Tool

WinTTD

WinTTD exposes recovered WinDBG virtual CPU structures and callback layouts for instruction instrumentation. Its C++ taint code reads x86-64 instructions from virtual CPU memory, decodes them with Capstone and passes them to Triton while maintaining per-thread register state.

Targets: Binary
Category: Debugging and dynamic analysis
Relationship: Foundation tool
Sources reviewed: 2026-11-06

Stars: 35
Last commit: 2024-04-18
Language: C++

GitHub data as of 2026-11-09

Copy as Markdown View JSON Cite

Requirements & limits

Prerequisites: Windows C++ environment with Triton and Capstone headers.
Limits: Several internal callbacks and cache functions remain undocumented.
License: No licence file in the repository.

Cite

BibTeX

@misc{winttd,
  title = {{WinTTD}},
  howpublished = {\url{https://github.com/Colton1skees/WinTTD}},
  url = {https://github.com/Colton1skees/WinTTD},
  urldate = {2026-11-06},
  note = {Awesome REA entry: \url{https://awesomerea.org/resources/winttd/}}
}

Plain text

WinTTD. https://github.com/Colton1skees/WinTTD (accessed 2026-11-06). Awesome REA entry: https://awesomerea.org/resources/winttd/

Useful? Star Awesome REA on GitHub2.4k

About this entry

The description was reviewed against primary sources.

Report an outdated entry Suggest a translation fix

Primary sources

WinDNA/include/internal_structures.h GitHub · Colton1skees/WinTTD · Revision 43e871e
WinDNA/src/triton_tainter.cpp GitHub · Colton1skees/WinTTD · Revision 43e871e

More in Native binaries

All 502 entries in Native binaries