Questions tagged [breakpoint]
The breakpoint tag has no usage guidance.
98
questions
1
vote
1
answer
38
views
windbg conditional breakpoint equal always get 0
I want to set a conditional breakpoint on function argument at the entry of a function. Here is the value I want which is c0 a8 89 01. I want to break the function when that register holds this ...
- 313
0
votes
0
answers
62
views
Debug the DLL of an EXE using IDA Freeware
I'm trying to debug a DLL that is called in an executable file. I put the DLL in Ida Free and defined the breakpoints, and set 'Application' to the executable path. When I start the debug, the ...
- 1
1
vote
1
answer
185
views
Where is the XOR operation?
I am doing TryHackMe REloaded room, level 3.
When I got stuck I followed this tutorial which mentions an XOR by 7 operation being performed on a string, however I cannot see it anywhere.
Where is it ...
- 185
1
vote
0
answers
150
views
How can I set a breakpoint in x64dbg to be triggered when a certain message is logged?
I am debugging a certain program and I need to stop execution when a certain debug message is logged using OutputDebugStringA(). How can I set a breakpoint for this?
- 13
4
votes
0
answers
56
views
Mouse click breakpoint
Im just start to learn and stuck with problem: trying to set breakpoint on mouse click, but ollydbg log shows me only new thread created or terminated.
I did as it is written in these threads:
Thread ...
- 61
3
votes
1
answer
161
views
GDB breakpoint crashes at a correct memory location
I'm trying to debug binaries of a a firmware running Linux with no ASLR, binaries are not compiled with PIE either so I have no issue getting the memory locations.
So after including gdbserver in the ...
0
votes
1
answer
68
views
Paused at the right (?) breakpoint, what do I do next?
The output currently looks like this:
2022-09-10 00:09:03.955729-0500 REDACTED[51480:28773370] -openPDFWithPath: /Users/REDACTED/Library/Containers/com.REDACTED/Data/Library/Application Support/...
- 199
2
votes
0
answers
65
views
Why output is disabled in console when using int3?
I am using NASM(2.15) assembler to generate code. But I am unable to figure out why it does not show output in the console(windows system) when using int3 - software breakpoint, it only shows output ...
- 459
3
votes
1
answer
248
views
How to use software watchpoints in LLDB?
After trying to use watch command, LLDB said the device had 0 available hardware watchpoints. In GDB you can use
set can-use-hw-watchpoints 0
How do you disable hardware watchpoints in LLDB?
- 164
1
vote
1
answer
141
views
Gdb hardware watchpoint error on android
After failing to find a solution to this I have started using Gdb and have encountered another error.
Gdbfails to set hardware watchpoint when I'm remote debugging a rooted arm7-a target. It supports ...
- 164
1
vote
1
answer
250
views
breakpoint already hit 1 time
I'm following Erickson 2008 Hacking the art of exploitation. The program is very simple.
#include <stdio.h>
#include <string.h>
int main() {
char str_a[20];
strcpy(str_a, "Hello, ...
- 113
1
vote
0
answers
31
views
Using rbreak without import functions
While debugging with GDB I want to break for each function and print the PC register.
rbreak .
define hook-stop
i r $PC
c
end
The problem is that is stop on functions that imported like printf ...
1
vote
1
answer
114
views
Ollydbg - automatically add hardware breakpoint when step over
I put INT3 breakpoint and starting the program. The OllyDbg break at the breakpoint, but when I step over, the OllyDbg put a hardware breakpoint. (Yesterday not happened in OllyDbg, but today during ...
- 89
2
votes
1
answer
1k
views
What is Hardware Breakpoint and when we need to use it?
In part 5 of the lena151 RE tutorial I saw the Hardware BP.
The explanation he gave was very difficult for me to understand.
Can anyone explain what is a hardware breakpoint and when we need to use it?...
- 89
1
vote
1
answer
747
views
Set lldb breakpoint relative to ASLR slide
I want to set a breakpoint at an offset within a file.
I can do this fine if I launch the app, check where it is loaded with image list testapp and then add the offset of where in the binary I want ...
- 167
0
votes
1
answer
4k
views
In x64dbg, how to set software breakpoint on specific memory address?
This is something I know how to do in Olly Debugger, and can't figure out how to do in x64dbg.
In Olly Debugger, it's possible to set a hardware or software breakpoint, either on access or on write, ...
- 137
1
vote
2
answers
173
views
Debug registers (DRx) keep getting trampled when using with SetThreadContext
I'm trying to set hardware breakpoints from code by using Get/SetThreadContext and modifying DR0..3, DR7, but it only works if I do it repeatedly. Most of the time when I use Get after having used Set ...
