HyperDbg Documentation

Community Download Research Tutorial hwdbg

HyperDbg
Getting Started
Using HyperDbg
Commands
Tips & Tricks
Contribution
- Style Guide
- Logo & Artworks
Design
- Features
  - VMM (Module)
    Control over NMIs
    VMX root-mode compatible message tracing
    Design of !epthook
    Design of !epthook2
    Design of !monitor
    Design of !syscall & !sysret
    Design of !exception & !interrupt
- Debugger Internals
Links

Powered by GitBook

On this page

Commands

Debugging Commands

PreviousEvent Registration Next? (evaluate and execute expressions and scripts in debuggee)

Last updated 9 months ago

? (evaluate and execute expressions and scripts in debuggee)

~ (display and change the current operating core)

a (assemble virtual address)

load (load the kernel modules)

unload (unload the kernel modules)

status (show the debuggee status)

events (show and modify active/disabled events)

i (instrumentation step-in)

gu (step-out or go up)

r (read or modify registers)

bp (set breakpoint)

bl (list breakpoints)

be (enable breakpoints)

bd (disable breakpoints)

bc (clear and remove breakpoints)

g (continue debuggee or processing kernel packets)

x (examine symbols and find functions and variables address)

db, dc, dd, dq (read virtual memory)

eb, ed, eq (edit virtual memory)

sb, sd, sq (search virtual memory)

u, u64, u2, u32 (disassemble virtual address)

k, kd, kq (display stack backtrace)

dt (display and map virtual memory to structures)

struct (make structures, enums, data types from symbols)

sleep (wait for specific time in the .script command)

pause (break to the debugger and pause processing kernel packets)

print (evaluate and print expression in debuggee)

lm (view loaded modules)

cpu (check cpu supported technologies)

rdmsr (read model-specific register)

wrmsr (write model-specific register)

flush (remove pending kernel buffers and messages)

prealloc (reserve pre-allocated pools)

preactivate (pre-activate special functionalities)

output (create output source for event forwarding)

test (test functionalities)

settings (configures different options and preferences)

exit (exit from the debugger)