Matthieu Suiche's blog

If one time you want to fill a buffer (here size is 0×10000) with null bytes, and put a string inside. Don’t forget the “a” between “>” and “< " kd> $$>a< "FULL_SCRIPT_PATH" BASE_ADDRESS $$ $$ Matthieu Suiche 08/2007 $$ http://www.msuiche.net $$ .if (${/d:$arg1}) { f ${$arg1} L10000 0 ea ${$arg1} "I'm a fucking string  [ Read More ]

Here is a sample of script for Windbg for people who doesn’t want to waste time because they don’t find any document. Firstly, to declare a variable you must use the prefix “r”. Moreover, the name must be $t[0..n] Secondly, if you use the flag “/D” after “.printf” you can use pseudo-html code inside. Thirdly,  [ Read More ]