OllyDbg 和 WinDbg 有什么区别？
我的简单理解是 OllyDbg 是一个用户模式调试器，您可以使用它来调试“普通”应用程序。 WinDbg 是一个内核模式调试器，您可以使用它来调试自身。
是这样吗？
My simple understanding is OllyDbg is a user mode debugger, which you could use to debug "normal" apps. WinDbg is a kernel mode debugger, which you could use to debug itself.
Is that right?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
WinDbg 是 Microsoft 开发的内核模式调试器，可用于调试运行它的操作系统本身。从技术上讲，这意味着它可以调试内核代码，而内核代码是在 Ring 0 中运行的特权代码。
OllyDbg 是一个用户模式调试器，只能调试用户模式可执行文件，例如 Exe。
请注意，Windbg 是一个功能强大的调试器，它也包含 Ollydbg 的功能。然而，它是一个命令行调试器，初学者一开始会发现很难处理。 Ollydbg 是一个 GUI 调试器，与 Visual Studio 调试器非常相似。
WinDbg is a kernel mode debugger developed by Microsoft which can be used to debug Operating System itself on which it is running. Technically, it means it can debug kernel code which is privileged code running in Ring 0.
OllyDbg is a user mode debugger which is capable of debugging only user mode executables such as Exe.
Note that Windbg is a powerful debugger which encompasses the functionality of Ollydbg as well. However, its a command line debugger which beginners find it difficult to dealt with in beginning. Ollydbg is a GUI debugger much similar to Visual Studio debuggers.
WinDbg 是一个 GUI 调试器，可用于调试内核模式和用户模式程序。它包含命令行调试器、kd（内核）和 ntsd（用户）的功能。 Windbg 可用于本地用户模式进程的实时调试以及内核和用户模式的远程调试。它还可以在事后调试故障转储。
WinDbg is a GUI debugger which can be used to debug both kernel-mode and usermode programs. It subsumes the functionality of the command-line debuggers, kd (kernel) and ntsd (user). Windbg can be used for live debugging of local usermode processes and remote debugging of kernel and usermode. It can also debug crashdumps after the fact.