugging with IDA Pro on native Bochs debugger (including PDB symbols)

Static Binary Instrumentation tool for Windows x64 executables

Automated DLL Hijacking Discovery, Validation, and Confirmation. Turning local misconfigurations into weaponized, confirmed attack paths.

An strace-like program for the Windows 'native' API

An API hooking framework for intercepting and monitoring Windows applications

Runtime Windows API interception library for hooking, monitoring, and instrumenting function calls. Supports binary rewriting and DLL injection,…

Winstrument is a framework of modular scripts to aid in instrumenting Windows software using Frida for reverse engineering and attack surface…

Runtime instrumentation framework for building dynamic analysis tools: tracing, profiling, code coverage, memory debugging, fuzzing, and disassembly…

Rusty Hypervisor - Windows Kernel Blue Pill Type-2 Hypervisor in Rust (Codename: Matrix)

Windows NT ioctl bruteforcer and modular fuzzer

Detect, analyze and uniquely identify crashes in Windows applications

User-mode x86_64 binary emulator for malware analysis and reverse engineering. Supports PE, ELF, memory dumps, and raw binaries with syscall tracing,…

Fil-C: completely compatible memory safety for C and C++

Sample extensions, scripts, and API uses for WinDbg.

Open-source mobile security testing suite for iOS and Android. Previously Passionfruit

Cargo subcommand for coverage-guided Rust fuzzing with libFuzzer: create and run fuzz targets, minimize failures and corpora, and report coverage.

An Interactive Binary Patching Plugin for IDA Pro

CMake build of Ghidra's SLEIGH processor specification library, providing standalone disassembly and p-code lifting engines for reverse engineering…