Model Context Protocol for WinDBG

PoCs and tools for investigation of Windows process execution techniques

Kernel mode WinDbg extension and PoCs for token privilege investigation.

WinDBG Anti-RootKit Extension

WinDbg extension for data mining managed heap. It also includes commands to list http request, wcf services, WIF tokens among others

Host of debugging-related extensions such as post-mortem tools or WinDBG extensions

PEDA-like debugger UI for WinDbg

Small PoC of using a Microsoft signed executable as a lolbin.

reverse engineering extension plugin for windbg

A command tree based on commands and extensions for Windows Kernel Debugging.

Extensions for the new WinDbg

C# debugging automation tool

Debugger extension for the Debugging Tools for Windows (WinDbg, KD, CDB, NTSD).

Windbg extension that allows you analyze Control Flow Guard map

Source code for advanced .NET Debugging.

ASProtect reverse engineering & analysis WinDbg extension

collection of links related to using and improving windbg

javascript extension of windbg for hacker.

windbg plugin easy-step from user code to kernel code

Time Tracker leverages the TTD API to trace the origins of specific registers and memory

A custom WinDbg extension for memory dump analysis and kernel debugging

Debugger extension for analyzing rebased addresses

WPF application that implements ClrMd library

A WinDbg plugin that records all NtDeviceIoControlFile() and DeviceIoControl() calls across processes, capturing process details, device ACLs, and stack unwind information to identify vulnerable IOCTL interactions with kernel drivers.

WinDBG API bindings for Rust

Managed WinDbg extension for .NET framework

This is a C++ helper class that simplifies creating Windbg extensions by using Dbgeng.h Debugging Engine API capabilities.

This repository contains a collection of WinDBG extensions.

A WinDbg extension to check the security features of the loaded modules with winchecksec

NetHelps - WinDbg extension, helps to view some .Net internals information