Run macOS on QEMU/KVM. With OpenCore + Monterey + Ventura + Sonoma support now! Only commercial (paid) support is available now to avoid spammy issues. No Mac system is required.

macos osx emulation virtualization kvm qemu hackintosh sonoma qemu-kvm ventura macos-installer tahoe catalina-hackinotsh kernel-debugging ventura-hackintosh sonoma-hackintosh tahoe-hackintosh

• Updated Jan 26, 2026
• Shell

适用于 Windows 10/11 的应用与进程隐藏工具，无需注入 DLL。 | Application and process hiding tool for Windows 10/11, without DLL injection.

windows windows-kernel windbg process-management kernel-debugging process-hiding

• Updated Oct 2, 2026

Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)

windows debugging vmware pdb reverse-engineering osdev gdb ida-pro idapython vmware-workstation kernel-debugging

• Updated Aug 11, 2023
• Python

Helper script for Windows kernel debugging with IDA Pro on native Bochs debugger (including PDB symbols)

windows debugging pdb reverse-engineering osdev instrumentation ida-pro bochs idapython kernel-debugging

• Updated Aug 11, 2023
• Python

C# MCP server for kernel & user-mode Windows debugging — DbgEng COM, KDNET, Frida, dbgsrv, TTD, and integrated VM control. 29 tools for LLM agents.

windows debugger csharp vmware dotnet mcp reverse-engineering windbg malware-analysis frida ttd claude exploit-development vulnerability-research dbgeng kernel-debugging ai-agent llm model-context-protocol time-travel-debugging

• Updated Oct 10, 2026
• C#

Tools for Linux kernel debugging on Bochs (including symbols, native Bochs debugger and IDA PRO)

linux x86-64 linux-kernel ida-pro bochs idapython debugging-tool linux-kernel-hacking kernel-debugging

• Updated Aug 11, 2023
• Python

Helper scripts for windows debugging with symbols for Bochs and IDA Pro (PDB files). Very handy for user mode <--> kernel mode

windows pdb ida-pro bochs idapython kernel-debugging

• Updated Aug 11, 2023
• Python

Dump PDB Symbols including support for Bochs Debugging Format (with wine support)

windows debugging pdb reverse-engineering osdev instrumentation wine bochs linux-support kernel-debugging

• Updated Aug 11, 2023
• C

Isolated Windows vulnerability-research platform for Kali and AI agents: VM automation, hypervisor debugging, driver/IPC testing, containment, and MCP.

python windows cli security mcp virtualization hacking kvm qemu malware-analysis pentest kali-linux offensive-security kali red-team ai-agents vulnerability-research windows-vm kernel-debugging

• Updated Nov 11, 2026
• Python

windbg plugin easy-step from user code to kernel code

plugin helper x86-64 windows-kernel windbg-extension debugger-extension kernel-debugging engextcpp

• Updated Aug 11, 2023
• C

A custom WinDbg extension for memory dump analysis and kernel debugging

windows dump-analysis windbg windbg-extension kernel-debugging

• Updated Sep 6, 2025
• C++

Fathom — Windows reverse-engineering & memory-forensics toolkit, built on x64dbg (GPL-3.0): user-mode to kernel/Hyper-V (HvKdFusion + wineye), Python automation (pybridge), trace export.

python windows debugger reverse-engineering disassembler malware-analysis hyper-v x64dbg memory-forensics kernel-debugging

• Updated Nov 5, 2026
• C++

Get PDB debug symbols for any Windows build by version number — works offline/airgapped. Pre-computed symchk manifests for every public build.

windows pdb reverse-engineering dfir ida-pro windbg malware-analysis volatility debug-symbols debugging-tools memory-forensics airgapped windows-internals ghidra kernel-debugging symbol-server symchk

• Updated Nov 12, 2026
• HTML

Self-developed Windows ARK (Anti-Rootkit) tool: single KMDF .sys (30 modules, macro-gated) + Python R3 UI/CLI. For authorized test environments only. / 自研 Windows ARK 工具，授权测试环境专用

python windows ark forensics kernel-driver windbg memory-forensics anti-rootkit security-research kmdf kernel-debugging windows-kernel-driver

• Updated Sep 19, 2026
• C

A set of commands to improve QoL while debugging a kernel using GEF/GDB.

debugging kernel linux-kernel gdb gef kernel-debugging

• Updated Sep 16, 2024
• Python

Agent-driven VMware Workstation guest control on Windows: power, snapshots, kernel debugging with kd.exe (serial pipe or KDNET) and a real-time terminal, exposed as MCP, CLI and Python SDK

windows vmware mcp windbg vmware-workstation kernel-debugging kdnet model-context-protocol mcp-server claude-code

• Updated Nov 9, 2026
• Python

ESET CrackMe Analysis

debugging obfuscation kernel dotnet virtual-machine reverse-engineering inter-process-communication anti-analysis eset-challenge kernel-debugging

• Updated Jul 27, 2022
• C++

Real-time Linux Kernel Log & Telemetry Analyzer

linux security qt monitoring kernel appimage system-administration dmesg kernel-debugging pyside6

• Updated Dec 28, 2025
• Python

A hack version of QEMU which can ALTER Ring3/0 behavior, for your kernel hack research

x86-64 linux-kernel windows-kernel assembly-language kernel-hacking kernel-debugging

• Updated Apr 20, 2025
• C

This project provides eBPF-based tracing tools and recipes for monitoring and analyzing NFS/PNFS operations.

nfs ebpf ebpf-programs debugging-tool kernel-debugging

• Updated Oct 8, 2026