06.09.11 - Testing python+dbgeng.dll//
This is the testing only of my project. Basically I want to code the fuzzer - fuzzing through dbgeng.dll (powerful dll provided by windbg) using python code.

Thanks to the author of PyDbgEng, your job is awesome !!

Below is the screenshot of the GUI (coded with PyQT4+Python 2.7+PyDbgEng):

By: lclee_vx, chanleeyee

 


21.6.11 - WinDbg Kungfu #3//
Is it possible we trace and debug the remote Ring3 application in WinDbg remote debugging? Below is some testing:

1. make sure you are running remote WinDbg debugging with VMWare.

2. We are going to use "hello.exe" as an example [Download]. Extract it in VMWare C:\hello.exe.

3. In VMWare, enable the remote debugging of WinDbg with command prompt:

    C:\~path\dbgsrv.exe -t tcp:port=1234,password=lclee_vx 

4. Make sure success to open the connect port 1234

5. In localhost, we can connect VMWare through WinDbg with:

6. Now you can see the WinDbg start load "hello.exe and stop.

7. Set the breakpoint at EntryPoint of "hello.exe" with WinDbg: "bp @$exentry" and execute the application with "g".

8. Now you can trace and debug the Ring3 Application with WinDbg.

     

By: lclee_vx


[Previous]   [Next]   [Home]





©2011 F-13 Laboratory. All Rights Reserved.