文件名称：让windbg支持python调用，自动分析rootkit
文件大小：11.37MB
文件格式：RAR
更新时间：2021-01-01 19:16:05
windbg python rootkit 病毒
Windows 7, 64bit Download pykd.zip from https://github.com/corelan/windbglib/raw/master/pykd/pykd.zip and save it to a temporary location on your computer Check the properties of the file and "Unblock" the file if necessary. Extract the archive. You should get 2 files: pykd.pyd and vcredist_x86.exe Run vcredist_x86.exe with administrator privileges and accept the default values. Copy pykd.pyd to C:\Program Files (x86)\Windows Kits\8.0\Debuggers\x86\winext Open a command prompt with administrator privileges and run the following commands: c: cd "C:\Program Files (x86)\Common Files\Microsoft Shared\VC" regsvr32 msdia90.dll (You should get a messagebox indicating that the dll was registered successfully) Download windbglib.py from https://github.com/corelan/windbglib/raw/master/windbglib.py Save the file under C:\Program Files (x86)\Windows Kits\8.0\Debuggers\x86 ("Unblock" the file if necessary) Download mona.py from https://github.com/corelan/mona/raw/master/mona.py Save the file under C:\Program Files (x86)\Windows Kits\8.0\Debuggers\x86 ("Unblock" the file if necessary)
【文件预览】：
windbglib
----.travis.yml(67B)
----mona.py(628KB)
----.git()
--------index(638B)
--------hooks()
--------config(303B)
--------description(73B)
--------refs()
--------logs()
--------packed-refs(107B)
--------objects()
--------info()
--------HEAD(23B)
----LICENSE(1KB)
----.idea()
--------windbglib.iml(459B)
--------misc.xml(213B)
--------vcs.xml(180B)
--------modules.xml(270B)
--------workspace.xml(12KB)
--------inspectionProfiles()
----.gitignore(15B)
----pykd()
--------pykd03.zip(925KB)
--------pykd.zip(4.67MB)
----README.md(3KB)
----windbglib.py(67KB)