PEDA-like debugger UI for WinDbg
[!Caution] This project is no longer maintained due to several reasons:
- The official pykd is no longer updated.
- Windbg has become an excellent tool. It has a nice UI, and if you need telescope there's also a script that'll do the work. IMO there's no need to use this tool anymore.
I would like to thank anyone that has supported this project. I had a lot of fun writing this tool :)
PEDA-like debugger UI for WinDbg
This is a windbg extension ( using pykd ) to let user having a PEDA-like debugger UI in WinDbg.
It will display the following context in each step/trace:
It also supports some peda-like commands ( see the support commands section )
For now it supports both x86 & x64 WinDbg.
I decided to drop the support of Python2.7 since it has reached the EOL. I believe the project is Python2/3 compatible, however there might exist some issues in pykd and can cause different behavior in Python2/3. Since now the project will only be tested on Python3, I strongly suggest using TWindbg on Python3 instead of Python 2.7. If you still want to use it on Python 2.7, feel free to fork the project and do the development.
pykd.dll
to the [WinDbg Directory]\x86(or x64)\winext\
directory.
.load pykd
to load the pykd module.!pip install pykd
to install the pykd python package.
!pip install --upgrade pykd
.pip install
, try installing the wheel package instead of the one on PyPI. You can download the wheel package here.[WinDbg Directory]\x64\winext\
& [WinDbg Directory]\x86\winext\
.load pykd
to load the pykd
extension!py -g winext\TWindbg\TWindbg.py
to launch TWindbg[PATH_TO_WINDBG] -a pykd -c "!py -g winext\TWindbg\TWindbg.py"
Or you can write a simple batch file for the sake of convenience.
After that you can just use t
or p
to see if the extension is working.
TWindbg
: List all the command in TWindbgctx
: Print out the current contexttel / telescope
: Display memory content at an address with smart dereferences
Maybe ( just maybe ) I'll add more command to make WinDbg behave more like PEDA ( or other debugger like pwndbg, GEF... ) in the future.