Tutorial by Examples

SOS (son of strike) is the official WinDbg extension from Microsoft for .NET. It gets installed as part of the .NET framework and thus is available by default. Like any extension, it can be loaded using .load x:\full\path\to\sos.dll, but there are easier ways. Depending on the version of .NET, the ...

SOSex is an extension to SOS, written by Steve Johnson, a Microsoft employee. He provides SOSex for download for free, but it's not open source. Typically, the extension is not available side by side to any other DLL, so it is usually loaded with .load x:\full\path\to\sosex.dll. Besides simplifyin...

PyKD is a WinDbg extension that enables you writing Python scripts. It's open source. Typically, the extension is not available side by side to any other DLL, so it is usually loaded with .load x:\full\path\to\pykd.pyd, where PYD is the extension for a python DLL, but you can rename it to DLL if yo...

NetExt is an extension for .NET which provides LINQ-like queries for objects on the heap (!wselect, !wfrom) display capabilities for special objects like dictionaries and hash tables (!wdict, !whash) ASP.NET / HTTP related commands (!wcookie, !wruntime, !whttp) several other network related co...

An incomplete list of WinDbg extensions that are not installed with WinDbg itself: ExtensionPurposeSOS.NET (official Microsoft extension)SOSex.NET (extension for SOS)CoSOS.NET (extension for SOS)NetExt.NET (with focus on networking)PyKDPython scriptingPDEWindows native and store applications (stowe...

CoSOS (cousin of SOS) is an open source extension for WinDbg focusing on .NET memory fragmentation (!gcview) and threading issues (!wfo, !tn). Typically, the extension is not available side by side to any other DLL, so it is usually loaded with .load x:\full\path\to\cosos.dll. It requires that SOS ...