WinDbg.exe

Windows Debugger for advanced user-mode and kernel-mode debugging.

Paths

  • C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\windbg.exe
  • C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\windbg.exe
  • C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\windbg.exe
  • C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\windbg.exe

Commands

Execute

Launches a command line through the debugging process; optionally add `-G` to exit the debugger automatically.

Use case: Executes an executable under a trusted microsoft signed binary.

Privileges: User

windbg.exe -g {CMD}

Resources