0

Question for people using Immunity Debugger.

Just started using Immunity Debugger, using 1.85 on Win 7 Pro.

Doing some labs on vulnserver.exe and I am getting inconsistent results from Immunity Debugger. I will attach vulnserver.exe, select run in IB and execute a script to crash vulnserver to analyze the output. Detach & restart vulnserver.exe, then attach again and run the same script. I get two different results in the output.

However, if I exit and restart Immunity Debugger between scripts, I get the correct output after running a script each time.

Is this standard behavior for Immunity Debugger? You have to exit and restart between each debugging capture?

I have re-installed IB twice and it continues to give these inconstant results.

TIA

2
  • what's IB? the results are different how exactly?
    – Igor Skochinsky
    Oct 29 '19 at 10:47
  • Sorry, IB = Immunity Debugger. If I keep Immunity Debugger open and attach & detach I will get various EIP values. However, if I open and close the Immunity Debugger application, I will get the proper (expected) result. It is as if it is perhaps caching information between each attach & detach? As long as I shut Immunity Debugger down and start it again, it works fine. It is just a little annoying to have to restart it over and over.
    – CG2000
    Oct 29 '19 at 11:39

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.