Model Context Protocol for WinDbg.
☆1,640Oct 28, 2026Updated this week
Alternatives and similar repositories for mcp-windbg
Users that are interested in mcp-windbg are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- WinDbg-ext-MCP bridges your favorite LLM client (like Cursor, Claude, or VS Code) with WinDbg, enabling real-time, AI assisted kernel deb…☆119Sep 10, 2025Updated last year
- Vibe Reverse Engineer with IDA Pro: An interface for IDA in SQL via live virtual tables. Don't let appearances deceive you! :)☆430Oct 10, 2026Updated 3 weeks ago
- An MCP (Model Context Protocol) server that turns all pybag Windows debugger functions into native MCP tools. It lets MCP-compatible clie…☆94May 3, 2026Updated 5 months ago
- Harness to issue Virtual Secure Mode (VSM) "secure calls" from VTL 0 to VTL 1☆89Sep 8, 2025Updated last year
- A tool that is used to hunt vulnerabilities in x64 WDM drivers☆479Jun 18, 2026Updated 4 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Virtual Trust Level (VTL 1) secure call tracing☆107Jul 19, 2026Updated 3 months ago
- An IDA Pro / Hex-Rays plugin that turns noisy pseudocode into reviewable, kernel-aware cleanup artifacts☆163Jul 7, 2026Updated 3 months ago
- AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.☆13,264Sep 26, 2026Updated last month
- WinDbg Copilot - Agentic Debugging extension☆111Jul 19, 2026Updated 3 months ago
- State-of-the-art native debugging tools☆4,173Oct 20, 2026Updated last week
- Windows Anti-Rootkit Tool☆586Jul 25, 2026Updated 3 months ago
- Gain insights into MS-RPC implementations that may be vulnerable using an automated approach and make it easy to visualize the data. By f…☆351May 4, 2026Updated 5 months ago
- IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformati…☆1,957Sep 17, 2026Updated last month
- WinDbg x64 extension that disassembles live functions and uses an LLM to produce verified pseudocode.☆112Jun 22, 2026Updated 4 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Techniques/tools on Windows kernel exploitation☆269Sep 1, 2026Updated 2 months ago
- Windows KASLR bypass using prefetch side-channel☆218Apr 26, 2024Updated 2 years ago
- Hooking Windows' exception dispatcher to protect process's PML4☆276Jan 24, 2025Updated last year
- memory introspection and reverse engineering hypervisor powered by leveraging Hyper-V☆838Updated this week
- Collect Windows telemetry for Maldev☆513Aug 14, 2026Updated 2 months ago
- VirtualKD-Redux - A revival and modernization of VirtualKD☆986Jun 23, 2024Updated 2 years ago
- A library to develop kernel level Windows payloads for post HVCI era☆541May 18, 2021Updated 5 years ago
- Kernel Driver Utility☆2,790Sep 29, 2026Updated last month
- Toolset to manipulate RPC clients by finding delayed services and masquerading as them☆113Oct 5, 2026Updated 3 weeks ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks☆473Oct 19, 2026Updated 2 weeks ago
- A Windows Kernel Driver Emulator base on Unicorn, Kernel Memory Dump and some of native environment☆206Aug 27, 2026Updated 2 months ago
- Stealth-focused Intel VT-x hypervisor (EAC/BE/ACs/AVs).☆440Mar 20, 2026Updated 7 months ago
- RpcView is a free tool to explore and decompile Microsoft RPC interfaces☆1,070Sep 24, 2023Updated 3 years ago
- A WinDbg plugin that turns the current debugging session into an MCP server for command docs, debugger actions, and AI-assisted analysis.☆58Aug 9, 2026Updated 2 months ago
- msFuzz is a coverage-guided fuzzer for Windows kernel drivers that utilizes Intel PT and leverages constraint and dependency analysis to …☆233Dec 24, 2025Updated 10 months ago
- x64DbgMCPServer made from c# with Claude, Windsurf and Cursor support☆744Oct 4, 2026Updated 3 weeks ago
- Hook system calls on Windows by using Kaspersky's hypervisor☆1,325Apr 2, 2026Updated 7 months ago
- WinDbg plugin to trace module transitions from a debugged driver.☆54Dec 22, 2025Updated 10 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Proof of Concept for manipulating the Kernel Callback Table in the Process Environment Block (PEB) to perform process injection and hijac…☆275Oct 31, 2024Updated 2 years ago
- Process Monitor X v2☆665Jul 4, 2026Updated 3 months ago
- Windows Object Explorer 64-bit☆1,991Oct 6, 2026Updated 3 weeks ago
- PoC Implementation of a fully dynamic call stack spoofer☆1,015Jul 20, 2024Updated 2 years ago
- A bunch of JavaScript extensions for WinDbg.☆366Nov 28, 2024Updated last year
- Hells Hollow Windows 11 Rootkit technique to Hook the SSDT via Alt Syscalls☆294Jul 13, 2026Updated 3 months ago
- Lightweight, dependency-free x86-64 CPU emulation library with Unicorn-like guest mode and direct host-memory execution.☆239May 11, 2026Updated 5 months ago