https://github.com/felsokning/felsokningext

Just another Windbg Extension
https://github.com/felsokning/felsokningext

Last synced: 3 months ago
JSON representation

Just another Windbg Extension

• Host: GitHub
• URL: https://github.com/felsokning/felsokningext
• Owner: felsokning
• License: gpl-3.0
• Created: 2024-10-21T19:01:08.000Z (7 months ago)
• Default Branch: main
• Last Pushed: 2024-11-17T18:46:22.000Z (6 months ago)
• Last Synced: 2025-01-07T08:22:31.759Z (4 months ago)
• Language: C++
• Size: 402 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# FelsokningExt

Just another Windbg Extension

#### NOTE:

This is meant to be a drop-in replace for `!procdumpext`, as procdumpext no longer ships with the Windows SDK.

## Loading the Extension

Download the target flavor from [Releases](https://github.com/felsokning/FelsokningExt/releases) and extract the contents. You should place the dll in a folder you'll recall, later, as you'll need to type the path into Windbg to load the extension.

For example, on my local machine, the load command would be: `.load C:\ext\FelsokningExt.dll`

## deep

`deep` allows you to traverse all threads in the dump (or live process - not yet tested) to find threads that are above `x` frames.

### Usage

`!FelsokningExt.deep ` or `!deep ` will resolve in Windbg and output the results.

![Image showing thread hyperlink](./images/thread_hyperlink.PNG)

## hide

`hide` allows you traverse all threads in the dump (or live process - not yet tested) to find threads that match a given symbol and omit them from the thread output.

### Usage

`!FelsokningExt.hide -q -s ` or `!hide -s ` will resolve in Windbg and output the results. `-q` (quiet) will not output the thread id in the results.

![Image showing hide](./images/hide.png)

## seek

`seek` allows you traverse all threads in the dump (or live process - not yet tested) to find threads that match a given symbol.

### Usage

`!FelsokningExt.seek -q -s ` or `!seek -s ` will resolve in Windbg and output the results. `-q` (quiet) will not output the thread id in the results.

![Image showing seek](./images/seek.png)