Hi everyone! This post is a compilation of commonly used commands or shortcuts on Windbg. I hope they will be useful to you.

Shortcuts

Description Shortcut
Attach to process F6
Debug restart CTRL+SHIFT+F5
Open executable CTRL+E
Open source code file CTRL+O

Commands

In WinDBG, all values are represented in hexadecimal. Do not include "0x" in the command.

Purpose Command
Display memory (Byte|Dword|Pointer with Symbols|Word) d{b|d|ps|w} <register or address>
Example display memory of EAX in DWORD: dd eax
Display type dt <object name or address>
Execute till the next RET instruction pt
Quit q
List loaded modules lm
Verbose on symbols !sym noisy
Set breakpoint bp <program name> + <offset from relative address in hexadecimal without "0x">
See breakpoints bl
See assembly before current break location ub eip
Start/Continue execution g
Step into t
Step over p

I hope these tabs have been helpful to you. Feel free to leave any comments below. You may also send me some tips if you like my work and want to see more of such content. Funds will mostly be used for my boba milk tea addiction. The link is here. 🙂

 This post is ad-supported
​