-2

As a beginner i want to ask u some questions. Well , i'm not talking about all kinds of programs... i'm just asking for PE ( executables ) for windows -> (.exe) extension so , i don't know which tools should i use.

And what's the difference between :

IDA - Ollydbg - Immunity_Debugger - x64dbg

Thanks ^_^ ...

3

I'd suggest you to read Dennis Yurichev's book "Reverse Engineering for beginners". The answer to your specific question about tool difference is covered in chapter 7: IDA is a disassembler (a tool for static analysis of the code, intended to observe the code), and all the rest are debuggers (tools for dynamic analysis, intended to observe the code's behavior in action).

In general there are a lot of different tools depending on what exactly do you want to achieve:

| improve this answer | |
  • Plus every web page you can find on the PE format (some esoteric tidbits are quite rare). And be very confident in your assembler skills. And, for software for Windows, know enough about its APIs to be able to find what you are looking for on MSDN. – usr2564301 Jan 16 '18 at 23:18

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.