Skip to main content

Questions tagged [breakpoint]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
3 votes
1 answer
70 views

How can I set up a conditional breakpoint for the CreateFileW function for when a specific file/path is read in x64dbg?

I'm currently debugging a program using x64dbg, and I'm struggling to set up a conditional breakpoint on the CreateFileW function: HANDLE CreateFileW( [in] LPCWSTR lpFileName,...
MendelG's user avatar
  • 83
0 votes
1 answer
88 views

IDA breakpoint condition

How to set breakpoint condition that checks certain address value, for example: 0xD526C122 = FF. How can I make a counter that counts how many times breakpoint condition was met without actually ...
morkovni's user avatar
1 vote
1 answer
47 views

windbg conditional breakpoint equal always get 0

I want to set a conditional breakpoint on function argument at the entry of a function. Here is the value I want which is c0 a8 89 01. I want to break the function when that register holds this ...
anonymous bear's user avatar
0 votes
0 answers
129 views

Debug the DLL of an EXE using IDA Freeware

I'm trying to debug a DLL that is called in an executable file. I put the DLL in Ida Free and defined the breakpoints, and set 'Application' to the executable path. When I start the debug, the ...
Luiz's user avatar
  • 1
1 vote
1 answer
236 views

Where is the XOR operation?

I am doing TryHackMe REloaded room, level 3. When I got stuck I followed this tutorial which mentions an XOR by 7 operation being performed on a string, however I cannot see it anywhere. Where is it ...
securityauditor's user avatar
1 vote
0 answers
266 views

How can I set a breakpoint in x64dbg to be triggered when a certain message is logged?

I am debugging a certain program and I need to stop execution when a certain debug message is logged using OutputDebugStringA(). How can I set a breakpoint for this?
Ytagger's user avatar
  • 13
4 votes
0 answers
71 views

Mouse click breakpoint

Im just start to learn and stuck with problem: trying to set breakpoint on mouse click, but ollydbg log shows me only new thread created or terminated. I did as it is written in these threads: Thread ...
izparika's user avatar
3 votes
1 answer
203 views

GDB breakpoint crashes at a correct memory location

I'm trying to debug binaries of a a firmware running Linux with no ASLR, binaries are not compiled with PIE either so I have no issue getting the memory locations. So after including gdbserver in the ...
Soufiane Touil's user avatar
0 votes
1 answer
79 views

Paused at the right (?) breakpoint, what do I do next?

The output currently looks like this: 2022-09-10 00:09:03.955729-0500 REDACTED[51480:28773370] -openPDFWithPath: /Users/REDACTED/Library/Containers/com.REDACTED/Data/Library/Application Support/...
John O's user avatar
  • 199
2 votes
0 answers
69 views

​Why output is disabled in console when using int3?

​I am using NASM(2.15) assembler to generate code. But I am unable to figure out why it does not show output in the console(windows system) when using int3 - software breakpoint, it only shows output ...
Viktor's user avatar
  • 461
3 votes
1 answer
365 views

How to use software watchpoints in LLDB?

After trying to use watch command, LLDB said the device had 0 available hardware watchpoints. In GDB you can use set can-use-hw-watchpoints 0 How do you disable hardware watchpoints in LLDB?
Silent's user avatar
  • 164
1 vote
1 answer
181 views

Gdb hardware watchpoint error on android

After failing to find a solution to this I have started using Gdb and have encountered another error. Gdbfails to set hardware watchpoint when I'm remote debugging a rooted arm7-a target. It supports ...
Silent's user avatar
  • 164
1 vote
1 answer
315 views

breakpoint already hit 1 time

I'm following Erickson 2008 Hacking the art of exploitation. The program is very simple. #include <stdio.h> #include <string.h> int main() { char str_a[20]; strcpy(str_a, "Hello, ...
Michael Hearn's user avatar
1 vote
0 answers
31 views

Using rbreak without import functions

While debugging with GDB I want to break for each function and print the PC register. rbreak . define hook-stop i r $PC c end The problem is that is stop on functions that imported like printf ...
yfr24493AzzrggAcom's user avatar
1 vote
1 answer
129 views

Ollydbg - automatically add hardware breakpoint when step over

I put INT3 breakpoint and starting the program. The OllyDbg break at the breakpoint, but when I step over, the OllyDbg put a hardware breakpoint. (Yesterday not happened in OllyDbg, but today during ...
Jason's user avatar
  • 89
2 votes
1 answer
2k views

What is Hardware Breakpoint and when we need to use it?

In part 5 of the lena151 RE tutorial I saw the Hardware BP. The explanation he gave was very difficult for me to understand. Can anyone explain what is a hardware breakpoint and when we need to use it?...
Jason's user avatar
  • 89
1 vote
1 answer
965 views

Set lldb breakpoint relative to ASLR slide

I want to set a breakpoint at an offset within a file. I can do this fine if I launch the app, check where it is loaded with image list testapp and then add the offset of where in the binary I want ...
Jon's user avatar
  • 177
0 votes
1 answer
5k views

In x64dbg, how to set software breakpoint on specific memory address?

