Windows kernel research tool. Looks like a debugger, but it is not a debugger. It uses a kernel driver to provide a WinDbg-like live kernel debugging experience from a TUI console.
☆73Nov 7, 2026Updated this week
Alternatives and similar repositories for kn-live-dbg
Users that are interested in kn-live-dbg are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An IDA Pro / Hex-Rays plugin that turns noisy pseudocode into reviewable, kernel-aware cleanup artifacts☆163Jul 7, 2026Updated 4 months ago
- WinDbg x64 extension that disassembles live functions and uses an LLM to produce verified pseudocode.☆113Jun 22, 2026Updated 4 months ago
- Modern Win32 API monitor for Windows security, reverse engineering, debugging, and anti-cheat research.☆58Sep 21, 2026Updated last month
- ApplyCalleeType IDA Plugin 🤙 — Reborn. Single-file port to IDA Pro 9.3 with right-click menu, live prototype editor, and full SAL/MSDN p…☆83Mar 9, 2026Updated 8 months ago
- Kernforge is a project intelligence and fuzzing workbench for Windows security, anti-cheat engineering, and evidence-backed verification.☆25Jul 23, 2026Updated 3 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Windows User-Mode Shellcode Development Framework (WUMSDF)☆163Jul 15, 2026Updated 3 months ago
- Related to my article @ https://ckoi.dev/blog/breaking-claude-code/☆21Aug 19, 2026Updated 2 months ago
- Intel 64/Windows low-level experiments☆119Sep 16, 2026Updated last month
- Semantic analysis engine for detecting vulnerability fixes in Windows kernel driver patches — 58 YAML rules, Ghidra decompilation, reacha…☆74Feb 26, 2026Updated 8 months ago
- Ctrl+Scroll font zoom for all IDA views — Disassembly, Pseudocode, Hex View, Imports, Exports, Functions, Strings, and more. Compatible I…☆31Apr 15, 2026Updated 6 months ago
- Thats it! An Open-Source Windows UEFI Rootkit☆42Jul 19, 2025Updated last year
- Windows Analysis and Research Toolkit☆704Apr 28, 2026Updated 6 months ago
- Noradrenaline is a collection of high-performance post-exploitation shared libraries designed for native execution on macOS and Linux end…☆34Nov 4, 2026Updated last week
- ☆30Jun 21, 2026Updated 4 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- usermode thread hijacking detection via working set page fault monitoring☆44Jul 17, 2026Updated 3 months ago
- HVCI/kCET-aware bugcheck suppressor PoC☆22May 11, 2026Updated 6 months ago
- Demonstrate calling a kernel function and handle process creation callback against HVCI☆87Dec 21, 2022Updated 3 years ago
- PPLReaper is a Windows UNSIGNED kernel driver + userland companion tool designed to inspect and manipulate Protected Process Light (PPL) …☆26Mar 4, 2026Updated 8 months ago
- tests to catch some sloppy hv impls☆37Mar 16, 2026Updated 7 months ago
- Windows security research toolkit for LPE, persistence, COM hijacking, and attack surface enumeration.☆207Jun 13, 2026Updated 4 months ago
- Research on Windows Kernel Executive Callback Objects☆317Feb 22, 2020Updated 6 years ago
- Toolkit for Windows internals, vulnerability analysis, and reproducible security research workflows.☆67Jun 23, 2026Updated 4 months ago
- Experimental static analysis framework.☆14Apr 17, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Usermode NT Explorer - Query kernel addresses, translate virtual to physical addresses, inspect the PFN database, and more.☆93Mar 16, 2026Updated 7 months ago
- Use Prolog to analyze memory dumps and stopped live processes in WinDbg.☆16Oct 20, 2026Updated 3 weeks ago
- ☆89Mar 2, 2025Updated last year
- Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).☆171Aug 23, 2024Updated 2 years ago
- Static analysis & exploitation-triage toolkit for Windows kernel drivers. Discover IOCTLs, Symbolic Links, and check cert , and Downlaods…☆217Apr 27, 2026Updated 6 months ago
- Simple, header-only, pattern matching and patching class + tool written in modern C++.☆26Jun 5, 2026Updated 5 months ago
- binary instrumentation, analysis, and patching framework☆105Feb 20, 2026Updated 8 months ago
- Hooking Windows' exception dispatcher to protect process's PML4☆279Jan 24, 2025Updated last year
- first public in-process reflective PE loader for .NET NativeAOT binaries. maps a NativeAOT executable into the current process and execut…☆29Mar 28, 2026Updated 7 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- C# MCP server for kernel & user-mode Windows debugging — DbgEng COM, KDNET, Frida, dbgsrv, TTD, and integrated VM control. 29 tools for L…☆46Oct 10, 2026Updated last month
- BingusLdr is a DLL loader built with Crystal Palace that uses a CET compatible stack spoofing technique.☆118Jul 14, 2026Updated 3 months ago
- Harness to issue Virtual Secure Mode (VSM) "secure calls" from VTL 0 to VTL 1☆90Sep 8, 2025Updated last year
- Abusing Some Defects in KSLD Ark driver☆40May 30, 2026Updated 5 months ago
- WinDbg plugin to trace module transitions from a debugged driver.☆55Dec 22, 2025Updated 10 months ago
- Vibe Reverse Engineer with IDA Pro: An interface for IDA in SQL via live virtual tables. Don't let appearances deceive you! :)☆438Updated this week
- Offensive PoC tool for BTR.sys - Microsoft Defender's Boot Time Removal Tool. Supporting material for the BTR Reforged research (Black Ha…☆150Aug 20, 2026Updated 2 months ago
Are these results useful?