windbgx (4)

With mona v3, debugger automation took a major leap forward. Now, with the new tellme / ai command, mona can collect crash context, heap information, registers, call stacks, disassembly, memory mappings, PoC files, heapdynamics logs, and more — and turn all of it into structured AI-ready analysis requests. Whether you want fully automated API-driven workflows with OpenAI or Anthropic, or prefer manually reviewing and submitting requests yourself, tellme brings modern AI-assisted crash triage and debugger automation directly into WinDBG and WinDBGX. This article dives deep into how it works, how to customize it, and how to build repeatable, reusable AI-assisted exploit analysis workflows on modern Windows targets. Read more

Long overdue… but today it finally happened. We’re proud to announce the release of mona v3. This new version brings Python 2 and Python 3 compatibility (Python 3 recommended), support for both 32-bit and 64-bit targets, full integration with WinDBG and WinDBGX, continued compatibility with Immunity Debugger, and the use of the pykd-ext bootstrapper. It also includes a substantial refactor and modernization of the codebase, making it faster, leaner, and better prepared for the future. This post covers what changed, key improvements, important prerequisites, installation and migration guidance, and the current list of supported commands. Continue reading to learn all the details and discover how to get mona v3 up and running in your environment. Download links, setup instructions, and the GitHub repository are provided further down in this post. Read more

Stop just using WinDBG—start bending it to your will. Discover powerful automation, event-driven breakpoints, MASM & C++ expression evaluator, scripting, and PyKD techniques to level up your exploit development and crash analysis. Read more

Table of Contents

• Introduction
• Why WinDBG?
  • Symbols?
• Installing WinDBG Classic and WinDBGX
  • Why do we need both?
  • Scripted/automated installation
  • Manual Installation
    • Classic WinDBG
    • WinDBGX
  • Microsoft Symbol Server
  • Verify if both versions work
• Connecting to a process
  • Open executable vs Read more