~/bokkapig
hack the box machine writeups

WinDbg.exe

type: OtherMSBinaries
Windows Debugger for advanced user-mode and kernel-mode debugging.

Full path

C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\windbg.exe
C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\windbg.exe
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\windbg.exe
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\windbg.exe

Commands

  1. ExecuteUser T1127

    Executes an executable under a trusted microsoft signed binary.

    windbg.exe -g {CMD}

    Launches a command line through the debugging process; optionally add -G to exit the debugger automatically.

    os: Windows

    Execute: CMD

Resources

acknowledgement: Avihay Eldad @AvihayEldad