I'm trying to figure out a workflow for analyzing Linux kernel modules.

I want to debug the modules and not just view the disassembly, so I came upon this guide for IDA pro:


however, when the debugger starts I land in the first instruction of the BIOS, and I can't find addresses in the kernel to put a breakpoint in, because the kernel is not loaded yet. single-stepping through the BIOS seems to take forever...

anyone knows how to skip to the BIOS? or alternatively recommend another method of debugging and investigating kernel modules?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.