Quick update on two projects that have been getting a lot of my attention lately.

WEDP 1.0.0-rc1

WEDP (Windows Exploit Development Plugin) has hit its first release candidate. If you are not familiar with it, WEDP is a native WinDbg extension I built for exploit development workflows. It provides ROP/SEH/stack-pivot gadget search, cyclic pattern utilities, module protection enumeration, inline assembly, and a bunch of other stuff you would normally need multiple tools for. I wrote a post recently on using it with an MCP server and that really pushed me to clean things up and get a proper release out.

This release has been a long time coming and I am happy to finally have it in a state where I feel good about tagging it. You can grab the release from the GitLab releases page and check out the full feature list on the project page.

dbgeng-mcp 0.1.0

dbgeng-mcp is the project I mentioned in my last post about wanting a native MCP server for the Windows Debugging Engine. Instead of relying on a third-party WinDbg extension to bridge MCP, dbgeng-mcp talks directly to dbgeng.dll through a native C++ bridge built with pybind11. This means you can have an AI assistant launch, attach to, and control debug sessions without needing WinDbg open at all.

This is an alpha release and there is still a lot of work to do, but the core functionality is there. You can install it right now from PyPI:

pip install dbgeng-mcp

Check out the project page for more details on features and setup.

What’s Next

The plan is to keep iterating on both of these. For WEDP, I want to get feedback on the RC and work towards a stable 1.0.0. For dbgeng-mcp, there is a long list of features I want to add, especially around better memory analysis and tighter integration with extensions like WEDP. If you end up trying either of these out, let me know how it goes.