Ntsd.exe

Symbolic Debugger for Windows.

Paths

  • C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\ntsd.exe
  • C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\ntsd.exe
  • C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\ntsd.exe
  • C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\ntsd.exe

Commands

Execute

Launches command through the debugging process; optionally add `-G` to exit the debugger automatically.

Use case: Executes an executable under a trusted microsoft signed binary.

Privileges: User

ntsd.exe -g {CMD}

Resources