VimalShekar
commented
5 years ago This is one way to do it today -- But you have to deal with the fact that the file is loaded at a random offset https://reversingonwindows.blogspot.com/2012/09/using-windbg-as-hex-editor.html
When i was a Software engineers - I loved using Windbg, it was my best buddy to debug code. As I moved to security research -I came across a lot of other debuggers - Olly, Immunity, x64dbg to name a few - but windbg remained my favorite... The Time travel tracing feature is unparalleled and too good to ignore and now that it has a JavaScript engine - I expect things to change and more Security Researchers will find windbg helpful.
Sometimes I wonder if windbg can also serve as a hex viewer/hex editor ? I mean you have a great infrastructure to display and edit memory already. Wouldn't it be great to load up a file in plain hex and load up a custom written pdbs and typecast memory and script it all up ?Possibilities are endless and I know it would be a game changing feature for a lot of security researchers out there.