Some useful commands (Memento)

Posted by Matthieu Suiche on August 4, 2007 · Leave a Comment 

If one time you want to fill a buffer (here size is 0×10000) with null bytes, and put a string inside.

Don’t forget the “a” between “>” and “< "

kd> $$>a< "FULL_SCRIPT_PATH" BASE_ADDRESS

$$
$$ Matthieu Suiche 08/2007
$$ http://www.msuiche.net
$$

.if (${/d:$arg1})
{
    f ${$arg1} L10000 0

    ea ${$arg1} "I'm a fucking string !!!! test it oon meeeeeeeeeee! haha"
}
.else
{
    .printf "Usage: BUFFER_ADDRESS";
}

Filed under Debugging, Windows · Tagged with