hugsy/windbg_js_scripts

Toy scripts for playing with WinDbg JS API

Language: JavaScript - Size: 291 KB - Last synced: about 7 hours ago - Pushed: about 8 hours ago - Stars: 189 - Forks: 38

alphaSeclab/awesome-reverse-engineering

Reverse Engineering Resources About All Platforms(Windows/Linux/macOS/Android/iOS/IoT) And Every Aspect! (More than 3500 open source tools and 2300 posts&videos)

Size: 1.25 MB - Last synced: about 3 hours ago - Pushed: over 2 years ago - Stars: 4,326 - Forks: 844

hugsy/defcon_27_windbg_workshop

DEFCON 27 workshop - Modern Debugging with WinDbg Preview

Language: Python - Size: 76.2 MB - Last synced: about 19 hours ago - Pushed: 8 months ago - Stars: 686 - Forks: 130

lowleveldesign/debug-recipes

My notes collected while debugging various problems in .NET and native applications.

Language: CSS - Size: 15.4 MB - Last synced: 2 days ago - Pushed: 3 days ago - Stars: 325 - Forks: 72

arizvisa/dotfiles

everyone does it, i guess it's about time i did as well. :)

Language: Vim Script - Size: 1010 KB - Last synced: 2 days ago - Pushed: 3 days ago - Stars: 7 - Forks: 1

0vercl0k/kdmp-parser-rs

A KISS Rust crate to parse Windows kernel crash-dumps created by Windows & its debugger.

Language: Rust - Size: 918 KB - Last synced: 12 days ago - Pushed: 12 days ago - Stars: 24 - Forks: 4

0vercl0k/kdmp-parser

A Windows kernel dump C++ parser library with Python 3 bindings.

Language: C++ - Size: 612 KB - Last synced: 11 days ago - Pushed: 2 months ago - Stars: 181 - Forks: 33

Faran-17/Windows-Internals

Important notes and topics on my journey towards mastering Windows Internals

Language: C++ - Size: 228 KB - Last synced: 15 days ago - Pushed: 16 days ago - Stars: 305 - Forks: 48

tinysec/jswd

javascript extension of windbg for hacker.

Language: C++ - Size: 161 KB - Last synced: 16 days ago - Pushed: 11 months ago - Stars: 14 - Forks: 4

snare/voltron

A hacky debugger UI for hackers

Language: Python - Size: 1.63 MB - Last synced: 16 days ago - Pushed: about 1 year ago - Stars: 6,107 - Forks: 412

mrexodia/lolbin-poc

Small PoC of using a Microsoft signed executable as a lolbin.

Language: C++ - Size: 5.86 KB - Last synced: 16 days ago - Pushed: about 1 year ago - Stars: 128 - Forks: 18

KelvinMsft/kHypervisor

kHypervisor is a lightweight bluepill-like nested VMM for Windows, it provides and emulating a basic function of Intel VT-x

Language: C++ - Size: 16.2 MB - Last synced: 2 days ago - Pushed: over 2 years ago - Stars: 372 - Forks: 128

microsoft/DbgShell

A PowerShell front-end for the Windows debugger engine.

Language: C# - Size: 2.15 MB - Last synced: 8 days ago - Pushed: about 1 month ago - Stars: 663 - Forks: 101

dshikashio/Pybag

Python module for Windbg's dbgeng plus additional wrappers.

Language: C - Size: 694 KB - Last synced: 16 days ago - Pushed: 3 months ago - Stars: 50 - Forks: 13

therealdreg/shellex

C-shellcode to hex converter, handy tool for paste & execute shellcodes in IDA PRO, gdb, windbg, radare2, ollydbg, x64dbg, immunity debugger & 010 editor

Language: C - Size: 23 MB - Last synced: 16 days ago - Pushed: 9 months ago - Stars: 105 - Forks: 23

rifatx/DnExt

Managed WinDbg extension for .NET framework

Language: C# - Size: 467 KB - Last synced: 25 days ago - Pushed: almost 3 years ago - Stars: 1 - Forks: 1

daem0nc0re/PrivFu

Kernel mode WinDbg extension and PoCs for token privilege investigation.

