WinDbg (en)

Enumerating Process Information in the System with Win32 API

I tried enumerating process information in the system using Win32 API.

Notes on Reading Windows Process Information with WinDbg

Notes on reading Windows process information with WinDbg. This article covers topics such as the EPROCESS structure and process manipulation using WinAPI, with more content planned for the future.

Cheat Sheet for Dump Analysis and Live Debugging with WinDbg

A cheat sheet summarizing the WinDbg commands I often use personally. I plan to add more content in the future.

Writing a Windows Kernel Driver from Scratch and Inspecting IRP Requests with WinDbg

Reversing a Windows Sockets TCP/UDP Communication Program

Implementing RC4 Encryption in C and Reversing It with Ghidra and WinDbg

Analyzing a Base64 Program Implemented in C with WinDbg Time Travel Debugging

Building a Custom Windows Kernel Driver and Analyzing It with WinDbg

How to Generate Symbol Files (.pdb) in a Linux Environment Using llvm-mingw

Overwriting the Memory Pointed to by the Stack Pointer in WinDbg to Execute an Arbitrary Function

[WinDbg Preview] A New Debugging Approach with Time Travel Debugging

How to Manually Capture a Kernel Memory Dump on Windows and Analyze It with WinDbg