-
使windbg能够支持python调用,以实现自动分析rootkit功能
资源介绍
Windows 7, 64bit
Download pykd.zip from https://github.com/corelan/windbglib/raw/master/pykd/pykd.zip and save it to a temporary location on your computer
Check the properties of the file and "Unblock" the file if necessary.
Extract the archive. You should get 2 files: pykd.pyd and vcredist_x86.exe
Run vcredist_x86.exe with administrator privileges and accept the default values.
Copy pykd.pyd to C:\Program Files (x86)\Windows Kits\8.0\Debuggers\x86\winext
Open a command prompt with administrator privileges and run the following commands:
c:
cd "C:\Program Files (x86)\Common Files\Microsoft Shared\VC"
regsvr32 msdia90.dll
(You should get a messagebox indicating that the dll was registered successfully)
Download windbglib.py from https://github.com/corelan/windbglib/raw/master/windbglib.py
Save the file under C:\Program Files (x86)\Windows Kits\8.0\Debuggers\x86 ("Unblock" the file if necessary)
Download mona.py from https://github.com/corelan/mona/raw/master/mona.py
Save the file under C:\Program Files (x86)\Windows Kits\8.0\Debuggers\x86 ("Unblock" the file if necessary)
- 上一篇: Xplore文件管理器
- 下一篇: fu-rootkit.rar