@windbgtips.bsky.social
Reposted
WinDbg script to check kCFG target function validity, and also to dump actual cfguard bitmap (which can be quite different from what's specified in the image GFIDS, needs more research): pastebin.com/64kujJNb.
!check_cfguard "nt!longjmp"
!dump_cfguard_bitmap "nt", "C:/cfguard_bitmap_ntoskrnl.bin"
!check_cfguard "nt!longjmp"
!dump_cfguard_bitmap "nt", "C:/cfguard_bitmap_ntoskrnl.bin"
dump_cfguard_bitmap.js - Pastebin.com
Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.
pastebin.com
March 31, 2025 at 4:07 AM
WinDbg script to check kCFG target function validity, and also to dump actual cfguard bitmap (which can be quite different from what's specified in the image GFIDS, needs more research): pastebin.com/64kujJNb.
!check_cfguard "nt!longjmp"
!dump_cfguard_bitmap "nt", "C:/cfguard_bitmap_ntoskrnl.bin"
!check_cfguard "nt!longjmp"
!dump_cfguard_bitmap "nt", "C:/cfguard_bitmap_ntoskrnl.bin"