Matthijs Lavrijsen

EfiGuard. Disable PatchGuard and Driver Signature Enforcement at boot time

PPLKiller. Protected Processes Light Killer

dumplib. Import library generator for x86 PE files

BSOD10. Crash Windows 10 up to RS2 from an unprivileged process

WinMain-is-usually-a-function. Windows NT port of 'Main is usually a function. So then when is it not?'

HexRaysPyTools. IDA Pro plugin which improves work with HexRays decompiler and helps in process of reconstruction structures and classes

TitanHide. Hiding kernel-driver for x86/x64.

win_driver_plugin. A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers. This version was fixed for IDA 7.x

NtRays. Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.

NtDOOM. Doom running in the NT kernel

processhacker. A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware.

sedutil. DTA sedutil Self encrypting drive software

CyberEngineTweaks. Performance boost, bug fixes and hacks for fun for Cyberpunk 2077

WinObjEx64. Windows Object Explorer 64-bit

DirCompare. A simple .NET application to check for differences between directories and their contents.

HyperDbg. State-of-the-art native debugging tool

al-khaser. Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

TitanEngine. C++

hookbong. Detect hooks inside a loaded process.

x64dbg. An open-source x64/x32 debugger for windows.

pdbex. pdbex is a utility for reconstructing structures and unions from the PDB into compilable C headers

NativeShell. A shell for Windows Native Mode

ida-pro-loadmap. Plugin for IDA Pro disassembler which allows loading .map files.

GleeBug. Debugging Framework for Windows.

xAnalyzer. xAnalyzer plugin for x64dbg

upx. UPX - the Ultimate Packer for eXecutables

KDU. Kernel Driver Utility

wufuc. Disables the "Unsupported Hardware" message in Windows Update, and allows you to continue installing updates on Windows 7 and 8.1 systems with Intel Kaby Lake, AMD Ryzen, or other unsupported processors.

XGecu_Software. Mirror of software for use with XGecu and Autoelectric's line of chip programmers (TL866A, TL866CS, TL866II Plus, T56, T48)

zydis. Fast and lightweight x86/x86-64 disassembler library

Open-Shell-Menu. Classic Shell Reborn.