.debug (prepare and connect to debugger)
Description of the '.debug' command in HyperDbg.
.debug [remote] [serial|namedpipe] [Baudrate (decimal)] [Address (string)].debug [prepare] [serial] [Baudrate (decimal)] [Address (string)].debug [close]
This command prepares debuggee for a remote connection or connects to a remote debuggee.
Please note that you should first wait for reconnecting on the debugger, then connect to it in the debuggee.
If you specify
remotethen it means that you want to connect to a debuggee.
If you specify
preparethen it means that you want to prepare the current machine to be debugged as debuggee.
closemeans to close all the connections to the debuggee.
If you want to use a serial port as the connection, you should choose
serial, and if you want to connect to a named pipe, then you should specify
namedpipe. Please note that
namedpipecannot be used in debuggee, and it can be used only in the debugger.
In the case of choosing
serialis supported as the type of connection.
If you want to have a kernel debug connection, first, you should run the following command in a debugger (host). As you can see, you can change the
com3to your COM port that is connected to the debuggee.
HyperDbg> .debug remote serial 115200 com3
If you want to use a named pipe instead of a COM port, you can execute the following command in the debugger (Host).
HyperDbg> .debug remote namedpipe \\.\pipe\HyperDbgPipe
After you tell the debugger to listen on a COM port or a named pipe, now you can run the following command in the debuggee.
HyperDbg> .debug prepare serial 115200 com2
If you want to disconnect from the debuggee, then you should run the following command.
HyperDbg> .debug close
- 1.The following values are valid baud rates for serial connections.
The following COM ports are valid for debugging.