https://github.com/benh11235/ida-windbglue

Humble suite of scripts to assist with remote debugging using IDA pro client and winDBG server.
https://github.com/benh11235/ida-windbglue

Last synced: 3 months ago
JSON representation

Humble suite of scripts to assist with remote debugging using IDA pro client and winDBG server.

• Host: GitHub
• URL: https://github.com/benh11235/ida-windbglue
• Owner: BenH11235
• License: gpl-3.0
• Created: 2018-04-11T08:15:03.000Z (over 6 years ago)
• Default Branch: master
• Last Pushed: 2020-11-03T09:36:22.000Z (about 4 years ago)
• Last Synced: 2024-02-12T15:55:45.361Z (9 months ago)
• Language: Python
• Size: 18.6 KB
• Stars: 5
• Watchers: 3
• Forks: 3
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
Contributed by Check Point Software Technologies, 2018.

# IDA-WindbGlue

These are "glue" scripts, meant to automate the task of copying the currently analyzed executable to a remote VM and starting a debugging session using the remote Windbg debugging server (`dbgsrv.exe`).

These scripts are updated for the overhauled IDA 7.0 API.

## Installation

Simply copy the scripts in this repository to a local directory.

For this script to work requires a fairly extensive set-up of the environment and the configuration in `config.py`. Detailed information of how to properly set up the environment is available [here](https://research.checkpoint.com/2018/scriptable-remote-debugging-windbg-ida-pro/).

## Usage

First, set up the full environment including the remote debugging host, as explained in the link above.

In IDA Pro, choose "run script" (`alt+F7`) and choose the script `windbg_remote.py`.

In the Python console, run: `remote_debug()`. If all goes well, a debugging session should start.

## Contributing

I think this is a useful little script for a decent disassembly / debugging setup. If you have any idea of how to improve it please feel free to email me, send pull requests, etc.

## History

2020-11-03: Added link to blog post (which has existed for ages, really), updated to support IDA 7.0 API

2018-04-01: Initial upload