Language: C# - Size: 4.04 MB - Last synced: 25 days ago - Pushed: 25 days ago - Stars: 674 - Forks: 104

chrisnas/DebuggingExtensions

Host of debugging-related extensions such as post-mortem tools or WinDBG extensions

Language: C# - Size: 4.44 MB - Last synced: 15 days ago - Pushed: over 2 years ago - Stars: 210 - Forks: 21

fremag/MemoScope.Net

Dump and analyze .Net applications memory ( a gui for WinDbg and ClrMd )

Language: C# - Size: 3.67 MB - Last synced: 22 days ago - Pushed: almost 4 years ago - Stars: 683 - Forks: 74

hfiref0x/WinObjEx64

Windows Object Explorer 64-bit

Language: C - Size: 16.7 MB - Last synced: about 1 month ago - Pushed: about 1 month ago - Stars: 1,513 - Forks: 288

bulentkazanci/Cheat-Sheet-Windbg

A practical guide to analyze memory dumps of .Net applications by using Windbg

Size: 11.7 KB - Last synced: 25 days ago - Pushed: about 4 years ago - Stars: 4 - Forks: 0

sukesh-ak/AutoDebug

Simple Debugger to run Windbg Commands and also query .NET CLR Runtime data in C#

Language: C# - Size: 41 KB - Last synced: 16 days ago - Pushed: almost 2 years ago - Stars: 19 - Forks: 4

tinysec/rtypes

A simple but useful project maybe help you reverse Windows.

Language: C - Size: 148 KB - Last synced: about 2 months ago - Pushed: about 2 months ago - Stars: 22 - Forks: 2

bruce30262/TWindbg 📦

PEDA-like debugger UI for WinDbg

Language: Python - Size: 494 KB - Last synced: about 2 months ago - Pushed: about 2 months ago - Stars: 196 - Forks: 46

repnz/windbg-cheat-sheet

My personal cheat sheet for using WinDbg for kernel debugging

Language: JavaScript - Size: 246 KB - Last synced: about 1 month ago - Pushed: about 1 year ago - Stars: 339 - Forks: 56

ispras/qemu Fork of qemu/qemu

Language: C - Size: 328 MB - Last synced: about 1 month ago - Pushed: over 2 years ago - Stars: 50 - Forks: 13

swwwolf/wdbgark

WinDBG Anti-RootKit Extension

Language: C++ - Size: 2.94 MB - Last synced: about 1 month ago - Pushed: almost 4 years ago - Stars: 601 - Forks: 176

yardenshafir/WinDbg_Scripts

Useful scripts for WinDbg using the debugger data model

Language: JavaScript - Size: 1.78 MB - Last synced: about 2 months ago - Pushed: about 2 months ago - Stars: 339 - Forks: 56

Dynatrace/superdump

A service for automated crash-dump analysis

Language: C# - Size: 12.7 MB - Last synced: 2 months ago - Pushed: 12 months ago - Stars: 490 - Forks: 81

SeanCline/PyExt

WinDbg Extensions for Python

Language: C++ - Size: 421 KB - Last synced: 2 months ago - Pushed: 2 months ago - Stars: 68 - Forks: 13

kiyolee/setdbg

Handy utility to set auto start-up debugger

Language: Python - Size: 18.6 KB - Last synced: 3 months ago - Pushed: 3 months ago - Stars: 1 - Forks: 0

0vercl0k/windbg-scripts

A bunch of JavaScript extensions for WinDbg.

