首页
社区
课程
招聘
[下载]The Narliest Windbg Extension Evar!
2011-2-23 09:49 3195

[下载]The Narliest Windbg Extension Evar!

2011-2-23 09:49
3195
This windbg extension is intended to be able to:

list /SafeSEH, /GS, DEP, and ASLR info about all loaded modules
search for ROP gadgets
other misc utils
Currently, only listing info about loaded modules is implemented. Go to the downloads section to get the most recently compiled extension and pdb. For those of you who might download and use this extension, it would be worth it to check back every now and then for a new release, as a lot is currently in the works (or you could ping me directly). Also, if you find a bug with this extension, please let me know.

Example:

To "install", download one of the zips from the download page, extract narly.dll, and copy it in to the winext folder for windbg. The path to the winext folder usually looks something like this

C:\Program Files\Debugging Tools for Windows (x86)\winextAfter you do that, you can .load narly to load the extension into windbg:

0:018> .load narly

下载http://code.google.com/p/narly/downloads/detail?name=narly_0.1.zip&can=2&q=
narly_0.1.zip

总的来说就是windbg的扩展,可以检测SEH GS DEP ASLR等,ROP检测没有看到,估计后续版本会实现吧。。。。标记一下

[CTF入门培训]顶尖高校博士及硕士团队亲授《30小时教你玩转CTF》,视频+靶场+题目!助力进入CTF世界

上传的附件:
收藏
点赞0
打赏
分享
最新回复 (0)
游客
登录 | 注册 方可回帖
返回