Skip to main content

Questions tagged [debuggers]

Debuggers allow the user to view and change the running state of a program.

38 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
5 votes
0 answers
394 views

Instruction counting anti-debug

I recently came across this anti-debug technique being used in the wild. In The Ultimate Anti-Debugging Reference, the author wrote in the "Instruction Counting" section A debugger will interfere ...
P. Private's user avatar
4 votes
0 answers
308 views

How to redirect stdin in OllyDbg?

When I use IDA, I can use stdin from the file as in bash. When I tried to do it in OllyDbg, it processed the parameters simply as a string. Can I redirect stdin in OllyDbg?
Alexander Goryushkin's user avatar
3 votes
0 answers
538 views

How to do live debugging of ARM64 binaries on macOS with M1/M2 chips?

I'm trying to figure out why NSSavePanel fails in my SwiftUI app. I tried every possible documentation, or asking on the Swift programming forums - to no avail. I'm originally a Windows programmer, ...
c00000fd's user avatar
  • 1,681
3 votes
0 answers
86 views

x32dbg version causes crash on breakpoint

i'm a newbie to this whole shindig, and have started with https://gamehacking.academy. i'm finding this fun, but am getting stuck here: when i try to apply a breakpoint using x32dbg, as in https://...
Axolotl Kumar's user avatar
3 votes
0 answers
710 views

Ghidra view stack frame values

I'm learning reverse engineering, and I'm using Ghidra's debugger to analyze a running program. I want to view the values that are on the stack for a function, but I can't figure out how to do this. I'...
Alex Q's user avatar
  • 131
3 votes
0 answers
54 views

IDA's debuggers disappeared

Using IDA 7 I've been debugging a program with remote GDB just fine. Today when I opened the database, most of the debuggers are missing from the list, including GDB. It's only when opening this ...
Tom Young's user avatar
3 votes
1 answer
1k views

Cannot open '/proc/.../maps': No such file or directory in radare2 debug mode

When I try to load a program to radare2 debug mode, most of the time I get the following error: $sudo r2 -d a.out Hello world!= attach 2851 2851 Cannot open '/proc/2851/maps': No such file or ...
Rafael's user avatar
  • 153
2 votes
0 answers
848 views

Recommended plugins for x64dbg

I was wondering, as professional reverse engineers - what would be your "must-have" plug ins? Please give a brief description and say how it helps you and possible drawbacks. The more you can ...
beginner's user avatar
2 votes
0 answers
742 views

Seeking front end for MinGW gdb debugger

We are unit testing with Vectorcast, which uses the MinGW tool chain on Windows. It launches the command line gdb, but some of the newer engineers are having problems getting to grips with something ...
Mawg's user avatar
  • 131
2 votes
0 answers
252 views

(iOS lldb) Unable to debug past a splash/loading screen

I'm trying to lldb debug this certain iOS application. Its behavior is that when I click the application, the splash/loading screen comes up, then the main activity. However, whenever I try to debug ...
Carol Ward's user avatar
2 votes
0 answers
324 views

How can I fix an unpacked binary which calls out-of-bounds memory?

I've unpacked a binary which was packed with PECompact v2.2 (according to Detect It Easy) and successfully rebuilt the IAT. The binary actually does run, but when I open it in IDA Pro debugger, it is ...
the_endian's user avatar
  • 1,870
2 votes
0 answers
2k views

Error: the file can't be loaded by debugger plupin IDA PRO 64 bit

I use IDA PRO 64bits on windows 10 64 bit, I want use it remote debug a file 64bit by linux. When I run linux_serverx64 in linux and connect then i error: the file can't be loaded by debugger plupin ...
QChí Nguyễn's user avatar
2 votes
1 answer
328 views

BinNavi Debugging Executable with Arguments

It is about debugging some executable by using Zynamics BinNavi 5.0. And there's no problem if I want to start debugging without any command line parameters (i.e. "my.exe"), but I cannot find a way to ...
Aleksandar Pesic's user avatar
1 vote
0 answers
64 views

Process stuck on the entry point

I'm trying to patch an old game (1998-ish) that runs on windows 95 and windows XP to make it compatible with windows 11. The current problem with it is that when running the exe file nothing seems to ...
Yair Derry's user avatar
1 vote
0 answers
73 views

debug native code and net code

I have a .net dll with a lot of calculations and formulas. From this dll, I want to set breakpoints to see the calculated results for a specific field. The main program is written in native code. So, ...
Mrplcmodbus's user avatar
1 vote
0 answers
584 views

x64dbg isn't running the program I'm looking at

I'm almost definitely being an idiot but I have opened up an .exe file in x64dbg and I can run the file just fine when looking at the assembly but it doesn't open a second window so I can see the ...
x02's user avatar
  • 11
1 vote
0 answers
2k views

In X64dbg, how can I script a string write to memory?

