Cross-resource summary: 3 total results found across Research, Tools, and Notes.
An open-source Model Context Protocol server equipping AI coding assistants with native WinDbg automation, DebugExt de.dll reverse engineering engines, and real-time visual GUI stepping.
Static code analysis and decompilation snippets have transformed vulnerability research and malware analysis, but they share a fundamental flaw: they lack dynamic execution context. Static analysis cannot observe live heap allocations, inspect unbacked thread return addresses in real time, or verify how registers evolve across loop iterations. To bridge this gap, we built WinDbgX-MCP — an open-source Model Context Protocol (MCP) server that connects AI assistants (Google Antigravity, VS Code Cline, Claude Desktop, Cursor, Codex, and local LLMs) directly into live WinDbg and WinDbgX (DbgX.Shell.exe) debugging sessions across user-mode binaries, kernel drivers, remote debug servers, and crash dumps.
Useful commands when starting a dual-VM kernel debugging session: ```cmd bcdedit /debug on bcdedit /dbgsettings net hostip:192.168.1.100 po...