almost-real / idbg Goto Github PK

Allows to add breakpoints from IDA (from the graph/text view) to WinDbg easily.

Since I found the debugger inside IDA confusing(probably because I couldn't use it properly) I decided to write a plugin that allowed me to add breakpoints from the IDA graph view to WinDbg.

On IDA: File, Script File (or just ALT F7) then browse to idbg.py
On WinDbg: !load path
!sync_with module (module without the .dll at the end)

On WinDbg: !unload_idbg then !unload path

On IDA:
just click somewhere on the graph so OnViewCurpos gets called
(path is the path of the WinDbg DLL extension)

Load idbg on IDA and windbg-extension.dll on WinDbg then simply press the key j + left click wherever you want to add a breakpoint to add a breakpoint and doing the same will also remove it if there's already a breakpoint in that location.
To change the key j to whatever key you want, you have to modify the parameter of the is_key_down function with the vkey code of the key you desire to use instead.

Credits:
https://github.com/geohot/qira/blob/master/ida/python/qira.py (took the hooks from there)
dbgsdk samples from Microsoft and wdbgark https://github.com/swwwolf/wdbgark

while using it I found a few bugs that I can't be bothered to fix at the moment since it's fine for me but I'll try to to fix them if it can be helpful for someone