What is the best approach when debugging a multithreaded program that is yet to be encrypted? Where is the best place to put Breakpoints using Ollydbg?
1
-
It depends what you want to do, if you want to catch the decryption procedure - well, the best idea is probably to set the memory/hardware breakpoint on the encrypted data– morsiskoCommented Jul 5, 2020 at 16:17
Add a comment
|
1 Answer
If the program is using standard cryptography libraries then hooking the exported functions of that library might be a good starting point
