Upload File

windbg primer

33

Upload: inaz2

Post on 16-Apr-2017

3.523 views

Category:

Technology


0 download

Report

TRANSCRIPT

Page 1: WinDbg Primer
Page 2: WinDbg Primer

2

http://inaz2.hatenablog.com/
Page 3: WinDbg Primer

3

Page 4: WinDbg Primer

4

Page 5: WinDbg Primer

5

windbg

cdb

kd

ntsd

ntkdGUI frontend

Command-line tools

Open a new prompt window

Kernel-mode

User-mode

Page 6: WinDbg Primer

6

Page 7: WinDbg Primer

7

Page 8: WinDbg Primer

8

https://msdn.microsoft.com/en-US/windows/hardware/gg454513
https://msdn.microsoft.com/en-us/library/windows/hardware/ff552208(v=vs.85).aspx
Page 9: WinDbg Primer

9

https://msdn.microsoft.com/en-us/library/windows/hardware/ff542967(v=vs.85).aspx
Page 10: WinDbg Primer

10

Page 11: WinDbg Primer

11

Page 12: WinDbg Primer

12

Page 13: WinDbg Primer

13

Page 14: WinDbg Primer

14

Page 15: WinDbg Primer

15

Page 16: WinDbg Primer

16

Page 17: WinDbg Primer

17

Page 18: WinDbg Primer

18

Page 19: WinDbg Primer

19

Page 20: WinDbg Primer

20

Page 21: WinDbg Primer

21

Page 22: WinDbg Primer

22

Page 23: WinDbg Primer

23

Page 24: WinDbg Primer

24

Page 25: WinDbg Primer

25

Page 26: WinDbg Primer

26

Page 27: WinDbg Primer

27

Page 28: WinDbg Primer

28

baadf00d … uninitializedabababab … guard bytesfeeefeee … freed

Page 29: WinDbg Primer

29

Page 30: WinDbg Primer

30

Page 31: WinDbg Primer

31

http://hp.vector.co.jp/authors/VA028184/english/
Page 32: WinDbg Primer

32

https://msdn.microsoft.com/en-us/library/windows/hardware/ff540574(v=vs.85).aspx
http://windbg.info/doc/2-windbg-a-z.html
http://inaz2.hatenablog.com/entry/2015/07/11/211449
http://blogs.msdn.com/b/doronh/archive/tags/windbg_2f00_kd+fun/
Page 33: WinDbg Primer

33


Who’s afraid of WinDbg

WinDbg - A to Z

WinDbg. From A to Z! · 3 Why “WinDbg . From A to Z ” ? WinDbg's documentation is sub-optimal for people new to the topic Without good documentation and examples the learning

Debugging NET Applications With WinDBG

windbg でやる .NET デバッグ入門 Lv １くまー

FEEDBACK ON WINDBG USAGE - Botconf 2017 · Kind of cheat sheet ... TLP: RAINBOW | Feedback on WinDBG usage | Botconf | December 2014 36 . MORE COMMAND Display options

Windbg + SOS: cannon & shotgun

System Administration SAP Mobile Platform 2.3 SP02infocenter.sybase.com/.../doc/pdf/smp_system_administration.pdf · 2013/02/01 · Reference ... Example Data Analysis using Windbg.....106

WinDbg - RIP Tutorial · 2019. 1. 18. · älteren Versionen von Windows, z. B. kann Version 10 von WinDbg weiterhin unter Windows 7 verwendet werden. Allerdings können einige Befehle

Beyond F5 - windbg et .Net

WinDBG. From A to Z!

Writing WinDbg Extensions Andre Vachon Software Development Lead Windows Product Feedback Microsoft Corporation

NET Memory...Prerequisites Basic .NET programming and debugging WinDbg Commands We use these boxes to introduce some WinDbg commands used in practice exercisesTraining Principles

WinDbg 를 이용한 커널 드라이버 디버깅 2. Live Debugging

Using WinDbg

Manual kernel mode analysis with WinDbg VB2018 Vanja ... · Manual kernel mode analysis with WinDbg • Intro to WinDbg • Setup • Basic commands • Taking it to the next level

Reverse Engineering Malware Binary Obfuscation and …...• GDB • IDA debugger • Other scripting languages • Windbg scripting • OllyDbg scripting plugins (several languages)

WinDbg Superpowers For .NET Developers - Contentful · PDF fileDotNext Moscow 2016 #dotnext | @goldshtn WinDbg Superpowers For .NET Developers Sasha Goldshtein CTO, SelaGroup @goldshtn

Hunting rootkits with windbg

WinDbg в руках .NET разработчика

Hunting rootkits with Windbg v1.1 -

software architect, HAVIT, s.r.o. [email protected] ......•WinDbg–„GUI“ •NTSD –newconsole •CSD –classicconsole •DebugDiag-samostatné součást Windows SDK Debugger

Deep Dive into OS Internals with Windbg

WinDBG. From A to Z!windbg.info/download/doc/pdf/WinDbg_A_to_Z_mono_JP.pdf 3 「WinDbg . From A to Z 」の目的 WinDbgのドキュメントは、入門者には分かりづらい

WinDbg 를 이용한 커널 드라이버 디버깅 1. WinDbg 개요

Crash (or) Hang dump analysis using WinDbg in Windows platform by K.S.Shanmugasundaram

Practical Malware Analysis: Ch 10: Kernel Debugging with WinDbg

Windows Debugging with WinDbg

Practical Malware Analysis - samsclass.info · 2017-04-03 · Practical Malware Analysis Ch 10: Kernel Debugging with WinDbg Updated 3-21-17. WinDbg v. ... • This chapter explores

Автоматизация отладки в windbg

어플리케이션디버깅pds.devpia.com/MAEUL/top_pds/18000/17708... ·  · 2004-06-30• Windows 80386 Debugger : WDEB386 • Kernel Debugger : i386KD • SoftICE, WinDBG. 23

Depurando até o fim do mundo: técnicas e truques de WinDbg

WinDbg Superpowers For .NET Developerssddconf.com/brands/sdd/library/WinDbg.pdf · 2017. 5. 11. · WinDbg Extensions •WinDbg ships with a number of useful extensions •Third-party

Verifikacijasoftvera - University of Belgrade · WinDBG-Microsoft MicrosoftVisualStudioDebugger MilenaVujoˇsevi ´cJani ˇci´c Verifikacijasoftvera. Debagovanje Profajliranje

Advanced Debugging with WinDbg and SOS