New Post: InternetExplorer: проблемы с получением аргументов из функций при...
1) А каким образом получаются параметры? Можно небольшой примерчик? 2) Система 64 битная?
View ArticleNew Post: InternetExplorer: проблемы с получением аргументов из функций при...
Система: windows 7 x64 sp1 python 2.7.6 x86 pykd 0.2.0.26 windbg x86 internet explorer 8, 9, 10 analyzer.pycall-back function def NtUseFile(id): #NtCreateFile or NtOpenFilepObjectAttributes =...
View ArticleNew Post: InternetExplorer: проблемы с получением аргументов из функций при...
Не могу воспроизвести. Скрипт запускал в виде отдельно приложения. Система: windows win7 x64, IE9 python 2.6 + pykd 0.2.0.29 OK python 2.7 + pykd 0.3.0.3 OKХочу заметить, что в принципе, есть...
View ArticleEdited Issue: [0.3.x] failed to get stack for Wow64 [12945]
getStack()Traceback (most recent call last): File "<console>", line 1, in <module>DbgException: Call IDebugControl::GetStackTrace failedHRESULT 0x8000ffff
View ArticleEdited Issue: [0.3.x] setCurrentThread not actually switch current thread...
For kernel mode:setCurrentThread(x)stk = getStack()Expect:got stack for thread xRealy:got stack for ruunning thread on the current CPU
View ArticleReleased: PYKD 0.3.0.5 (May 08, 2014)
Bug Fixedfixed :issue #12945 ( failed to get stack for Wow64 )fixed :issue #12956 ( setCurrentThread not actually switch current thread )New featuresadded : getCurrentProcessId routine ( return current...
View ArticleCreated Release: PYKD 0.3.0.5 (May 08, 2014)
Bug Fixedfixed :issue #12945 ( failed to get stack for Wow64 )fixed :issue #12956 ( setCurrentThread not actually switch current thread )New featuresadded : getCurrentProcessId routine ( return current...
View ArticleEdited Feature: [0.3.x] how get current process debug id? [12954]
There is no such routine:getCurrentProcessId()So, we need make annoying workaround:```getProcessIdBySystemID( getProcessSystemID() )```
View ArticleNew Post: can I debug python script?
Hi, I'm new to PYKD as well as Python. I wanted to check if I can debug my python script in windbg? Like pdb Any help would be appreciated. Thanks, Vahid
View ArticleNew Post: can I debug python script?
Of course you can. 1) You can use pdb with windbg:kd> !py pdb C:\\temp\\sample.py "hello" > c:\temp\sample.py(1)<module>() -> import sys (Pdb) s > c:\temp\sample.py(3)<module>()...
View ArticleNew Post: can I debug python script?
Thanks for help. It really helped to debug the commands. I wanted to check you on one more thing. here is scenario: I have my driver, and I know specific structure in the driver. e.g. Driver is ABC.SYS...
View ArticleNew Post: can I debug python script?
Working with typed information - it is main powerful feature of the pykd. There is a special class - 'typedVar' which exposes working with typed variable in "C style". For example: let MY_TYPE is...
View ArticleCreated Unassigned: [0.3.x] getProcessThreads raised Fatal Python Error [13042]
Fatal python error : PyEval_SaveThread NULL tstate
View ArticleEdited Unassigned: [0.3.x] getProcessThreads raised Fatal Python Error [13042]
Fatal python error : PyEval_SaveThread NULL tstate
View ArticleCreated Issue: [0.3.x] getTargetProcesses raises Fatal Python Error [13043]
Fatal python error: PyEval_SaveThread: NULL tstate
View ArticleEdited Issue: [0.3.x] getTargetProcesses raises Fatal Python Error [13043]
Fatal python error: PyEval_SaveThread: NULL tstate
View Article