My personal notes on debugging

notes-on-debugging.md

Debugging

On Windows

• WinDbg - Kernel/User Modes
• HyperDbg - Kernel/User Modes

On Linux

• GDB

Quick most used commands list

(gdb) file <filename>
(gdb) break *_start
(gdb) run
(gdb) info registers
(gdb) disassemble
(gdb) stepi
(gdb) info break
(gdb) delete <breakpoint number>
(gdb) break *<memory address>
(gdb) break *_start+<offset>
(gdb) disassemble <function label>
(gdb) print $rax
(gdb) print /d $rax
(gdb) print /x $rax
(gdb) print /t $rax
(gdb) print /c $rax
(gdb) print /f $rax
(gdb) print /d (long long) <quadword label>
(gdb) print /d *(int*) $rax

See also: https://sourceware.org/gdb/current/onlinedocs/gdb.html

Python

• PUDB - Console based