- 121
1
vote
1
answer
602
views
Set gdb breakpoint by address with gdb python
into GDB python I tried gdb.Breakpoint('0xaaaa')
I got error
Function 0xaaaa is not defided . Breakpoint 5(0xaaaa) pending
and the program not break at this address.
Why is that?
- 13
2
votes
1
answer
2k
views
How to let SIGTRAP get caught by sighandler in GDB?
I have a program that I am trying to reverse, which contains an int3 (0xCC) which emits a SIGTRAP signal, which is then handled by a sighandler defined in sigaction.
The handler performs calculations ...
- 51
2
votes
0
answers
602
views
Conditional breakpoint on register containing string catch everything
I am trying to setup a conditional breakpoint to catch a specific string ("Sessions") that will be on ESI register but it catches everything:
I also tried with dereferenced register [ESI] ==...
- 573
1
vote
1
answer
1k
views
Calling/debugging calls to DLL via ollydbg or x64dbg
I have used dependency walker on a DLL of an old game from 2001. I have found a function which I want to be able to analyze. I see the name of the function and the entry point (at the end).
How do I ...
0
votes
1
answer
1k
views
Can I force GDB breakpoints and disassemble?
Sorry English isn't my first language.
I noticed something when setting breakpoints in GDB. It appears that they are ignored if symbols aren't loaded.
I have found it weird how GDB behaves when there ...
- 773
2
votes
1
answer
2k
views
x64dbg, breakpoint on write in memory with specific value
In x64dbg, we can set hardware breakpoint on write in memory dump but can we add more codition?
Ex. Set breakpoin on write of value of 2F.
- 21
0
votes
1
answer
197
views
Trace back regularly used .data variable in IDA
I am reversing Cryptex.exe 1.0 from Eldad.
There is unknown-data buffer address stored in edx which gets used as parameter for CryptHashData, which will hash 20 Bytes from there. Now I want to find ...
- 115
2
votes
1
answer
546
views
Windbg: "gu" command inside of a breakpoint causes warning
I'm trying to leverage "gu" command in a conditional breakpoint or as a "CommandString" in a regular breakpoint. For example let's consider break on a malloc() function when we want to see in logs ...
- 111
2
votes
1
answer
689
views
Anti-debug clearing hardware breakpoints
An application I am debugging somehow manages to clear my hardware breakpoints. I am using TitanHide and x64dbg.
I am observing the following behaviour:
When placing the first hw breakpoint, it is ...
- 147
0
votes
1
answer
746
views
IDA Pro ignores condition in breakpoint
Look at the condition. It is supposed to break only when the R2 is 40, but it breaks in any call to this instruction. I'm using IDA Pro 7.2.181105, debugging with Remote GDB Debugger, an ARMv4T code. ...
2
votes
1
answer
3k
views
x64dbg: break when a register contains a value
Is there a way to break code execution when a register contains a particular value with x64dbg? I'm not talking about setting a conditional breakpoint at a specific location, but about watching the ...
2
votes
1
answer
809
views
How to navigate Disassembly view to the current instruction location?
I'm using x32dbg and I've set a hardware memory breakpoint. It triggers successfully for a specified module and the debugger pauses and a message on the bottom says:
Hardware breakpoint (byte, read/...
- 123
1
vote
2
answers
4k
views
How to debug a DLL written in .NET/C#?
I want to reverse engineer an application written in C#. I would like to set a breakpoint at a function and observe the input passed to it during the normal course of the application's functioning.
1
vote
2
answers
900
views
Ollydbg: How to set a conditinal breakpoint for a register gets special value
I read this question about "set conditional break point on a register value" ; but its about setting a bp on special address!
I want to set a bp when for example ECX == 12345678 , i can do this on ...
- 11
1
vote
0
answers
59
views
Breakpoints in InProc COM object .dll?
I have a very simple exe that just uses CoCreateInstance to load a COM dll. This dll contains 1 function. I know where it is, I know what it's called etc. I know where in the exe it calls it. But ...
- 56
1
vote
0
answers
493
views
Process terminating when breakpoint reached
I want to set breakpoint on the recv function to replace the received packets. But, I can not put breakpoint on any instruction in the program, the process simply closes with code 4000001f. I also ...
- 11
1
vote
1
answer
610
views
Setting a conditional kernel breakpoint in WinDbg grinds the debuggee OS to a halt
My setup:
Debugger: Win10 Pro, WinDbg Preview v.1.0.1904.18001
Debuggee: Win7 Pro (running in a VM using VMWare Workstation)
I'm trying to follow the SendMessage call from the user space:
Into the ...
