Windows kernel research tool. Looks like a debugger, but it is not a debugger. It uses a kernel driver to provide a WinDbg-like live kernel debugging experience from a TUI console.
☆73Oct 13, 2026Updated last week
Alternatives and similar repositories for kn-live-dbg
Users that are interested in kn-live-dbg are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An IDA Pro / Hex-Rays plugin that turns noisy pseudocode into reviewable, kernel-aware cleanup artifacts☆162Jul 7, 2026Updated 3 months ago
- WinDbg x64 extension that disassembles live functions and uses an LLM to produce verified pseudocode.☆112Jun 22, 2026Updated 4 months ago
- ApplyCalleeType IDA Plugin 🤙 — Reborn. Single-file port to IDA Pro 9.3 with right-click menu, live prototype editor, and full SAL/MSDN p…☆83Mar 9, 2026Updated 7 months ago
- Kernforge is a project intelligence and fuzzing workbench for Windows security, anti-cheat engineering, and evidence-backed verification.☆25Jul 23, 2026Updated 3 months ago
- Modern Win32 API monitor for Windows security, reverse engineering, debugging, and anti-cheat research.☆54Sep 21, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Related to my article @ https://ckoi.dev/blog/breaking-claude-code/☆20Aug 19, 2026Updated 2 months ago
- Windows User-Mode Shellcode Development Framework (WUMSDF)☆162Jul 15, 2026Updated 3 months ago
- Intel 64/Windows low-level experiments☆118Sep 16, 2026Updated last month
- Semantic analysis engine for detecting vulnerability fixes in Windows kernel driver patches — 58 YAML rules, Ghidra decompilation, reacha…☆67Feb 26, 2026Updated 7 months ago
- Ctrl+Scroll font zoom for all IDA views — Disassembly, Pseudocode, Hex View, Imports, Exports, Functions, Strings, and more. Compatible I…☆31Apr 15, 2026Updated 6 months ago
- HVCI/kCET-aware bugcheck suppressor PoC☆21May 11, 2026Updated 5 months ago
- Windows Analysis and Research Toolkit☆701Apr 28, 2026Updated 5 months ago
- Simple, header-only, pattern matching and patching class + tool written in modern C++.☆26Jun 5, 2026Updated 4 months ago
- Thats it! An Open-Source Windows UEFI Rootkit☆42Jul 19, 2025Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- usermode thread hijacking detection via working set page fault monitoring☆43Jul 17, 2026Updated 3 months ago
- ☆29Jun 21, 2026Updated 4 months ago
- Noradrenaline is a collection of high-performance post-exploitation shared libraries designed for native execution on macOS and Linux end…☆33Sep 1, 2026Updated last month
- ☆27Oct 12, 2026Updated last week
- Demonstrate calling a kernel function and handle process creation callback against HVCI☆87Dec 21, 2022Updated 3 years ago
- tests to catch some sloppy hv impls☆37Mar 16, 2026Updated 7 months ago
- A Model Context Protocol (MCP) server that gives AI agents live, stateful Windows RPC attack-surface research, built on James Forshaw's N…☆16Sep 30, 2026Updated 3 weeks ago
- Experimental static analysis framework.☆15Apr 17, 2024Updated 2 years ago
- Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).☆171Aug 23, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Static analysis & exploitation-triage toolkit for Windows kernel drivers. Discover IOCTLs, Symbolic Links, and check cert , and Downlaods…☆209Apr 27, 2026Updated 5 months ago
- ☆89Mar 2, 2025Updated last year
- Usermode NT Explorer - Query kernel addresses, translate virtual to physical addresses, inspect the PFN database, and more.☆93Mar 16, 2026Updated 7 months ago
- Harness to issue Virtual Secure Mode (VSM) "secure calls" from VTL 0 to VTL 1☆89Sep 8, 2025Updated last year
- CVE-2026-50343 InstallService StaticPluginMap EoP - standard user to SYSTEM☆48Jul 16, 2026Updated 3 months ago
- Defensive x64 Windows anti-cheat and endpoint-integrity research foundation.☆20Updated this week
- Vibe Reverse Engineer with IDA Pro: An interface for IDA in SQL via live virtual tables. Don't let appearances deceive you! :)☆429Oct 10, 2026Updated 2 weeks ago
- binary instrumentation, analysis, and patching framework☆105Feb 20, 2026Updated 8 months ago
- WinDbg plugin to trace module transitions from a debugged driver.☆54Dec 22, 2025Updated 10 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- first public in-process reflective PE loader for .NET NativeAOT binaries. maps a NativeAOT executable into the current process and execut…☆28Mar 28, 2026Updated 6 months ago
- Abusing Some Defects in KSLD Ark driver☆40May 30, 2026Updated 4 months ago
- Autonomous Windows POC developer from patchwatch diff reports☆161Jul 30, 2026Updated 2 months ago
- Windows native ETW inspection suite for browsing providers, reading metadata, consuming live events, recording ETL traces, filtering resu…☆113Oct 2, 2026Updated 3 weeks ago
- Set of PoC to abuse Windows minifilters functionality☆112May 1, 2026Updated 5 months ago
- Research on Windows Kernel Executive Callback Objects☆317Feb 22, 2020Updated 6 years ago
- Windows 11 kernel research framework demonstrating DSE bypass on Windows 11 25H2 through boot-time execution. Loads unsigned drivers by s…☆282Apr 9, 2026Updated 6 months ago