用于windbg检查堆是否被破坏的python脚本

来源:互联网 发布:仿淘宝大花朵钩花帽子 编辑:程序博客网 时间:2024/05/08 23:48

省的手工检查太麻烦,需要安装pykd


import sys

from pykd import *


def check_heap():
heapliststring = dbgCommand('!heap')


for heapstring in heapliststring.split('\n'):
if heapstring.find(':') == -1:
   continue
else:
   heapstring = heapstring.expandtabs(4)
   heapstring = heapstring.replace(" ", "")
   heapaddr = heapstring[-8:]

result = dbgCommand("!heap -v " + heapaddr)
dprintln(result)


def main(argv):
check_heap()


if __name__ == "__main__":
main(sys.argv)
0 0
原创粉丝点击