- 1,639
6
votes
1
answer
1k
views
function call trace with radare2 or break on all function call
I want to script with python using r2pipe. Is there a way that when debugging I can break on each call function, thus I can get the parameter? What's more, I won't jump into system library.
Or is ...
- 61
1
vote
1
answer
513
views
Is there watchpoints in radare2?
Is there any way to put breakpoints in radare2 that trigger when an address is read/write?
In GDB those are call watchpoints ('rwatch' or 'awatch")
I got this from radare2
[0xB7F08810]> !dr?
...
- 476
4
votes
0
answers
356
views
Using GDB to trace guest OS inside a hypervisor, the whole running on Qemu - kvm
I use Gdb to trace the execution (breakpoint, single stepping, ...) of a hypervisor OS in Qemu and it works fine so far.
qemu-system-x86_64 -enable-kvm -display sdl -cpu host -serial my: stdio -m ...
- 141
1
vote
1
answer
2k
views
x64dbg how to set conditional breakpoint on WinAPI function
I am trying to solve a GUI based crackme. https://crackmes.one/crackme/5c68758633c5d4776a837cc4 so that I learn security. I want to set a conditional Break point on user32.CallWindowProcA. Microsoft ...
- 123
1
vote
1
answer
512
views
GUARD_PAGE memory breakpoints with gdb?
I came across a question the other day on reddit: How can we use PAGE_GUARD-based memory breakpoints in GDB (not hardware breakpoints)?
Ollydbg, x64dbg and IDA PRO all support these types of ...
- 463
1
vote
2
answers
996
views
Generate software breakpoint other than int3
Is it possible to generate a software breakpoint other than int3 to be catched by the debugger, like a division by zero for example?
If so, I was wondering why debuggers don't support generating ...
- 185
3
votes
1
answer
10k
views
How to print the value of register with Radare 2
I am trying to solve this ELF - Ptrace challenge. I use Radare 2. This is the commands I execute to print the assembly code.
radare2 ch3.bin
[0x080482f0]> aaa
[[anal.jmptbl] Missing cjmp bb in ...
- 221
0
votes
1
answer
4k
views
x64dbg - Conditional breakpoint based on function argument
How can I set a conditional breakpoint based on the argument of a function?
I am trying to break on the windows function LoadLibraryExW: https://docs.microsoft.com/en-us/windows/desktop/api/...
- 103
1
vote
1
answer
2k
views
How int3 looks like in C
This is assembly code that can catch debugger with int 3 :
MOV ECX, ExceptionHandler
MOV DWORD PTR FS:[0], ExceptionHandler
INT3
///there is debugger!!!
ExceptionHandler:
////no ...
1
vote
1
answer
207
views
rip adress not visible with dr command
I just finished this challenge. This is the content of main function :
[0x08048a86]> pdf
/ (fcn) main 417
| main (int argc, char **argv, char **envp);
| ; var int local_16h @ ebp-0x16
|...
- 221
3
votes
1
answer
198
views
Debug point not hit with radare2
I am doing this reverse engenering challenge. I executed theses commands to analyse the main function :
radare2.exe ch15.exe
aaa
s main
pdf
This is the output of the pdf command :
[0x004017b8]> ...
- 221
1
vote
1
answer
5k
views
Impossible to execute a program with radare2 : TO DO continue
I am trying to crack a crackme. I already catch the flag because I seen the string variable which represants flag. I would like to catch the flag on an other way, I want to set a breakpoint when there ...
user26834
2
votes
1
answer
291
views
Is there any way to export breakpoint with IDA Pro?
As the title describes, I'd like to export breakpoints in IDA Pro and load from another project. Is there such feature?
- 121
2
votes
1
answer
410
views
Breakpoint on memory access in ARM debugging
I'm using IDA Pro for ARM native debugging (with androidserver). I'd like to check when a memory address is read by code (what instruction and where). Hardware breakpoint is not possible. How can I do ...
- 19
1
vote
1
answer
2k
views
Understand hardware breakPoint option in ida
When I set a hardware breakpoint I see the following dialog:
I understand that Read/Write is meant to break into the debugger when the address that I choose for the breakpoint is read or written.
I ...
- 41
2
votes
2
answers
2k
views
How to set a Mouse Click BreakPoint in OllyDbg?
In the debugger program OllyDbg, How do I set a breakpoint when the left mouse button is pressed? It doesn't matter what it clicks on, so upon mouse click, the breakpoint stops the debugger.
- 135