Language: JavaScript - Size: 59.6 KB - Last synced: 3 months ago - Pushed: over 2 years ago - Stars: 277 - Forks: 47

0vercl0k/snapshot

WinDbg extension written in Rust to dump the CPU / memory state of a running VM

Language: Rust - Size: 120 KB - Last synced: 3 months ago - Pushed: 3 months ago - Stars: 81 - Forks: 4

takubokudori/wdcs

A WinDbg extension to check the security features of the loaded modules with winchecksec

Language: C++ - Size: 17.6 KB - Last synced: 3 months ago - Pushed: about 2 years ago - Stars: 0 - Forks: 0

southpolenator/SharpDebug

C# debugging automation tool

Language: C# - Size: 30.9 MB - Last synced: 18 days ago - Pushed: over 1 year ago - Stars: 91 - Forks: 30

sufyandaredevil/OSED

Notes taken from the official Offensive Security Exploit Development course videos and pdf

Language: Python - Size: 11.1 MB - Last synced: 3 months ago - Pushed: 3 months ago - Stars: 0 - Forks: 0

tandasat/hvext

The Windbg extension that implements commands helpful to study Hyper-V on Intel processors.

Language: JavaScript - Size: 110 KB - Last synced: 3 months ago - Pushed: 4 months ago - Stars: 100 - Forks: 10

Cr4sh/openreil 📦

Open source library that implements translator and tools for REIL (Reverse Engineering Intermediate Language)

Language: C - Size: 13.2 MB - Last synced: 3 months ago - Pushed: about 3 years ago - Stars: 493 - Forks: 85

DownWithUp/bswap

A Windbg extension for swapping byte endianness.

Language: C - Size: 50.8 KB - Last synced: 4 months ago - Pushed: almost 4 years ago - Stars: 2 - Forks: 1

arvindshmicrosoft/SQLCallStackResolver

Supporting files for the main SQLCallStackResolver sample tool (https://aka.ms/SQLStack)

Size: 24 MB - Last synced: about 1 month ago - Pushed: about 1 month ago - Stars: 56 - Forks: 10

trungnt2910/TcpToPipe

Forwards a named pipe server to a remote TCP server.

Language: C# - Size: 130 KB - Last synced: 16 days ago - Pushed: 4 months ago - Stars: 0 - Forks: 0

nop-tech/code_caver

Python based WinDbg script to automate the search for code caves in binaries and libraries.

Language: Python - Size: 41 KB - Last synced: 2 months ago - Pushed: almost 2 years ago - Stars: 26 - Forks: 6

therealdreg/windbgtocstruct

Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if needed

Language: Python - Size: 22.5 KB - Last synced: 16 days ago - Pushed: 9 months ago - Stars: 25 - Forks: 8

vallejocc/Reverse-Engineering-Arsenal

Useful Scripts for helping in reverse engeenering

Language: Python - Size: 981 KB - Last synced: 3 months ago - Pushed: over 3 years ago - Stars: 175 - Forks: 55

XORMANCER/x64dbg-theme-for-windbg

A windbg (classic) theme created to match the default dark theme of x64dbg.

Size: 180 KB - Last synced: 6 months ago - Pushed: 6 months ago - Stars: 0 - Forks: 0

SeanCline/PythonSymbols

A WinDbg symbol server for all recent versions of CPython.

Language: Python - Size: 2.3 GB - Last synced: about 1 month ago - Pushed: about 1 month ago - Stars: 21 - Forks: 0

lordmilko/RebaseExt

Debugger extension for analyzing rebased addresses

Language: C++ - Size: 23.4 KB - Last synced: 16 days ago - Pushed: about 2 years ago - Stars: 2 - Forks: 0

tahadraidia/windbg-arsenal

This repository contains a collection of WinDBG extensions.

Language: C++ - Size: 97.7 KB - Last synced: 20 days ago - Pushed: 7 months ago - Stars: 0 - Forks: 1

stonedreamforest/Mirage

kernel-mode Anti-Anti-Debug plugin. based on intel vt-x && ept technology

Size: 74.2 KB - Last synced: 7 months ago - Pushed: over 3 years ago - Stars: 407 - Forks: 105

haibing-wang/cosos Fork of krk/cosos

CoSoS - Cousin of Son of Strike

Size: 438 KB - Last synced: about 1 month ago - Pushed: over 8 years ago - Stars: 0 - Forks: 0

micli/netcoredebugging

A repository maintains the book of ".NET Core application debugging" sample code.