This is something I know how to do in Olly Debugger, and can't figure out how to do in x64dbg. In Olly Debugger, it's possible to set a hardware or software breakpoint, either on access or on write, ...
tomysshadow's user avatar
1 vote
2 answers
201 views

Debug registers (DRx) keep getting trampled when using with SetThreadContext

I'm trying to set hardware breakpoints from code by using Get/SetThreadContext and modifying DR0..3, DR7, but it only works if I do it repeatedly. Most of the time when I use Get after having used Set ...
Anton Knyazyev's user avatar
1 vote
1 answer
693 views

Set gdb breakpoint by address with gdb python

into GDB python I tried gdb.Breakpoint('0xaaaa') I got error Function 0xaaaa is not defided . Breakpoint 5(0xaaaa) pending and the program not break at this address. Why is that?
breakpoint's user avatar
2 votes
1 answer
2k views

How to let SIGTRAP get caught by sighandler in GDB?

I have a program that I am trying to reverse, which contains an int3 (0xCC) which emits a SIGTRAP signal, which is then handled by a sighandler defined in sigaction. The handler performs calculations ...
its-remmus's user avatar
2 votes
0 answers
731 views

Conditional breakpoint on register containing string catch everything

I am trying to setup a conditional breakpoint to catch a specific string ("Sessions") that will be on ESI register but it catches everything: I also tried with dereferenced register [ESI] ==...
E235's user avatar
  • 583
1 vote
1 answer
2k views

Calling/debugging calls to DLL via ollydbg or x64dbg

I have used dependency walker on a DLL of an old game from 2001. I have found a function which I want to be able to analyze. I see the name of the function and the entry point (at the end). How do I ...
Bronson Swags's user avatar
0 votes
1 answer
1k views

Can I force GDB breakpoints and disassemble?

Sorry English isn't my first language. I noticed something when setting breakpoints in GDB. It appears that they are ignored if symbols aren't loaded. I have found it weird how GDB behaves when there ...
LUser's user avatar
  • 793
2 votes
1 answer
2k views

x64dbg, breakpoint on write in memory with specific value

In x64dbg, we can set hardware breakpoint on write in memory dump but can we add more codition? Ex. Set breakpoin on write of value of 2F.
Rexkh's user avatar
  • 21
0 votes
1 answer
222 views

Trace back regularly used .data variable in IDA

I am reversing Cryptex.exe 1.0 from Eldad. There is unknown-data buffer address stored in edx which gets used as parameter for CryptHashData, which will hash 20 Bytes from there. Now I want to find ...
killertoge's user avatar
2 votes
1 answer
619 views

Windbg: "gu" command inside of a breakpoint causes warning

I'm trying to leverage "gu" command in a conditional breakpoint or as a "CommandString" in a regular breakpoint. For example let's consider break on a malloc() function when we want to see in logs ...
eXp's user avatar
  • 111
2 votes
1 answer
772 views

Anti-debug clearing hardware breakpoints

An application I am debugging somehow manages to clear my hardware breakpoints. I am using TitanHide and x64dbg. I am observing the following behaviour: When placing the first hw breakpoint, it is ...
Whosdatdev's user avatar
0 votes
1 answer
807 views

IDA Pro ignores condition in breakpoint

Look at the condition. It is supposed to break only when the R2 is 40, but it breaks in any call to this instruction. I'm using IDA Pro 7.2.181105, debugging with Remote GDB Debugger, an ARMv4T code. ...
Moonslate's user avatar
2 votes
1 answer
4k views

x64dbg: break when a register contains a value

Is there a way to break code execution when a register contains a particular value with x64dbg? I'm not talking about setting a conditional breakpoint at a specific location, but about watching the ...
Johannes Stricker's user avatar
2 votes
1 answer
1k views

How to navigate Disassembly view to the current instruction location?

I'm using x32dbg and I've set a hardware memory breakpoint. It triggers successfully for a specified module and the debugger pauses and a message on the bottom says: Hardware breakpoint (byte, read/...
KeyC0de's user avatar
  • 123
1 vote
2 answers
5k views

How to debug a DLL written in .NET/C#?

I want to reverse engineer an application written in C#. I would like to set a breakpoint at a function and observe the input passed to it during the normal course of the application's functioning.
Japjit Singh N.'s user avatar
1 vote
2 answers
1k views

Ollydbg: How to set a conditinal breakpoint for a register gets special value

I read this question about "set conditional break point on a register value" ; but its about setting a bp on special address! I want to set a bp when for example ECX == 12345678 , i can do this on ...
Moshtaba's user avatar
1 vote
0 answers
61 views

Breakpoints in InProc COM object .dll?

