windbg

There are 21 repositories under windbg topic.

• snare / voltron

  A hacky debugger UI for hackers

  voltrondebuggerpythonlldbwindbggdbvtrace
  Language:Python 6181

• alphaSeclab / awesome-reverse-engineering

  Reverse Engineering Resources About All Platforms(Windows/Linux/macOS/Android/iOS/IoT) And Every Aspect! (More than 3500 open source tools and 2300 posts&videos)

  reverse-engineeringidaproidapythonghidrax64dbgradare2fridaintelptdynamoriobinaryninjabinnaviandroid-securityapk-analysisida-plugincuckoowindbgangrgdb
  4525
• WinObjEx64

  hfiref0x / WinObjEx64

  Windows Object Explorer 64-bit

  cobjects-namespacewindbgwinobj
  Language:C 1661

• daem0nc0re / PrivFu

  Kernel mode WinDbg extension and PoCs for token privilege investigation.

  windbgwindbg-extensionwindowswindows-kernel
  Language:C# 824

• hugsy / defcon_27_windbg_workshop

  DEFCON 27 workshop - Modern Debugging with WinDbg Preview

  debuggingwindbgwindbg-scriptswindbgxwindows
  Language:Python 711

• fremag / MemoScope.Net

  Dump and analyze .Net applications memory ( a gui for WinDbg and ClrMd )

  memory-leakmemoryleaksdeadlock-detectiondumpclrmddotnetwindbg
  Language:C# 693

• microsoft / DbgShell

  A PowerShell front-end for the Windows debugger engine.

  debuggerdebugger-extensiondebuggingwindbg
  Language:C# 679

• swwwolf / wdbgark

  WinDBG Anti-RootKit Extension

  kernel-modec-plus-plusmalwaremalware-analysismalware-researchforensic-analysiswindbgwindbg-extensionanti-rootkitwindowsvisual-studiodriverwdbgarkmemory-forensicsanomaly-detectionuser-modeswwdebugging-toolswwwolfcrash-dump
  Language:C++ 619

• Dynatrace / superdump

  A service for automated crash-dump analysis

  crash-dumpdump-analysiswindbgdebuggingdotnetdebugdiagdebugging-toolcoredumptool
  Language:C# 518

• Cr4sh / openreil

  Open source library that implements translator and tools for REIL (Reverse Engineering Intermediate Language)

  code-analysiscode-translationdebugginggdbidaproof-of-conceptreilreversingwindbg
  Language:C 496

• stonedreamforest / Mirage

  kernel-mode Anti-Anti-Debug plugin. based on intel vt-x && ept technology

  anti-anti-debugcutterdrivereptghidrahookintelkernel-hookvt-xwindbgwindowsx32dbgx64x64dbgx86
  429

• KelvinMsft / kHypervisor

  kHypervisor is a lightweight bluepill-like nested VMM for Windows, it provides and emulating a basic function of Intel VT-x

  nested-virtualizationvirtualizationvt-xwindows-kernelkernelwindbghyperplatformvm-entry-emulationvcpusvirtualization-based-security
  Language:C++ 414
• windbg-cheat-sheet

  repnz / windbg-cheat-sheet

  My personal cheat sheet for using WinDbg for kernel debugging

  cheat-sheetcheatsheetdebuggingguidekernelwindbg
  Language:JavaScript 393

• yardenshafir / WinDbg_Scripts

  Useful scripts for WinDbg using the debugger data model

  debugginglinqwindbgwindbg-scriptswindows
  Language:JavaScript 389

• Faran-17 / Windows-Internals

  Important notes and topics on my journey towards mastering Windows Internals

  cppwindbgwindows
  Language:C++ 349

• lowleveldesign / debug-recipes

  My notes on software troubleshooting, covering debugging and tracing techniques and tools. Available at wtrace.net.

  debuggingetwprofilingwindbg
  Language:HTML 330

• 0vercl0k / windbg-scripts

  A bunch of JavaScript extensions for WinDbg.

