windbg

There are 21 repositories under windbg topic.

• snare / voltron

  A hacky debugger UI for hackers

  debuggergdblldbpythonvoltronvtracewindbg
  Language:Python 6182

• alphaSeclab / awesome-reverse-engineering

  Reverse Engineering Resources About All Platforms(Windows/Linux/macOS/Android/iOS/IoT) And Every Aspect! (More than 3500 open source tools and 2300 posts&videos)

  android-securityangrapk-analysisbinaryninjabinnavicuckoodynamoriofridagdbghidraida-pluginidaproidapythonintelptradare2reverse-engineeringwindbgx64dbg
  4508
• WinObjEx64

  hfiref0x / WinObjEx64

  Windows Object Explorer 64-bit

  cobjects-namespacewindbgwinobj
  Language:C 1649

• daem0nc0re / PrivFu

  Kernel mode WinDbg extension and PoCs for token privilege investigation.

  windbgwindbg-extensionwindowswindows-kernel
  Language:C# 816

• hugsy / defcon_27_windbg_workshop

  DEFCON 27 workshop - Modern Debugging with WinDbg Preview

  debuggingwindbgwindbg-scriptswindbgxwindows
  Language:Python 709

• fremag / MemoScope.Net

  Dump and analyze .Net applications memory ( a gui for WinDbg and ClrMd )

  clrmddeadlock-detectiondotnetdumpleaksmemorymemory-leakwindbg
  Language:C# 693

• microsoft / DbgShell

  A PowerShell front-end for the Windows debugger engine.

  debuggerdebugger-extensiondebuggingwindbg
  Language:C# 675

• swwwolf / wdbgark

  WinDBG Anti-RootKit Extension

  anomaly-detectionanti-rootkitc-plus-pluscrash-dumpdebugging-tooldriverforensic-analysiskernel-modemalwaremalware-analysismalware-researchmemory-forensicsswwswwwolfuser-modevisual-studiowdbgarkwindbgwindbg-extensionwindows
  Language:C++ 615

• Dynatrace / superdump

  A service for automated crash-dump analysis

  crash-dumpdump-analysiswindbgdebuggingdotnetdebugdiagdebugging-toolcoredumptool
  Language:C# 515

• Cr4sh / openreil

  Open source library that implements translator and tools for REIL (Reverse Engineering Intermediate Language)

  reversingcode-analysiscode-translationdebugginggdbidaproof-of-conceptreilwindbg
  Language:C 494

• stonedreamforest / Mirage

  kernel-mode Anti-Anti-Debug plugin. based on intel vt-x && ept technology

  anti-anti-debugcutterdrivereptghidrahookintelkernel-hookvt-xwindbgwindowsx32dbgx64x64dbgx86
  430

• KelvinMsft / kHypervisor

  kHypervisor is a lightweight bluepill-like nested VMM for Windows, it provides and emulating a basic function of Intel VT-x

  nested-virtualizationvirtualizationvt-xwindows-kernelkernelwindbghyperplatformvm-entry-emulationvcpusvirtualization-based-security
  Language:C++ 413

• yardenshafir / WinDbg_Scripts

  Useful scripts for WinDbg using the debugger data model

  debugginglinqwindbgwindbg-scriptswindows
  Language:JavaScript 389
• windbg-cheat-sheet

  repnz / windbg-cheat-sheet

  My personal cheat sheet for using WinDbg for kernel debugging

  cheat-sheetcheatsheetdebuggingguidekernelwindbg
  Language:JavaScript 387

• Faran-17 / Windows-Internals

  Important notes and topics on my journey towards mastering Windows Internals

  cppwindbgwindows
  Language:C++ 339

• lowleveldesign / debug-recipes

  My notes on software troubleshooting, covering debugging and tracing techniques and tools. Available at wtrace.net.

  debuggingetwprofilingwindbg
  Language:HTML 330

• 0vercl0k / windbg-scripts

  A bunch of JavaScript extensions for WinDbg.

