
KernelFlirt
Windows kernel-level debugger with OllyDbg/IDA-style UI, software and hardware breakpoints, PDB symbols, decompiler, and 17 plugins for reverse…

Windows kernel-level debugger with OllyDbg/IDA-style UI, software and hardware breakpoints, PDB symbols, decompiler, and 17 plugins for reverse…

Real-time Windows system monitor with advanced process, network, and disk analysis, stack trace debugging, malware detection, and service management.…

PowerShell-based incident response toolkit that collects 25+ forensic artifacts (processes, network connections, registry, browser history) and…

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

DFIR forensics companion server + capture extension

A Windows runtime analysis toolkit combining memory scanning, debugging, automation, and AI-friendly APIs.

IOC and YARA-based scanner for detecting indicators of compromise via file name regex, YARA signatures, hash matching, and C2 back-connect checks on…

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.


Cross-platform credential recovery tool that extracts stored passwords from browsers, email clients, databases, system mechanisms, and network…

Rule-based static and dynamic analysis tool that identifies capabilities in PE, ELF, .NET, and shellcode files, mapping them to MITRE ATT&CK…

Remote live forensics and incident response framework with Python agent for collecting forensic data from endpoints, including memory, disk, and…

UNIX-like reverse engineering framework and command-line toolset

Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs

AI-first reverse-engineering toolkit: static analysis, SSA decompiler, live memory, provenance. Source-available (PolyForm Noncommercial).

Defund the Police.

A MCP Debugger Server for Windows executables (x86 and x64). Exposes debugger functionality as MCP Tools for static / dynamic analysis of the…

Automated Linux incident response script with live triage, memory acquisition (LiME), disk imaging, YARA scanning, and HTML report generation.