x64dbg - An open-source x64/x32 debugger for windows.

•    C++

This is a community effort and we accept pull requests! See the CONTRIBUTING document for more information. If you have any questions you can always contact us or open an issue. You can take a look at the easy issues to get started. You can find an exhaustive list of GitHub contributers here.

xray-16 - Improved version of the X-Ray engine, used in world famous S

•    C++

OpenXRay is an improved version of the X-Ray engine, used in world famous S.T.A.L.K.E.R. game series by GSC Game World. Changelist and more is available in wiki.

Browser Gallese

Browser Gallese is a handy and reliable utility designed to enable users to surf the web from a friendly and easy-to-use GUI.

x86/x86-64 assembler/jitter written in C#

The project goal is to develop a library for generating machine code irrelatively to machine architecture. Assembler-like C# API is a bonus.

WinREPL - x86 and x64 assembly "read-eval-print loop" shell for Windows

•    C++

WinREPL is a "read-eval-print loop" shell on Windows that is useful for testing/learning x86 and x64 assembly. zerosum0x0/WinREPL is similar to yrp604/rappel (Linux) and Tyilo/asm_repl (Mac), but with a slightly different methodology that should allow for tricks such as self-modifying shellcode crypting/encoding. There is also enferex/asrepl for a Unicorn (emulated) version, but WinREPL is completely native inside a Windows process context.

arch - Better `os.arch()` for node and the browser -- detect OS architecture

•    Javascript

This module is used by WebTorrent Desktop to determine if the user is on a 32-bit vs. 64-bit operating system to offer the right app installer.In Node.js, the os.arch() method (and process.arch property) returns a string identifying the operating system CPU architecture for which the Node.js binary was compiled.

uefi-ntfs - UEFI:NTFS - Boot NTFS partitions from UEFI

•    C

UEFI:NTFS is a generic bootloader, that is designed to allow boot from an NTFS partition, in pure UEFI mode, even if your system does not natively support it. This is primarily intended for use with Rufus, but can also be used independently. In other words, UEFI:NTFS is designed to remove the restriction, which most UEFI systems have, of only providing boot support from a FAT32 partition, and enable the ability to also boot from NTFS partitions.

efifs - EFI FileSystem drivers

•    C

This is a GPLv3+ implementation of standalone EFI File System drivers, based on the GRUB 2.0 read-only drivers. If QEMU is installed, the Visual Studio solution will set up and test the drivers using QEMU (by also downloading a sample image for each target file system). Note however that VS debugging expects a 64-bit version of QEMU to be installed in C:\Program Files\qemu\ (which you can download here). If that is not the case, you should edit .msvc\debug.vbs accordingly.

asm-cli - Interactive shell of assembly language(X86/X64) based on unicorn and rasm2

•    Go

Interactive shell of assembly language(X86/X64) based on unicorn and rasm2

DbgChild - Debug Child Process Tool (auto attach)

•    C

Auto from x32dbg/x64dbg Hook Process Creation - Toggle option to switch on or off the automatic hooking of the process creation. If it is off, then user must manually select Hook Process Creation at some point before child processes are spawned.

Precompiled-OpenSSL-Windows - Precompiled OpenSSL (Include Static and Dynamic Library)

•    HTML

Precompiled OpenSSL for Windows (Include Static and Dynamic Library). Just use the OpenSSL project of your Visual Studio version.

go-memset - An efficient memset implementation for Golang.

•    Go

An efficient memset implementation for Golang. go-memset provides a Memset function which uses an assembly implementation on x86-64 and can provide performance equivalent to the optimised first loop.

ass-js - Assembler.js - X86_64 and Ethereum

•    TypeScript

Unlicense - public domain.

asm-cli-rust - interative assembly shell written in rust

•    Rust

interative assembly shell written in rust

iced - x86/x64 instruction decoder, encoder, formatter

•    CSharp

High performance x86 (16/32/64-bit) instruction decoder, encoder and formatter. It can be used for static analysis of x86/x64 binaries, to rewrite code (eg. remove garbage instructions), to relocate code or as a disassembler. See below for some examples. All classes are in the Iced.Intel namespace.

hvpp - hvpp is a lightweight Intel x64/VT-x hypervisor written in C++ focused primarily on virtualization of already running operating system

•    C++

hvpp is a lightweight Intel x64/VT-x hypervisor written in C++ focused primarily on virtualization of already running operating system. Although several open-source research hypervisors aimed at simplicity already exist, in my opinion this field is still somewhat unexplored and needs more open-source projects. This can especially help those who have just started exploring virtualization technologies and are looking for small/reference projects. If you're one of them, my bets are that you're really disappointed right now, because all you've got are barely dozen of (great!) projects and huge pile of Intel Manual pages.

evoasm.rb - An AIMGP (Automatic Induction of Machine code by Genetic Programming) engine

•    Ruby

Evoasm is an AIMGP (Automatic Induction of Machine code by Genetic Programming) engine. You give it a set of examples, that is, several input/output pairs, that describe a program's behavior. It will then try to come up with a short program (in the form of machine code) that follows your specification, by means of genetic programming. Evoasm contains a JIT that executes the generated machine code on the fly.

kasm - Assembler library for Kotlin

•    Kotlin

Kasm is a runtime assembler library for Kotlin. It allows to assemble and execute machine code at runtime. The project does currently come without any build files. It is recommended that you import the project into IntelliJ IDEA.

opcodesDB - x86-64 | ARM (AArch32/AArch64/THUMB) full instruction set.

•    Perl

opcodesDB is a CPU low level environment representation (registers, flags, instructions, ...). Data are listed in a packed dynamic structure which can be unpacked by a parser at any time. This project is a fruit of many years of development and a lot of attempts (Parsable-Instructions, asmdb) to standardize CPU environment.

syser - syser debugger x32/x64 ring3

•    C++

syser debugger x32/x64 ring3