Claude Code plugin providing skills for x64dbg debugger automation

indent guides plugin for hex-rays decompiler

Trace Labs OSINT VM

Yet another matrix client

Handle elevation DKOM against ObRegisterCallbacks

A beautiful, idiomatic and less frustrating IDA C++ SDK.

A tool to transform Chromium browsers into a C2 Implant

A tool to convert windows registry export files into windows hive files that can be used to replace NTUSER.MAN

WinDbg Copilot - Agentic Debugging extension

Elastic's eBPF

Single-header, minimalistic, cross-platform hook library written in pure C

Obfusheader.h is a portable header file for C++14 compile-time obfuscation.

自定义linker加载so

Hypervisor Memory Introspection Core Library

SoftICE-like kernel debugger for Windows 11

Packer/Protector for x86-64 ELF binaries on Linux

A Windows Named Pipe Multi-tool / Proxy

Intel VT-x based hypervisor aiming to provide a thin VM-exit filtering platform on Windows.

VivienneVMM is a stealthy debugging framework implemented via an Intel VT-x hypervisor.

Python tool to resolve all strings in Go binaries obfuscated by garble

Bypass Chromium's App-Bound Encryption via Direct Syscall-based Reflective Process Hollowing. Extract cookies, passwords, payment methods & tokens from Chrome, Edge, Brave & Avast - fileless, user-…

Linux Kernel hooking engine (x86)

Red-Team LKM

Linux Rootkit (x86-64 / ARM64) that stealth hides processes, files, and sockets, hooks syscalls, encrypts traffic, and bypasses SELinux / AppArmor.

linux rootkit adapted for 2.6 and 3.x