Language: C# - Size: 1.5 MB - Last synced: 7 months ago - Pushed: over 5 years ago - Stars: 66 - Forks: 19

seungyongshim/Net-Framework-Leak-WinDbg-Sample

Language: C# - Size: 1.41 MB - Last synced: 20 days ago - Pushed: over 1 year ago - Stars: 2 - Forks: 0

AndreyBazhan/DbgPkg

Scripts to prepare Windows system for debugging.

Language: Batchfile - Size: 6.84 KB - Last synced: 7 months ago - Pushed: over 3 years ago - Stars: 31 - Forks: 8

hugsy/hevd

Public repository for HEVD exploits

Language: C - Size: 434 KB - Last synced: 16 days ago - Pushed: almost 6 years ago - Stars: 20 - Forks: 6

segevfiner/windbgmon

Monitor Windows OutputDebugString messages

Language: Python - Size: 181 KB - Last synced: 2 months ago - Pushed: over 1 year ago - Stars: 3 - Forks: 0

dennisbabkin/CritSectionVsKernelObject

POC project to demonstrate performance difference between a critical section and a synchronization kernel object in Windows.

Language: C++ - Size: 96.7 KB - Last synced: 9 months ago - Pushed: 9 months ago - Stars: 0 - Forks: 0

dennisbabkin/TestToolbar01

Test project used in the following blog post: https://dennisbabkin.com/blog/?i=AAA11C00

Language: C++ - Size: 17.6 KB - Last synced: 9 months ago - Pushed: 9 months ago - Stars: 0 - Forks: 0

0cch/0cchext

0CCh Windbg extension: include some useful commands

Language: C - Size: 6.03 MB - Last synced: 10 months ago - Pushed: 10 months ago - Stars: 97 - Forks: 22

JKornev/cfgdump

Windbg extension that allows you analyze Control Flow Guard map

Language: C++ - Size: 17.6 KB - Last synced: 9 months ago - Pushed: over 2 years ago - Stars: 30 - Forks: 9

sonictk/maya_custom_unhandled_exception_filter_tutorial

A tutorial on writing unhandled exception filters, WinDbg extensions, and how exceptions on Windows work.

Language: C++ - Size: 73.2 KB - Last synced: 10 months ago - Pushed: over 3 years ago - Stars: 14 - Forks: 2

hansalemaos/windbg2df

provides a convenient and streamlined approach to analyze Windows processes by converting windbg requests to pandas DataFrames

Language: Python - Size: 40 KB - Last synced: 8 days ago - Pushed: 11 months ago - Stars: 0 - Forks: 0

vagnerpilar/windbgtree

A command tree based on commands and extensions for Windows Kernel Debugging.

Size: 23.4 KB - Last synced: 11 months ago - Pushed: almost 4 years ago - Stars: 97 - Forks: 29

yanglr/advDotnetDebugging

Source code for advanced .NET Debugging.

Language: C# - Size: 92.6 MB - Last synced: 10 months ago - Pushed: over 3 years ago - Stars: 14 - Forks: 10

JayFoxRox/pykdclient

Cross-platform Python scripts to interface with the Microsoft Kernel Debugger

Language: Python - Size: 29.3 KB - Last synced: 9 months ago - Pushed: over 2 years ago - Stars: 10 - Forks: 1

tahadraidia/windbgext

This is a C++ helper class that simplifies creating Windbg extensions by using Dbgeng.h Debugging Engine API capabilities.

Language: C++ - Size: 8.79 KB - Last synced: 20 days ago - Pushed: 11 months ago - Stars: 0 - Forks: 0

Deniskore/windbg-workspace

Size: 74.2 KB - Last synced: about 1 year ago - Pushed: almost 11 years ago - Stars: 23 - Forks: 12

SweetIceLolly/Prevent_Process_Creation

Record & prevent process creation in kernel mode

Language: C - Size: 6.84 KB - Last synced: about 1 year ago - Pushed: over 2 years ago - Stars: 34 - Forks: 8

tin-z/narly.js

narly.js - print binary protections with Windbg JS (/SafeSEH, /GS, ASLR, etc.)

