Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

What are the differences between OllyDbg and WinDbg?

My simple understanding is OllyDbg is a user mode debugger, which you could use to debug "normal" apps. WinDbg is a kernel mode debugger, which you could use to debug itself.

Is that right?

like image 976
anta40 Avatar asked Jan 28 '11 10:01

anta40


1 Answers

WinDbg is a kernel mode debugger developed by Microsoft which can be used to debug Operating System itself on which it is running. Technically, it means it can debug kernel code which is privileged code running in Ring 0.

OllyDbg is a user mode debugger which is capable of debugging only user mode executables such as Exe.

Note that Windbg is a powerful debugger which encompasses the functionality of Ollydbg as well. However, its a command line debugger which beginners find it difficult to dealt with in beginning. Ollydbg is a GUI debugger much similar to Visual Studio debuggers.

like image 164
Madhur Ahuja Avatar answered Oct 07 '22 20:10

Madhur Ahuja