  javascriptwindbg
  Language:JavaScript 322

• hugsy / windbg_js_scripts

  Toy scripts for playing with WinDbg JS API

  debuggingjavascriptwindbgwindbg-previewwindbg-scripts
  Language:JavaScript 221

• chrisnas / DebuggingExtensions

  Host of debugging-related extensions such as post-mortem tools or WinDBG extensions

  clrmdwindbg-extensionwindbgthreadpooltimergarbage-collectorsos
  Language:C# 215

• bruce30262 / TWindbg

  PEDA-like debugger UI for WinDbg

  windbgwindbg-extensionpythondebuggerpykd
  Language:Python 201

• 0vercl0k / kdmp-parser

  A Windows kernel dump C++ parser library with Python 3 bindings.

  bitmap-dumpdmpdumpsfull-dumpkernel-dumppython3windbg
  Language:C++ 194

• vallejocc / Reverse-Engineering-Arsenal

  Useful Scripts for helping in reverse engeenering

  windbgscriptsida-plugin
  Language:Python 181
• lolbin-poc

  mrexodia / lolbin-poc

  Small PoC of using a Microsoft signed executable as a lolbin.

  edr-bypassmalwarepocredteamredteam-toolsredteamingwindbgwindbg-extension
  Language:C++ 133

• tandasat / hvext

  The Windbg extension that implements commands helpful to study Hyper-V on Intel processors.

  hyper-vvt-xwindbg
  Language:JavaScript 132

• imugee / pegasus

  reverse engineering extension plugin for windbg

  reverse-engineeringreversingwindbgwindbg-extensiondebuggingemulation
  Language:C++ 115

• therealdreg / shellex

  C-shellcode to hex converter, handy tool for paste & execute shellcodes in IDA PRO, gdb, windbg, radare2, ollydbg, x64dbg, immunity debugger & 010 editor

  shellcodeshellcode-convertlinuxwindowsexploitingwindbgimmunitydebuggerollydbggdb010editorhex-convertershellex
  Language:C 114
• snapshot

  0vercl0k / snapshot

  WinDbg extension written in Rust to dump the CPU / memory state of a running VM

  rustrust-langsnapshot-fuzzerwindbg
  Language:Rust 112

• 0cch / 0cchext

  0CCh Windbg extension: include some useful commands

  0cch-windbg-extensiondebuggertracewindbg
  Language:C 109

• vagnerpilar / windbgtree

  A command tree based on commands and extensions for Windows Kernel Debugging.

  windowsinternalskerneldebuggingwindbg-extensionwindbgdebugextensions
  106

• kevingosse / windbg-extensions

  Extensions for the new WinDbg

  windbgwindbg-extension
  Language:HTML 96

• southpolenator / SharpDebug

  C# debugging automation tool

  windbgwindbg-extensionvisualstudionugetdump-analysisclrdumpsdump-processingcoredumpdwarfelf
  Language:C# 92

• pstolarz / dumpext

  WinDbg debugger extension library providing various tools to analyse, dump and fix (restore) Microsoft Portable Executable files for both 32 (PE) and 64-bit (PE+) platforms.

  debugdebuggerextensioniatiat-scanningpackerpe32protectionresource-treereverse-engineeringreverse-engineersrvaunpackwindbg
  Language:C++ 82

• wangray / WinDBG-for-GDB-users

  "Pwntools does not support Windows. Use a real OS ;)" — Zach Riggle, 2015

  commandscommands-cheat-sheetdebugginggdblinuxwindbgwindows
  82

• SeanCline / PyExt

  WinDbg Extensions for Python

  pythonwindbgcdbdebugging-tool
  Language:C++ 79

• Deputation / kernel_payload_comms

  A proof of concept demonstrating communication via mapped shared memory structures between a user-mode process and a kernel-mode payload on Windows 10 20H2.

  driverkernelpayloadvirtual-machinevirtual-memorywindbgwindows-kernel
  Language:C++ 77

• progmboy / win32kext

  windbg plugin for win32k debugging

  kernelpluginwin32kwindbg
  Language:C++ 72