bugtraq - Re: [Full-disclosure] WinAppDbg version 1.2 is out!

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <4A37E3E0.4080605@crucialsecurity.com>
Date: Tue, 16 Jun 2009 14:26:40 -0400
From: Jared DeMott <jdemott@...cialsecurity.com>
To: Mario Alejandro Vilas Jerez <mvilas@...il.com>
Cc: "full-disclosure@...ts.grok.org.uk" <full-disclosure@...ts.grok.org.uk>,
	"fuzzing@...testar.linuxbox.org" <fuzzing@...testar.linuxbox.org>,
	"bugtraq@...urityfocus.com" <bugtraq@...urityfocus.com>,
	"python-win32@...hon.org" <python-win32@...hon.org>
Subject: Re: [Full-disclosure] WinAppDbg version 1.2 is out!

Mario Alejandro Vilas Jerez wrote:
> What is WinAppDbg?
> ==================
> 
> The WinAppDbg python module allows developers to quickly code instrumentation
> scripts in Python under a Windows environment.

Can you compare/contrast with pydbg so I can understand why I might want
to give it a try?  Do you have a fuzzing platform like Sulley for it as
well?  Thx!
Jared


> 
> It uses ctypes to wrap many Win32 API calls related to debugging, and provides
> an object-oriented abstraction layer to manipulate threads, libraries and
> processes, attach your script as a debugger, trace execution, hook API calls,
> handle events in your debugee and set breakpoints of different kinds (code,
> hardware and memory). Additionally it has no native code at all, making it
> easier to maintain or modify than other debuggers on Windows.
> 
> The intended audience are QA engineers and software security auditors wishing to
> test / fuzz Windows applications with quickly coded Python scripts. Several
> ready to use utilities are shipped and can be used for this purposes.
> 
> Current features also include disassembling x86 native code (using the open
> source diStorm project, see http://ragestorm.net/distorm/), debugging multiple
> processes simultaneously and produce a detailed log of application crashes,
> useful for fuzzing and automated testing.
> 
> 
> Where can I find WinAppDbg?
> ===========================
> 
> The WinAppDbg project is currently hosted at Sourceforge, and can be found at:
> 
>     http://winappdbg.sourceforge.net/
> 
> It's also hosted at the Python Package Index (PyPi):
> 
>     http://pypi.python.org/pypi/winappdbg/1.2
> 
> 
>