Language: JavaScript - Size: 8.79 MB - Last synced: about 1 year ago - Pushed: over 1 year ago - Stars: 8 - Forks: 1

imugee/pegasus

reverse engineering extension plugin for windbg

Language: C++ - Size: 49.9 MB - Last synced: about 1 year ago - Pushed: over 4 years ago - Stars: 91 - Forks: 23

stevencohn/Learn.NET

Learn how .NET garbage collection works and how to debug crashes

Language: C# - Size: 3.44 MB - Last synced: 16 days ago - Pushed: over 1 year ago - Stars: 1 - Forks: 0

schwindelig/postmortem

:skull: :fire: :snowflake: A basic analyzer for memory dumps containing managed code

Language: C# - Size: 495 KB - Last synced: about 1 year ago - Pushed: over 1 year ago - Stars: 3 - Forks: 0

Deputation/kernel_payload_comms

A proof of concept demonstrating communication via mapped shared memory structures between a user-mode process and a kernel-mode payload on Windows 10 20H2.

Language: C++ - Size: 285 KB - Last synced: about 1 year ago - Pushed: almost 3 years ago - Stars: 36 - Forks: 23

kh4sh3i/Malware-Analysis

A curated list of awesome malware analysis tools and resources

Size: 67.4 KB - Last synced: about 1 year ago - Pushed: over 2 years ago - Stars: 12 - Forks: 3

kevingosse/windbg-extensions

Extensions for the new WinDbg

Language: C# - Size: 3.01 MB - Last synced: about 1 year ago - Pushed: over 2 years ago - Stars: 61 - Forks: 9

ashishnegi/windbg_scripts

Common scripts for automating Windbg debugging workflows like coroutines etc;

Language: JavaScript - Size: 15.6 KB - Last synced: about 1 year ago - Pushed: over 2 years ago - Stars: 1 - Forks: 0

pstolarz/asprext 📦

ASProtect reverse engineering & analysis WinDbg extension

Language: C - Size: 25.5 MB - Last synced: about 1 year ago - Pushed: over 3 years ago - Stars: 17 - Forks: 1

pstolarz/dumpext 📦

WinDbg debugger extension library providing various tools to analyse, dump and fix (restore) Microsoft Portable Executable files for both 32 (PE) and 64-bit (PE+) platforms.

Language: C++ - Size: 159 KB - Last synced: about 1 year ago - Pushed: over 3 years ago - Stars: 78 - Forks: 27

yottaawesome/basic-windows-drivers

Basic experimentation with Windows drivers.

Language: C++ - Size: 323 KB - Last synced: about 1 year ago - Pushed: about 1 year ago - Stars: 10 - Forks: 6

pstolarz/scriptext 📦

WinDbg scripting language utilities.

Language: C - Size: 103 KB - Last synced: about 1 year ago - Pushed: over 3 years ago - Stars: 12 - Forks: 7

Cr4sh/DbgCb 📦

Engine for communication with remote kernel debugger (KD, WinDbg) from drivers and applications

Language: C++ - Size: 828 KB - Last synced: about 1 year ago - Pushed: almost 11 years ago - Stars: 34 - Forks: 18

imugee/xdv

XDV is disassembler or debugger that works based on the extension plugin.

Language: C++ - Size: 98.5 MB - Last synced: about 1 year ago - Pushed: over 4 years ago - Stars: 51 - Forks: 14

progmboy/win32kext

windbg plugin for win32k debugging

Language: C++ - Size: 43.9 KB - Last synced: about 1 year ago - Pushed: over 4 years ago - Stars: 65 - Forks: 27

manison/PdbSourceIndexer

Extensible PDB source indexer

Language: C# - Size: 35.2 KB - Last synced: 12 months ago - Pushed: about 3 years ago - Stars: 3 - Forks: 2

wangray/WinDBG-for-GDB-users

"Pwntools does not support Windows. Use a real OS ;)" — Zach Riggle, 2015

Size: 7.81 KB - Last synced: about 1 year ago - Pushed: over 4 years ago - Stars: 69 - Forks: 4

quangnh89/DbgSymGrabber

Just another tool to download specify Symbol (.pdb) files

Language: C++ - Size: 807 KB - Last synced: about 1 year ago - Pushed: over 4 years ago - Stars: 36 - Forks: 11

xquintana/DumpReport

Console application that creates an HTML report from a Windows user-mode dump file, using WinDBG or CDB debuggers. Although it's been mainly designed for crash dump analysis of Windows applications developed in C++, it can also be used to read hang dumps or .Net dumps.

