zouxianyu / query-pdb Goto Github PK

View Code? Open in Web Editor NEW

132.0 4.0 43.0 24.22 MB

query-pdb is a server-side software for parsing PDB files. The software provides PDB online parsing service.

License: MIT License

CMake 0.36% C++ 96.27% C 3.33% Dockerfile 0.04%

modern-cpp pdb pdb-parser webserver

query-pdb's Introduction

Homepage

kanxue: https://bbs.pediy.com/user-home-749612.htm

UnknownCheats: https://www.unknowncheats.me/forum/members/1934883.html

Contact

Telegram: (at) hlw2014

Projects

Game Security

Operating System

CS Homework

query-pdb's People

Contributors

Stargazers

Watchers

Forkers

panduoraz orange088 0x738a xiihaha ibinary6 crackercat niyumingri huafuge yuaom llkbkh cpkt9762 clown-team sdxt shuixi2013 showmethemoney2022 sionthanatos smallzhong timess floatingnumber rlcupk kact929 blackchicken20 peter-zheng-sp xu7103224 killvxk xhscfq matrixkung yang-zhiyuan songbei6 killaragorn wbaby shonker hzqst snyiu100 dixin20 zijingsh alechy fengjixuchui szdyg kingswb boledage jerrymousez

query-pdb's Issues

support raw TCP request

http and json are difficult to use in kernel mode. raw TCP request is friendly to kernel mode.

add windows driver request demo

Add flag to indicate not found instead of using -1

ideas from @orange088

support symbols retrieval from special address

the function is like what "SymFromAddr" do

Handle mangled and decorated names

It seems like it could be a nice feature to demangle/de-decorate names from pdbs. For example in this pdb:

https://msdl.microsoft.com/download/symbols/ntkrnlmp.pdb/00625D7D36754CBEBA4533BA9A0F3FE22/ntkrnlmp.pdb

Query:

{'name': 'ntkrnlmp.pdb', 'guid': '00625D7D36754CBEBA4533BA9A0F3FE2', 'age': 2, 'query': ['ExAllocatePoolWithTag']}

Result:

'{"ExAllocatePoolWithTag":-1}'

But this query resolves:

{'name': 'ntkrnlmp.pdb', 'guid': '00625D7D36754CBEBA4533BA9A0F3FE2', 'age': 2, 'query': ['_ExAllocatePoolWithTag@12']}

Result:

'{"_ExAllocatePoolWithTag@12":1146886}'

This could be a nice feature/enhancement. Could be a change in this repo or MolecularMatters/raw_pdb

Hello, thank you very much for this project, but I have a suggestion. When running the server through a public Docker image (zouxianyu/query-pdb-server:microsoft-latest), instead of server logs, we have useless supervisord logs. As far as I understand, Docker logs should contain exactly the logs of your service.

To solve the problem, it would be a good idea to somehow change the default supervisord.conf or even get rid of supervisord because Docker itself can handle non-graceful server shutdown using flags like --restart=always etc.

zouxianyu / query-pdb Goto Github PK

query-pdb's Introduction

Homepage

Contact

Projects

Game Security

Operating System

CS Homework

query-pdb's People

Contributors

Stargazers

Watchers

Forkers

query-pdb's Issues

Recommend Projects

Recommend Topics

Recommend Org