Pinned Loading

1. windbg-decompile-ext windbg-decompile-ext Public

   WinDbg x64 extension that disassembles live functions and uses an LLM to produce verified pseudocode.

   C++ 111 11

2. kn-live-dbg kn-live-dbg Public

   Windows kernel research tool. Looks like a debugger, but it is not a debugger. It uses a kernel driver to provide a WinDbg-like live kernel debugging experience from a TUI console.

   C++ 71 11

3. kernullist-blog kernullist-blog Public

   kernullist-blog

   Ruby

4. PseudoForge PseudoForge Public

   An IDA Pro / Hex-Rays plugin that turns noisy pseudocode into reviewable, kernel-aware cleanup artifacts

   Python 159 14

5. ETWPrism ETWPrism Public

   User-mode ETW interception and telemetry manipulation lab for Windows security research.

   Rust 43 1

6. KnWin32ApiMonitor KnWin32ApiMonitor Public

   Modern Win32 API monitor for Windows security, reverse engineering, debugging, and anti-cheat research.

   C++ 45 6