
PrologWinDbg
Use Prolog to analyze memory dumps and stopped live processes in WinDbg.

Use Prolog to analyze memory dumps and stopped live processes in WinDbg.

An automated Themida / Code Virtualizer / WinLicense (v3.0-v4) unpacker and dump fixer tool

Windows x64 research hypervisor using Intel VT-x and per-CPU EPT hooks to intercept Nt/Ex/Mm routines, apply request policies, and stream live kernel…

Rust port of REA, a local-only reverse-engineering tool with CLI/MCP workflows and a native Ghidra worker

Decompile and disassemble Python bytecode (.pyc/.pyo) back to readable source. Supports Python 2.0 - 3.15 (CPython, PyPy and other implementations).…

frida-stalker based system call tracer on windows(x64).

Parses Go binaries to recover symbols, function metadata, types, file paths, and embedded strings, including stripped or UPX-packed samples, with IDA…

Reverse engineering Amadey Loader with x64dbg: dynamic API resolution, token privilege escalation, keylogger hooks, clipboard capture, and…

Windows Linux DMA、Dump 、Direct、inject 内存读取、写入工具

A search-first, profile-aware reverse-engineering workspace for AI agents — 735 tools across 36 domains in one MCP server.

Standalone zero-driver Windows system and API monitor in Rust

Python bindings for the Icicle emulator, enabling grey-box firmware fuzzing, binary emulation, and reverse-engineering workflows across x64 and ARM64…

Open source binary analysis framework and decompiler built on LLVM and QEMU, lifting binaries to a readable intermediate representation for reverse…

Kernel hardware debugger module for dumping rootkit operations and inspecting kernel-level activity for malware analysis and reverse engineering.

Windows kernel driver that hooks Nt* SSDT functions to hide debuggers and processes from anti-debug checks, with an x64dbg plugin for stealth…

Kernel Driver for x64 Window System which allows you to read/write Virtual/Physical Memory hooking Win32k

Cross-platform instrumentation and introspection library written in C

Lua Decompiler for lua 5.1 , 5.2 and 5.3