GPT4All: Run Local LLMs on Any Device. Open-source and available for commercial use.

Disable PatchGuard and Driver Signature Enforcement at boot time

A static devirtualizer for VMProtect x64 3.x. powered by VTIL.

rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries.

wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-m…

A Pin Tool for tracing API calls etc

RpcView is a free tool to explore and decompile Microsoft RPC interfaces

Protected Processes Light Killer

VirtualKD-Redux - A revival and modernization of VirtualKD

Proofs-of-concept

Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.

Checksec, but for Windows: static detection of security mitigations in executables

Vulnerability examples.

APT38 Tactic PoC for Stealing 0days from security researchers

Shell extension for opening executables in IDA

Minifilter Callback Patching Proof-of-Concept