From Collaborative RCE Tool Library

Jump to: navigation, search


Tool name: SDbgExt
Rating: 0.0 (0 votes)
Author: Skywing                        
Current version: 1.09
Last updated: 2006
Direct D/L link:
License type: Free
Description: * SDbgExt provides various useful command extensions for WinDbg, including:
* Call an arbitrary function in the target without having symbols.
* Display various VC STL types (including std::string, std::wstring, std::set, std::map, std::list, std::vector). This is primarily limited to providing the address of each element.
* Display a security descriptor on an open object handle.
* Display various information about a window (e.g. Spy++'s window properties).
* Allows you to load custom symbols from a map file (useful for loading symbols from a disassembler, such as IDA).
* To install, place SDbgExt in your WinExt directory. Online help is available with !help after loading SDbgExt (.load SDbgExt).
* Requires the Visual C++ 8 runtimes. On Windows XP Service Pack 1 or earlier, you may need to install Windows Installer 3.0.

The 1.09 release primarily adds support for displaying exception handler data on x64. While there is “some” built-in debugger support for this (via the “.fnent”) command, this support is extremely minimal. You are essentially required to dump the unwind data structures yourself and manually parse them out, which isn’t exactly fun. So, I added support for doing all of that hard work to SDbgExt, via the !fnseh SDbgExt extension (display function SEH data). This support is complementary to the !exchain command supplied by ext.dll for x86 targets.

The “!fnseh” command supports displaying most of the interesting fields of the unwind metadata (besides information on how the prologue works). It also properly supports chained unwind information records (both the documented and undocumented formats). There is also basic support for detecting and processing CL’s C/C++ exception scope tables, if a function uses C language exception handling (__try/__except/__finally).

More info can be found in the release message here:
Related URLs: No related URLs have been submitted for this tool yet

RSS feed Feed containing all updates for this tool.

You are welcome to add your own useful notes about this tool, for others to see!

If you find that any information for the tool above is missing, outdated or incorrect, please edit it!
(please also edit it if you think it fits well in some additional category, since this can also be controlled)

Category Navigation Tree
   Code Coverage Tools  (13)
   Code Ripping Tools  (2)
   Helper Tools  (3)
   Hex Editors  (13)
   Memory Patchers  (7)
   Packers  (20)
   Profiler Tools  (11)
   String Finders  (10)
   Tool Hiding Tools  (8)
   Tracers  (23)
   Needs New Category  (3)