Rust for Windows

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

Defensive Rust control-flow obfuscation and anti-analysis tooling for x86_64 binaries

Post-build string encryption packing tool

A rewrite of YARA in Rust.

SysWhispers & HellsGate Successor, fully modular Indirect & Direct Syscall Framework - EDR/AV/AC Capability Platform

KDMapper is a simple tool that exploits iqvw64e.sys Intel driver to manually map non-signed drivers in memory