PoCs and tools for investigation of Windows process execution techniques

• UpdatedMar 15, 2025
• C#

Kernel mode WinDbg extension and PoCs for token privilege investigation.

• UpdatedJan 21, 2025
• C#

WinDBG Anti-RootKit Extension

• UpdatedJul 29, 2020
• C++

WinDbg extension for data mining managed heap. It also includes commands to list http request, wcf services, WIF tokens among others

• UpdatedMay 6, 2023
• C++

Host of debugging-related extensions such as post-mortem tools or WinDBG extensions

• UpdatedNov 27, 2021
• C#

PEDA-like debugger UI for WinDbg

• UpdatedMar 29, 2024
• Python

Small PoC of using a Microsoft signed executable as a lolbin.

• UpdatedFeb 27, 2023
• C++

reverse engineering extension plugin for windbg

• UpdatedSep 30, 2019
• C++

A command tree based on commands and extensions for Windows Kernel Debugging.

• UpdatedJul 10, 2020

Extensions for the new WinDbg

• UpdatedApr 24, 2023
• HTML

C# debugging automation tool

• UpdatedDec 8, 2022
• C#

Debugger extension for the Debugging Tools for Windows (WinDbg, KD, CDB, NTSD).

• UpdatedNov 14, 2016
• C++

Windbg extension that allows you analyze Control Flow Guard map

• UpdatedOct 7, 2021
• C++

Source code for advanced .NET Debugging.

• UpdatedFeb 2, 2021
• C#

ASProtect reverse engineering & analysis WinDbg extension

• UpdatedNov 16, 2020
• C

collection of links related to using and improving windbg

• UpdatedJun 17, 2018

javascript extension of windbg for hacker.

• UpdatedJun 27, 2023
• C++

windbg plugin easy-step from user code to kernel code

• UpdatedAug 11, 2023
• C

Debugger extension for analyzing rebased addresses

• UpdatedMay 2, 2022
• C++

WPF application that implements ClrMd library

• UpdatedFeb 3, 2017
• C#