首页
社区
课程
招聘
问答 CTF 排行榜 知识库 工具下载 峰会 看雪商城 证书查询
  1. 社区
  2. 安全工具
    3. 发新帖
[转帖]BugChecker Open-Source Single-Host Kernel Debugger for Windows 2000 and XP
发表于: 2011-7-5 22:47 4179

[转帖]BugChecker Open-Source Single-Host Kernel Debugger for Windows 2000 and XP

linhanshi 活跃值
2011-7-5 22:47
4179
BugChecker Open-Source Single-Host Kernel Debugger for Windows 2000 and XP

BugChecker is a single-host kernel debugger for the Microsoft Windows 2000 and XP operating systems. "Single-host" means that the debugger and the debuggee (in this case the whole system, comprehensive of the kernel, hal, device drivers and user applications) can be debugged on a single machine, without the need of a second computer running the debugger application. "Kernel debugger", as the name suggests, is a program that allows to "trace" inside the system kernel, setting breakpoints and the like as you would do when debugging a normal user application.

BugChecker allows to debug both user and kernel code, both on uniprocessor and multiprocessor versions of Windows 2000 and XP. However Bugchecker has some limitations at this time, that I hope will be addressed in future releases: check out the Known Bugs page for an up-to-date list. If you want to contribute to the development of BugChecker you are more than welcome! In this case, please check out the Contribute page. Thank you!

BugChecker is licensed under GNU General Public License, version 2.


http://bugchecker.com/


http://bugchecker.com/files/BugChecker0.1.149_Binaries.zip


How to install

http://bugchecker.com/?howtoinstall


YOU CAN GOOGLE.

Программное обеспечение выпуска и Windows Crack Обучение
Нам-Dabei Guanyin Бодхисаттва Нам без митабха



[招生]科锐逆向工程师培训(2024年11月15日实地，远程教学同时开班, 第51期)

上传的附件：
  • 1.gif （101.76kb，57次下载）
收藏
免费 ・1
支持
分享
最新回复 (2)
linhanshi
雪    币： 98745
活跃值： (201039)
能力值： (RANK：10 )
在线值：
发帖
回帖
粉丝
私信
2 楼
How to Install BugChecker

Unzip the archive (for example in C:\BugChecker) and then type in a console window: C:\BugChecker> bcutil /mspdb


This will ask for one of these files, which belong to a Microsoft Visual Studio installation (and that are not redistributable):
MSPDB50.dll from Microsoft Developer Studio
MSPDB60.dll from Microsoft Visual Studio 6.0
MSPDB70.dll from Microsoft Visual Studio .NET 7
MSPDB71.dll from Microsoft Visual Studio .NET 2003
MSPDB80.dll from Microsoft Visual Studio 2005

The selected file path will be saved in the registry and later used for symbol translation. At its current release, BcUtil requires MsPdbXX.dll from a Visual Studio installation because the actual symbol translation code relies both on MsPdbXX.dll and DIA SDK (that is the only correct and documented way to read and parse PDB files) However, in 2002, when BugChecker was developed, the DIA SDK had not been released yet by Microsoft (it first shipped with Visual Studio .NET 2003). So the initial symbol translation code was developed relying on dynamic binding to this DLL (as early versions of SoftICE Symbol Loader did for years). Right now, I am in the process of converting the remaining legacy translation code in order to use DIA SDK exclusively, thus avoiding the MsPdb dependency (NOTE: DIA SDK is included in the current binaries of BugChecker and is automatically registered by BcUtil, if not already COM-visible in the system).

Then make sure you are connected to the internet, and type: C:\BugChecker> bcutil /install


This command will install these drivers:
BugCheckerVideo (vpcicevd.sys, service name: vpcicevd, start type: boot)
BugChecker (vpcice.sys, service name: vpcice, start type: demand)

It will also create a BugChk.Dat file (copied in your Windows\System32\Drivers directory) that contains kernel-specific offsets to OS private functions and type fields, that are required by BugChecker to interact correctly with the underlying operating system. WARNING: without this file BugChecker defaults to Windows 2000 SP4, most likely blue-screening your computer.

To start BugChecker, reboot (so BugCheckerVideo loads at boot time) and type on the target system: C:\BugChecker> net start vpcice


YOU CAN GOOGLE.

Программное обеспечение выпуска и Windows Crack Обучение
Нам-Dabei Guanyin Бодхисаттва Нам без митабха
2011-7-5 22:49
0
linhanshi
雪    币： 98745
活跃值： (201039)
能力值： (RANK：10 )
在线值：
发帖
回帖
粉丝
私信
3 楼
本地備檔一份.

YOU CAN GOOGLE.

Программное обеспечение выпуска и Windows Crack Обучение
Нам-Dabei Guanyin Бодхисаттва Нам без митабха
上传的附件：
2011-7-5 23:00
0
游客
登录 | 注册 方可回帖
回帖 表情 雪币赚取及消费
高级回复
返回
//