Tooling to generate metadata for Win32 APIs in the Windows Driver Kit (WDK).

Coefficient-Based Reconstruction of Arithmetic — a Mixed Boolean-Arithmetic (MBA) expression simplifier for deobfuscation

Running and building LLVM on Windows

Example of using as a CMake Toolchain for cross compiling.

Vulnerability scanner for Caido

Native opaque predicate cleaner plugin for Binary Ninja

Original xbox kernel re-implementation

A C++ wrapper for icedx86 decoder

Modern reimplementation of Workrave in Qt. Optimized to look out for you where you don't.

A complete layer to get compatibility on XP/2003 for newer applications

LLVM Pass to save Reverse Engineers from Automation

A Trace Explorer for Reverse Engineers

Simple MCP Server to enable a human-in-the-loop workflow in tools like Cline and Cursor.

The official Windows Driver Kit DDI reference documentation sources

Port of zentool to Windows

Tracks cross references and allows fast viewing of pseudocode between references

Diaphora, the most advanced Free and Open Source program diffing tool.

POC exploit for CVE-2025-21333 heap-based buffer overflow. It leverages WNF state data and I/O ring IOP_MC_BUFFER_ENTRY

YaCo is an Hex-Rays IDA plugin. When enabled, multiple users can work simultaneously on the same binary. Any modification done by any user is synchronized through git version control.

BinRec: Dynamic Binary Lifting and Recompilation

Source code for File Test - Interactive File System Test Tool

Header only wrapper around Hex-Rays API in C++20.

Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).

An IDA plugin that eases reversing of binaries that have been code-size-optimized with function outlining

Rust binding for the dbgeng COM interfaces.

IDA Pro plugin to make bitfield accesses easier to grep

Collaboration platform for reverse engineering tools.