{"action":"created","issue":{"url":"https://api.github.com/repos/corelan/windbglib/issues/19","repository_url":"https://api.github.com/repos/corelan/windbglib","labels_url":"https://api.github.com/repos/corelan/windbglib/issues/19/labels{/name}","comments_url":"https://api.github.com/repos/corelan/windbglib/issues/19/comments","events_url":"https://api.github.com/repos/corelan/windbglib/issues/19/events","html_url":"https://github.com/corelan/windbglib/issues/19","id":234716562,"node_id":"MDU6SXNzdWUyMzQ3MTY1NjI=","number":19,"title":"this command cannot run correctly 。 ","user":{"login":"BAHK","id":12934235,"node_id":"MDQ6VXNlcjEyOTM0MjM1","avatar_url":"https://avatars0.githubusercontent.com/u/12934235?v=4","gravatar_id":"","url":"https://api.github.com/users/BAHK","html_url":"https://github.com/BAHK","followers_url":"https://api.github.com/users/BAHK/followers","following_url":"https://api.github.com/users/BAHK/following{/other_user}","gists_url":"https://api.github.com/users/BAHK/gists{/gist_id}","starred_url":"https://api.github.com/users/BAHK/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/BAHK/subscriptions","organizations_url":"https://api.github.com/users/BAHK/orgs","repos_url":"https://api.github.com/users/BAHK/repos","events_url":"https://api.github.com/users/BAHK/events{/privacy}","received_events_url":"https://api.github.com/users/BAHK/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2017-06-09T04:08:12Z","updated_at":"2018-12-27T07:35:36Z","closed_at":"2018-12-27T07:35:36Z","author_association":"NONE","body":"this command cannot run correctly 。\r\n\r\n\r\n\r\n0:000:x86&gt;  !py  mona  jmp\r\nHold  on...\r\n[+]  Command  used:\r\n!py  mona.py  jmp\r\nUsage  :\r\nDefault  module  criteria  :  non  aslr,  non  rebase  \r\nMandatory  argument  :    -r      where  reg  is  a  valid  register\r\n\r\n[+]  This  mona.py  action  took  0:00:00.027000\r\n0:000:x86&gt;  !py  mona  jmp  -r  ESP\r\nHold  on...\r\n[+]  Command  used:\r\n!py  mona.py  jmp  -r  ESP\r\n\r\n----------  Mona  command  started  on  2017-06-09  11:38:54  (v2.0,  rev  576)  ----------\r\n[+]  Processing  arguments  and  criteria\r\n        -  Pointer  access  level  :  X\r\n[+]  Generating  module  info  table,  hang  on...\r\n        -  Processing  modules\r\n********************************************************************************\r\nTraceback  (most  recent  call  last):\r\n    File  &quot;mona.py&quot;,  line  18384,  in  main\r\n        commands[command].parseProc(opts)\r\n    File  &quot;mona.py&quot;,  line  11389,  in  procFindJMP\r\n        all_opcodes=findJMP(modulecriteria,criteria,args[&quot;r&quot;].lower().strip())\r\n    File  &quot;mona.py&quot;,  line  6003,  in  findJMP\r\n        modulestosearch  =  getModulesToQuery(modulecriteria)\r\n    File  &quot;mona.py&quot;,  line  5620,  in  getModulesToQuery\r\n        populateModuleInfo()\r\n    File  &quot;mona.py&quot;,  line  5731,  in  populateModuleInfo\r\n        allmodules=dbg.getAllModules()\r\n    File  &quot;C:\\Program  Files\\Debugging  Tools  for  Windows  (x64)\\windbglib.py&quot;,  line  1160,  in  getAllModules\r\n        getModulesFromPEB()\r\n    File  &quot;C:\\Program  Files\\Debugging  Tools  for  Windows  (x64)\\windbglib.py&quot;,  line  369,  in  getModulesFromPEB\r\n        thismod  =  pykd.loadUnicodeString(mod.BaseDllName).encode(&quot;utf8&quot;)\r\nMemoryException:  Memory  exception  at  0x0  target  virtual  address\r\n\r\n********************************************************************************\r\n0:000:x86&gt;  !py  mona  jmp  -r  ESP  -m  kernel32.dll\r\nHold  on...\r\n[+]  Command  used:\r\n!py  mona.py  jmp  -r  ESP  -m  kernel32.dll\r\n\r\n----------  Mona  command  started  on  2017-06-09  11:39:18  (v2.0,  rev  576)  ----------\r\n[+]  Processing  arguments  and  criteria\r\n        -  Pointer  access  level  :  X\r\n        -  Only  querying  modules  kernel32.dll\r\n[+]  Generating  module  info  table,  hang  on...