  javascriptwindbg
  Language:JavaScript 320

• hugsy / windbg_js_scripts

  Toy scripts for playing with WinDbg JS API

  debuggingjavascriptwindbgwindbg-previewwindbg-scripts
  Language:JavaScript 220

• chrisnas / DebuggingExtensions

  Host of debugging-related extensions such as post-mortem tools or WinDBG extensions

  clrmdwindbg-extensionwindbgthreadpooltimergarbage-collectorsos
  Language:C# 215

• bruce30262 / TWindbg

  PEDA-like debugger UI for WinDbg

  debuggerpykdpythonwindbgwindbg-extension
  Language:Python 201

• 0vercl0k / kdmp-parser

  A Windows kernel dump C++ parser library with Python 3 bindings.

  bitmap-dumpdmpdumpsfull-dumpkernel-dumppython3windbg
  Language:C++ 193

• vallejocc / Reverse-Engineering-Arsenal

  Useful Scripts for helping in reverse engeenering

  ida-pluginscriptswindbg
  Language:Python 182
• lolbin-poc

  mrexodia / lolbin-poc

  Small PoC of using a Microsoft signed executable as a lolbin.

  edr-bypassmalwarepocredteamredteam-toolsredteamingwindbgwindbg-extension
  Language:C++ 133

• tandasat / hvext

  The Windbg extension that implements commands helpful to study Hyper-V on Intel processors.

  hyper-vvt-xwindbg
  Language:JavaScript 130

• imugee / pegasus

  reverse engineering extension plugin for windbg

  debuggingemulationreverse-engineeringreversingwindbgwindbg-extension
  Language:C++ 115

• therealdreg / shellex

  C-shellcode to hex converter, handy tool for paste & execute shellcodes in IDA PRO, gdb, windbg, radare2, ollydbg, x64dbg, immunity debugger & 010 editor

  010editorexploitinggdbhex-converterimmunitydebuggerlinuxollydbgshellcodeshellcode-convertshellexwindbgwindows
  Language:C 114
• snapshot

  0vercl0k / snapshot

  WinDbg extension written in Rust to dump the CPU / memory state of a running VM

  rustrust-langsnapshot-fuzzerwindbg
  Language:Rust 112

• 0cch / 0cchext

  0CCh Windbg extension: include some useful commands

  windbgdebuggertrace0cch-windbg-extension
  Language:C 109

• vagnerpilar / windbgtree

  A command tree based on commands and extensions for Windows Kernel Debugging.

  debugdebuggingextensionsinternalskernelwindbgwindbg-extensionwindows
  105

• kevingosse / windbg-extensions

  Extensions for the new WinDbg

  windbgwindbg-extension
  Language:HTML 96

• southpolenator / SharpDebug

  C# debugging automation tool

  clrcoredumpdump-analysisdump-processingdumpsdwarfelfnugetvisualstudiowindbgwindbg-extension
  Language:C# 92

• pstolarz / dumpext

  WinDbg debugger extension library providing various tools to analyse, dump and fix (restore) Microsoft Portable Executable files for both 32 (PE) and 64-bit (PE+) platforms.

  debugdebuggerextensioniatiat-scanningpackerpe32protectionresource-treereverse-engineeringreverse-engineersrvaunpackwindbg
  Language:C++ 81

• wangray / WinDBG-for-GDB-users

  "Pwntools does not support Windows. Use a real OS ;)" — Zach Riggle, 2015

  commandscommands-cheat-sheetdebugginggdblinuxwindbgwindows
  80

• SeanCline / PyExt

  WinDbg Extensions for Python

  pythonwindbgcdbdebugging-tool
  Language:C++ 79

• Deputation / kernel_payload_comms

  A proof of concept demonstrating communication via mapped shared memory structures between a user-mode process and a kernel-mode payload on Windows 10 20H2.

  kernelpayloadvirtual-memoryvirtual-machinewindbgdriverwindows-kernel
  Language:C++ 74

• progmboy / win32kext

  windbg plugin for win32k debugging

  win32kwindbgpluginkernel
  Language:C++ 72