I find that I can write to memory as [addr] = value As given by the documentation at http://help.x64dbg.com/en/latest/introduction/Input.html And while I could work around my problem as dividing ...
Sharky's user avatar
  • 11
1 vote
0 answers
275 views

Issues with Symbols when running windbg on windows xp sp3

I have been trying to debug a crash using windbg on windows xp sp3. I have been getting the below error while trying to debug. I googled around and found the Microsoft no longer offers symbols exe as ...
sinpingsegfaults's user avatar
1 vote
0 answers
1k views

Ida permission error

I tried debugging an running a program via ida64 and it says permission denied please reopen with elevated permission. I am on a mac please tell me how to fix this
jojo osinga's user avatar
1 vote
0 answers
463 views

UTF8, UTF16 encoding string search

I want to search for a string written in Georgian from within x64dbg. It shows me spaces except them.. P.S I found this github repository but, I don't know how to install the plugin in the debugger.....
Nikoloz Chitashvili's user avatar
1 vote
0 answers
404 views

How to find function called by instantaneous event (like mouse press for exemple)

I'm sorry if my question isn't very clear, I have trouble phrasing it so please bear with me. I was playing around with Cheat Engine lately and found myself in a situation where I needed to find what ...
user29223's user avatar
1 vote
0 answers
118 views

IDA Pro - Remote debugging suse enterpris server 10 (glibc2_10 required)

I have a Suse enterprise server 10 on VMWare. I want to remote debug an application in this VM using IDA pro, I already tried these: Copied linux_server form IDApro into this VM and tried to run it, ...
Mahdi's user avatar
  • 11
1 vote
0 answers
992 views

Immunity Debugger Unable to set Breakpoint

I have recently installed Immunity Debugger in order to do some dynamic analysis on some Malware however am getting the same 2 errors no matter what i try. The first error is that Immunity is 'Unable ...
d ll's user avatar
  • 11
1 vote
0 answers
739 views

OllyDbg step over command not behaving exactly as the Immunity Debugger

I am taking Lena Reverse Engineering Tutorial and it uses OllyDbg debugger for its teaching. In the first chapter, he shows the file in OllyDbg debugger and steps over through it "step by step" until ...
ovrwngtvity's user avatar
1 vote
0 answers
942 views

Ignore Path and Extension in OllyDBG 2?

I have an exe on my desktop that i began debugging a while ago, so i have a lot of notes/breakpoints stored in the udd file. I now need to move that exe to a different directory but Olly sees it as a ...
R3MRUM's user avatar
  • 11
1 vote
0 answers
307 views

immunity debugger MSVCR90.dll R6034

I'm new to the science of reverse engineering. I recently downloaded immunity debugger 1.85 32bit Assembler-Level Debugger. My host machine is Windows 7 64 bit. I have python 2.7 installed as 32 bit ...
dcrearer's user avatar
  • 155
1 vote
0 answers
700 views

How to decrypt this file?

I have to decrypt a file that is used by an app built using VB5. The file itself contains some data that is decrypted when the app is run and the decrypted data is text data that is displayed in a ...
user3897's user avatar
0 votes
0 answers
80 views

Deobfuscating WPF obfuscated code

The project uses WPF : What should i do for XAML links de4dot supporting that ? I have been trying to deobfuscate an encrypted code for days but no matter what I did, I bypassed the debugger ...
Waltcher's user avatar
0 votes
0 answers
66 views

Decompile or analyse injected /usr/bin/cat

I'm trying to decompile or analyse an injected Linux executable binary file /usr/bin/cat ,and find the injected code as a readable. Need some tips as a beginner how to find the injection method if it'...
Dany Burgos's user avatar
0 votes
0 answers
491 views

Failed to attach: unable to connect to remote frida-server: closed

I'm trying to bypass Frida (Android) local port scanning detection, so I followed this guide. The sequence of commands I used are : (magic_man is alias for frida_server) adb root adb push magic_man /...
exploitr's user avatar
  • 101
0 votes
0 answers
64 views

Is there a debugger for the entire x86 architecture?

When learning about the topic that includes processes, threads and image files it helped immensely to use x86dbg. However, it only shows things from the "view" of a single process. I am ...
AirToTec's user avatar
0 votes
0 answers
261 views

x64dbg show some text in Chinese

While debugging some 32-bit file with x32dbg, some of the text appear in Chinese and I don't why. This happened after I moved to a new computer but both of them were Windows 10. In my old computer I ...
E235's user avatar
  • 583
0 votes
0 answers
2k views

x64dbg execute till next call OR return

I am using x64dbg and I want to know if there's any way to run the code till next Call statement? I know there is an "Execute till return" option, but I want to execute till next call ...
w4po's user avatar
  • 1
0 votes
0 answers
496 views

Using IDA pro 7.2 and android server breakpoints problem

i have been trying to use IDA to make a breakpoints on a 4 byte memory address to find out what arm op code writes to it . yet it fails to set a breakpoint and gives me this message " Xscale support ...
Mr. Zex's user avatar
0 votes
0 answers
121 views

Immunity Debuggger Inconsistent Results

Question for people using Immunity Debugger. Just started using Immunity Debugger, using 1.85 on Win 7 Pro. Doing some labs on vulnserver.exe and I am getting inconsistent results from Immunity ...
CG2000's user avatar
  • 1
0 votes
0 answers
404 views

OllyDbg - After restarting program, breakpoints lost

I am new to OllyDbg and I made a small (.NET Console App) program to test if I can crack the password. To set the break point where it writes Incorrect password. I need to run the program first. But ...
ProgRAMmer's user avatar
0 votes
0 answers
121 views

How to debug programs that load from another one? with radare2/gdb

I'm reversing engendering a plugin. This plugin is loaded into memory by the main program. I disassemble the plugin with radare2 but I don't know how to debug it. I try with gdb but same problem. I ...
Ricardo's user avatar
  • 501
0 votes
0 answers
204 views

How to access and modify data segment when doing hardware breakpoint crashes the application?

I want to modify the data segment in the x64_DBG, however, I don't know how to access it. lea r8,qword ptr ds:[7FEF0CA6AD8] In the above code, the address 7FEF0CA6AD8 is loaded in r8 register. I ...
FreeMind's user avatar
  • 639