
KernelFlirt
Windows kernel-level debugger with OllyDbg/IDA-style UI, software and hardware breakpoints, PDB symbols, decompiler, and 17 plugins for reverse…

Windows kernel-level debugger with OllyDbg/IDA-style UI, software and hardware breakpoints, PDB symbols, decompiler, and 17 plugins for reverse…

Real-time Windows system monitor with advanced process, network, and disk analysis, stack trace debugging, malware detection, and service management.…

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

DFIR forensics companion server + capture extension

A Windows runtime analysis toolkit combining memory scanning, debugging, automation, and AI-friendly APIs.

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

UNIX-like reverse engineering framework and command-line toolset

PowerShell-based incident response toolkit that collects 25+ forensic artifacts (processes, network connections, registry, browser history) and…

A variant of Gargoyle for x64 to hide memory artifacts using ROP only and PIC


IOC and YARA-based scanner for detecting indicators of compromise via file name regex, YARA signatures, hash matching, and C2 back-connect checks on…

Cross-platform credential recovery tool that extracts stored passwords from browsers, email clients, databases, system mechanisms, and network…

SALT - SLUB ALlocator Tracer for the Linux kernel

Rule-based static and dynamic analysis tool that identifies capabilities in PE, ELF, .NET, and shellcode files, mapping them to MITRE ATT&CK…

Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

Windows memory hacking library

Remote live forensics and incident response framework with Python agent for collecting forensic data from endpoints, including memory, disk, and…