\r\n        -  Processing  modules\r\n********************************************************************************\r\nTraceback  (most  recent  call  last):\r\n    File  &quot;mona.py&quot;,  line  18384,  in  main\r\n        commands[command].parseProc(opts)\r\n    File  &quot;mona.py&quot;,  line  11389,  in  procFindJMP\r\n        all_opcodes=findJMP(modulecriteria,criteria,args[&quot;r&quot;].lower().strip())\r\n    File  &quot;mona.py&quot;,  line  6003,  in  findJMP\r\n        modulestosearch  =  getModulesToQuery(modulecriteria)\r\n    File  &quot;mona.py&quot;,  line  5620,  in  getModulesToQuery\r\n        populateModuleInfo()\r\n    File  &quot;mona.py&quot;,  line  5731,  in  populateModuleInfo\r\n        allmodules=dbg.getAllModules()\r\n    File  &quot;C:\\Program  Files\\Debugging  Tools  for  Windows  (x64)\\windbglib.py&quot;,  line  1160,  in  getAllModules\r\n        getModulesFromPEB()\r\n    File  &quot;C:\\Program  Files\\Debugging  Tools  for  Windows  (x64)\\windbglib.py&quot;,  line  369,  in  getModulesFromPEB\r\n        thismod  =  pykd.loadUnicodeString(mod.BaseDllName).encode(&quot;utf8&quot;)\r\nMemoryException:  Memory  exception  at  0x0  target  virtual  address\r\n\r\n********************************************************************************\r\n\r\n\r\n\r\n\r\n !py mona pattern_create 100000\r\nHold on...\r\n[+] Command used:\r\n!py mona.py pattern_create 100000\r\n** You have asked to create a pattern > 20280 bytes, but with the current settings\r\nthe pattern generator can't create a pattern of 100000 bytes. As a result,\r\nthe pattern will be repeated for 79720 bytes until it reaches a length of 100000 bytes.\r\nIf you want a unique pattern larger than 20280 bytes, please either use the -extended option\r\nor extend one of the 3 charsets using options -c1, -c2 and/or -c3 **\r\n\r\nCreating cyclic pattern of 100000 bytes\r\nAa0Aa1Aa2Aa3Aa4Aa5Aa6Aa7Aa8Aa9......\r\n.........\r\n......\r\na0[+] Preparing output file 'pattern.txt'\r\n********************************************************************************\r\nTraceback (most recent call last):\r\n  File \"mona.py\", line 18384, in main\r\n    commands[command].parseProc(opts)\r\n  File \"mona.py\", line 11593, in procCreatePATTERN\r\n    patternfile = objpatternfile.reset()\r\n  File \"mona.py\", line 2448, in reset\r\n    thispid = dbg.getDebuggedPid()\r\n  File \"C:\\Program Files\\Debugging Tools for Windows (x64)\\windbglib.py\", line 877, in getDebuggedPid\r\n    pid = pykd.ptrDWord(teb+offset)\r\nMemoryException: Memory exception at 0x40 target virtual address\r\n\r\n********************************************************************************\r\n"},"comment":{"url":"https://api.github.com/repos/corelan/windbglib/issues/comments/450094937","html_url":"https://github.com/corelan/windbglib/issues/19#issuecomment-450094937","issue_url":"https://api.github.com/repos/corelan/windbglib/issues/19","id":450094937,"node_id":"MDEyOklzc3VlQ29tbWVudDQ1MDA5NDkzNw==","user":{"login":"corelanc0d3r","id":639369,"node_id":"MDQ6VXNlcjYzOTM2OQ==","avatar_url":"https://avatars3.githubusercontent.com/u/639369?v=4","gravatar_id":"","url":"https://api.github.com/users/corelanc0d3r","html_url":"https://github.com/corelanc0d3r","followers_url":"https://api.github.com/users/corelanc0d3r/followers","following_url":"https://api.github.com/users/corelanc0d3r/following{/other_user}","gists_url":"https://api.github.com/users/corelanc0d3r/gists{/gist_id}","starred_url":"https://api.github.com/users/corelanc0d3r/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/corelanc0d3r/subscriptions","organizations_url":"https://api.github.com/users/corelanc0d3r/orgs","repos_url":"https://api.github.com/users/corelanc0d3r/repos","events_url":"https://api.github.com/users/corelanc0d3r/events{/privacy}","received_events_url":"https://api.github.com/users/corelanc0d3r/received_events","type":"User","site_admin":false},"created_at":"2018-12-27T07:35:36Z","updated_at":"2018-12-27T07:35:36Z","author_association":"MEMBER","body":"feel free to reopen if needed"}}
{"actor":{"display_login":"corelanc0d3r"}}