Confocus

NamedPipeCapture

A Windows tool that can be used to stream data from named pipe between two other process to Wireshark

PipeExplorer

Named pipe monitoring GUI

DebugViewPP

DebugView++, collects, views, filters your application logs, and highlights information that is important to you!

grpc

The C based gRPC (C++, Python, Ruby, Objective-C, PHP, C#)

explorerplusplus

Explorer++ is a lightweight and fast file manager for Windows

ScyllaHide

Windows-Kernel-Explorer

A free but powerful Windows kernel research tool.

InjectDllTool

多功能DLL注入工具：远程线程注入、消息钩子注入、输入法注入、APC注入、EIP注入、注册表注入。Multifunctional DLL injection tools: remote thread injection, message hook injection, input method injection, APC injection, EIP injection, registry injection.

Notepad

[iOS] A fully themeable markdown editor with live syntax highlighting.

vt-debuuger

a debugger use vt technology

Fake-Everything

Everything的原理猜想与实现

wine

yasm

Yasm Assembler mainline development tree

VeraCrypt

Disk encryption with strong security based on TrueCrypt

Sandboxie

Sandboxie Plus & Classic

protobuf

Protocol Buffers - Google's data interchange format

VivienneVMM

VivienneVMM is a stealthy debugging framework implemented via an Intel VT-x hypervisor.

antispy

AntiSpy is a free but powerful anti virus and rootkits toolkit.It offers you the ability with the highest privileges that can detect,analyze and restore various kernel modifications and hooks.With its assistance,you can easily spot and neutralize malwares hidden from normal detectors.

YDArk

X64内核小工具

AFL

american fuzzy lop - a security-oriented fuzzer

vscode

Visual Studio Code

systeminformer

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ http://www.windows-internals.com

Detours

Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.

EasyHook

EasyHook - The reinvention of Windows API Hooking

OpenArk

The Next Generation of Anti-Rookit(ARK) tool for Windows.

py

飘云ark（pyark）

capstone

Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.

Windows-Research-Kernel-WRK-

Windows Research Kernel Source Code

WindowsAppSDK

The Windows App SDK empowers all Windows desktop apps with modern Windows UI, APIs, and platform features, including back-compat support, shipped via NuGet.

TortoiseGit

Windows Explorer Extension to Operate Git; Mirror of official repository https://tortoisegit.org/sourcecode