CPython module for Windbg's dbgeng plus additional wrappers.
Switch branches/tags
Nothing to show
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Failed to load latest commit information.
VS
examples
python-dbgeng
.gitignore
README
__init__.py
pefile.py
pywindbg.py
setup.py

README

Pybag


Introduction
============

Pybag combines MS DebugEngine bindings with additional helper functions for a
powerful Windows debugging module.


Install
=======

Prerequisites must already be installed.  Paths might need to be
adjusted in __init__.py and setup.py

    
    python setup.py install

Or download a release package and install.

Requires
========

* Python 2.7
* Capstone
* Windows Development Kit for Windows 10
** Debugging Tools
** Headers and Libraries
* Microsoft Visual C++ Compiler for Python 2.7 (only if building from source)

Run
===

c:\>python 
>>> import pybag
>>> dbg = pybag.pywindbg.Userdbg()
>>> dbg.create('calc.exe')
>>> dbg.cmd('.symfix')
>>> dbg.cmd('.reload')
>>> dbg.go()
    
    *** hit contrl-c to break ***

>>> dbg.peb()
>>> help(dbg)




TODO
====

- Dynamically resolve install path for SDK
- Replace pefile
- Add some tests
- Remote debugging using dbgsrv
- More helper functions
- Better examples
- Better x64 vs x86 handling