I have a very simple exe that just uses CoCreateInstance to load a COM dll. This dll contains 1 function. I know where it is, I know what it's called etc. I know where in the exe it calls it. But ...
FrankRizzo's user avatar
1 vote
0 answers
552 views

Process terminating when breakpoint reached

I want to set breakpoint on the recv function to replace the received packets. But, I can not put breakpoint on any instruction in the program, the process simply closes with code 4000001f. I also ...
artbotva's user avatar
1 vote
1 answer
692 views

Setting a conditional kernel breakpoint in WinDbg grinds the debuggee OS to a halt

My setup: Debugger: Win10 Pro, WinDbg Preview v.1.0.1904.18001 Debuggee: Win7 Pro (running in a VM using VMWare Workstation) I'm trying to follow the SendMessage call from the user space: Into the ...
c00000fd's user avatar
  • 1,711
7 votes
1 answer
2k views

function call trace with radare2 or break on all function call

I want to script with python using r2pipe. Is there a way that when debugging I can break on each call function, thus I can get the parameter? What's more, I won't jump into system library. Or is ...
SwordWorth's user avatar
1 vote
1 answer
543 views

Is there watchpoints in radare2?

Is there any way to put breakpoints in radare2 that trigger when an address is read/write? In GDB those are call watchpoints ('rwatch' or 'awatch") I got this from radare2 [0xB7F08810]> !dr? ...
Ricardo's user avatar
  • 501
4 votes
0 answers
369 views

Using GDB to trace guest OS inside a hypervisor, the whole running on Qemu - kvm

I use Gdb to trace the execution (breakpoint, single stepping, ...) of a hypervisor OS in Qemu and it works fine so far. qemu-system-x86_64 -enable-kvm -display sdl -cpu host -serial my: stdio -m ...
Mahouk's user avatar
  • 141
1 vote
1 answer
2k views

x64dbg how to set conditional breakpoint on WinAPI function

I am trying to solve a GUI based crackme. https://crackmes.one/crackme/5c68758633c5d4776a837cc4 so that I learn security. I want to set a conditional Break point on user32.CallWindowProcA. Microsoft ...
Dr Deo's user avatar
  • 123
1 vote
1 answer
555 views

GUARD_PAGE memory breakpoints with gdb?

I came across a question the other day on reddit: How can we use PAGE_GUARD-based memory breakpoints in GDB (not hardware breakpoints)? Ollydbg, x64dbg and IDA PRO all support these types of ...
bernd feinman's user avatar
1 vote
2 answers
1k views

Generate software breakpoint other than int3

Is it possible to generate a software breakpoint other than int3 to be catched by the debugger, like a division by zero for example? If so, I was wondering why debuggers don't support generating ...
Jorayen's user avatar
  • 185
3 votes
1 answer
11k views

How to print the value of register with Radare 2

I am trying to solve this ELF - Ptrace challenge. I use Radare 2. This is the commands I execute to print the assembly code. radare2 ch3.bin [0x080482f0]> aaa [[anal.jmptbl] Missing cjmp bb in ...
Anonymous's user avatar
  • 221
0 votes
1 answer
5k views

x64dbg - Conditional breakpoint based on function argument

How can I set a conditional breakpoint based on the argument of a function? I am trying to break on the windows function LoadLibraryExW: https://docs.microsoft.com/en-us/windows/desktop/api/...
user3238415's user avatar
1 vote
1 answer
2k views

How int3 looks like in C

This is assembly code that can catch debugger with int 3 : MOV ECX, ExceptionHandler MOV DWORD PTR FS:[0], ExceptionHandler INT3 ///there is debugger!!! ExceptionHandler: ////no ...
g319909.nwytg.coM's user avatar
1 vote
1 answer
212 views

rip adress not visible with dr command

I just finished this challenge. This is the content of main function : [0x08048a86]> pdf / (fcn) main 417 | main (int argc, char **argv, char **envp); | ; var int local_16h @ ebp-0x16 |...
Anonymous's user avatar
  • 221
3 votes
1 answer
209 views

Debug point not hit with radare2

I am doing this reverse engenering challenge. I executed theses commands to analyse the main function : radare2.exe ch15.exe aaa s main pdf This is the output of the pdf command : [0x004017b8]> ...
Anonymous's user avatar
  • 221
1 vote
1 answer
6k views

Impossible to execute a program with radare2 : TO DO continue

I am trying to crack a crackme. I already catch the flag because I seen the string variable which represants flag. I would like to catch the flag on an other way, I want to set a breakpoint when there ...
user avatar
2 votes
1 answer
309 views

Is there any way to export breakpoint with IDA Pro?

As the title describes, I'd like to export breakpoints in IDA Pro and load from another project. Is there such feature?
kirin's user avatar
  • 121
2 votes
1 answer
434 views

Breakpoint on memory access in ARM debugging

I'm using IDA Pro for ARM native debugging (with androidserver). I'd like to check when a memory address is read by code (what instruction and where). Hardware breakpoint is not possible. How can I do ...
Silvius's user avatar
  • 19