|
|
![]() |
|
![]() |
|
|||||||
![]() |
|
||||||||||
![]() |
|
||||||||||
|
|
|
||||||||||
|
|
|
|
|||||||||
|
|
|
||||||||||
|
|
|
||||||||||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Thanks to the author of PyDbgEng, your job is awesome !! Below is the screenshot of the GUI (coded with PyQT4+Python 2.7+PyDbgEng):
By: lclee_vx, chanleeyee |
|
|
|
1. make sure you are running remote WinDbg debugging with VMWare. 2. We are going to use "hello.exe" as an example [Download]. Extract it in VMWare C:\hello.exe. 3. In VMWare, enable the remote debugging of WinDbg with command prompt: C:\~path\dbgsrv.exe -t tcp:port=1234,password=lclee_vx 4. Make sure success to open the connect port 1234 5. In localhost, we can connect VMWare through WinDbg with: 6. Now you can see the WinDbg start load "hello.exe and stop. 7. Set the breakpoint at EntryPoint of "hello.exe" with WinDbg: "bp @$exentry" and execute the application with "g". 8. Now you can trace and debug the Ring3 Application with WinDbg. By: lclee_vx
|
| [Previous] [Next] [Home] |