Language: C# - Size: 545 KB - Last synced: about 1 year ago - Pushed: about 2 years ago - Stars: 38 - Forks: 11

abarbatei/windbg-info

collection of links related to using and improving windbg

Size: 1.95 KB - Last synced: about 1 year ago - Pushed: almost 6 years ago - Stars: 17 - Forks: 7

LYingSiMon/voltron Fork of snare/voltron

A hacky debugger UI for hackers

Size: 1.63 MB - Last synced: about 1 year ago - Pushed: almost 2 years ago - Stars: 0 - Forks: 0

LYingSiMon/DbgShell Fork of microsoft/DbgShell

A PowerShell front-end for the Windows debugger engine.

Size: 2.15 MB - Last synced: about 1 year ago - Pushed: over 1 year ago - Stars: 0 - Forks: 0

LYingSiMon/Reverse-Engineering-Arsenal Fork of vallejocc/Reverse-Engineering-Arsenal

Useful Scripts for helping in reverse engeenering

Size: 981 KB - Last synced: about 1 year ago - Pushed: over 3 years ago - Stars: 0 - Forks: 0

AndreyBazhan/DbgExt

Debugger extension for the Debugging Tools for Windows (WinDbg, KD, CDB, NTSD).

Language: C++ - Size: 22.5 KB - Last synced: about 1 year ago - Pushed: over 7 years ago - Stars: 62 - Forks: 26

brian09088/Assembly-Language

CE2012*-組合語言與系統程式

Language: Assembly - Size: 7.97 MB - Last synced: about 1 year ago - Pushed: about 2 years ago - Stars: 0 - Forks: 0

tenpoku1000/windbg_logger

カーネルデバッグ中の Visual Studio 内蔵 WinDbg の通信内容を記録するアプリケーションとデバイスドライバです。

Language: C - Size: 340 KB - Last synced: about 1 year ago - Pushed: about 8 years ago - Stars: 5 - Forks: 0

abhishekgoenka/tools-and-utilities

This repository contains tools and utilities used for developer

Size: 52.2 MB - Last synced: about 1 year ago - Pushed: almost 7 years ago - Stars: 6 - Forks: 2

indy-singh/AutomatedDumpAnalysis

A simple tool that helps you run common diagnostics steps instead of battling with WinDbg.

Language: C# - Size: 9.77 KB - Last synced: 11 months ago - Pushed: over 4 years ago - Stars: 13 - Forks: 0

Evulpes/Reverse-Me

Reverse engineering write-up of an application containing an encrypted message.

Language: C++ - Size: 76.2 KB - Last synced: about 1 year ago - Pushed: over 3 years ago - Stars: 4 - Forks: 2

hal0taso/gray_hat_python

study

Language: Python - Size: 4.46 MB - Last synced: about 1 year ago - Pushed: over 7 years ago - Stars: 1 - Forks: 0

LYingSiMon/wdbgark Fork of swwwolf/wdbgark

WinDBG Anti-RootKit Extension

Size: 2.94 MB - Last synced: about 1 year ago - Pushed: almost 4 years ago - Stars: 0 - Forks: 0

f1zm0/WinDBG-Cheatsheet

WinDBG notes and commands cheatsheet

Size: 23.4 KB - Last synced: about 1 year ago - Pushed: about 2 years ago - Stars: 0 - Forks: 0

Chunlong101/Windbg

Windbg - Debugging Tools/Skills for Windows

Language: C - Size: 86.3 MB - Last synced: about 1 year ago - Pushed: about 1 year ago - Stars: 0 - Forks: 0