Pinned post
I open-sourced Kn-Live-Dbg, a Windows kernel research tool.
Kn-Live-Dbg looks like a debugger, but it is not a debugger.
It uses a kernel driver to provide a WinDbg-like live kernel debugging experience from a TUI console.
→ Supports most basic WinDbg kernel commands
→ Native kernel symbol/type inspection, including dt-style workflows
→ Enumerates major kernel callback surfaces, including object filters, registry/process/thread callbacks, and minifilters
→ Supports virtual and physical memory inspection/editing
→ Built for anti-cheat and Windows security research
It does not provide any Code Integrity bypass.
The prebuilt binaries are test-signed for lab use. For real deployment, sign the driver yourself with EV + attestation signing.
repo: github.com/kernullist/kn-…
Kn-Live-Dbg looks like a debugger, but it is not a debugger.
It uses a kernel driver to provide a WinDbg-like live kernel debugging experience from a TUI console.
→ Supports most basic WinDbg kernel commands
→ Native kernel symbol/type inspection, including dt-style workflows
→ Enumerates major kernel callback surfaces, including object filters, registry/process/thread callbacks, and minifilters
→ Supports virtual and physical memory inspection/editing
→ Built for anti-cheat and Windows security research
It does not provide any Code Integrity bypass.
The prebuilt binaries are test-signed for lab use. For real deployment, sign the driver yourself with EV + attestation signing.
repo: github.com/kernullist/kn-…
4:01