Questions tagged [debuggers]
Debuggers allow the user to view and change the running state of a program.
210
questions
7
votes
3
answers
3k
views
Debugging NewExecutable binaries
I'm trying to debug a 16-bit Windows executable (format: New Executable). The problem is that all the standard tools (W32DASM, IDA, Olly) don't seem to support 16-bit debugging.
Can you suggest any ...
8
votes
1
answer
8k
views
WinDbg fails to connect to IDA Pro debugger server
Environment:
Host: Win7 SP1 x64: VMWare Workstation 9.02, VirtualKD, IDA Pro 6.4.13 (x64) and WinDbg
Guest: Win7 SP1 x64
I have VirtualKD setup correctly in my guest and host.
I say this because ...
11
votes
3
answers
15k
views
How can I prevent Immunity Debugger / OllyDbg from breaking on attach?
When I attach OllyDbg or ImmunityDebugger to a process, it automatically breaks execution. I'm attaching to a user-mode service running as SYSTEM and only need to catch exceptions, so this is not ...
7
votes
1
answer
435
views
How can I check I've moved outside the stack without triggering a protection fault?
I'm adding a feature to my Linux debugger (I'm using Ptrace to manipulate the traced process as well as libbfd/libopcodes) to unwind the stack and determine if discrepancies exist between each CALL's ...
32
votes
5
answers
57k
views
How do I acquire SoftICE?
I have seen mentions of SoftICE on various questions throughout this site. However, the Wikipedia article on SoftICE implies that the tool is abandoned. Searching google, I see many links claiming to ...
16
votes
1
answer
3k
views
Malware Hooking INT 1 and INT 3
I understand that on x86, INT 1 is used for single-stepping and INT 3 is used for setting breakpoints, and some other interrupt (usually 0x80 for Linux and 0x2E for Windows) used to be used for system ...
102
votes
20
answers
141k
views
Decent GUI for GDB
Learning the GDB commands is on my bucket-list, but in the meantime is there a graphical debugger for *nix platforms that accepts Windbg commands, and has similar functionality? For example, the ...
7
votes
1
answer
132
views
Which format/tool to store 'basic' informations?
It's really a productivity bottleneck when various analysis tools can't share information.
What's an efficient way to store symbols+comments+structures, so that they can be easily imported into other ...
9
votes
1
answer
666
views
How does GDB's process recording work?
A curious and useful feature of GDB is process recording, allowing an analyst to step forwards and backwards through execution, writing a continuous log of the changes to program state that allow for ...
10
votes
2
answers
802
views
How can I analyze a program that uses a JIT compiled code?
A lot of code I encounter today has a considerable amount of code generated at runtime, making analysis extremely laborious and time consuming.
Is there any way I can create symbolic names for the ...