
KernelFlirt
Windows kernel-level debugger with OllyDbg/IDA-style UI, software and hardware breakpoints, PDB symbols, decompiler, and 17 plugins for reverse…

Windows kernel-level debugger with OllyDbg/IDA-style UI, software and hardware breakpoints, PDB symbols, decompiler, and 17 plugins for reverse…

Real-time Windows system monitor with advanced process, network, and disk analysis, stack trace debugging, malware detection, and service management.…

Ghidra is a software reverse engineering (SRE) framework

Volatility 3 ported to Rust. Same output, much faster.

Exploit Development and Reverse Engineering with GDB & LLDB Made Easy

Advanced framework for extracting digital artifacts from volatile memory (RAM) samples, enabling deep forensic analysis of system runtime state…

Security sensor for realtime threat detection and protection

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on…

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by…

Spoofing the Windows 10 HDD/diskdrive serialnumber from kernel without hooking

An advanced memory forensics framework

Community-maintained Volatility plugin collection for memory forensics, extending memory dump analysis with modules for malware and process…

Direct Memory Access (DMA) Attack Software

Custom PE loading and manipulation library for manual mapping, IAT hooking, memory dumping, and rebuilding imports for malware analysis and reverse…


An Active Defense and EDR software to empower Blue Teams

Cross-platform CUI process memory scanner built on Frida for finding, filtering, patching, and dumping live process memory during reverse engineering…