Questions tagged [debuggers]
Debuggers allow the user to view and change the running state of a program.
211
questions
4
votes
1
answer
367
views
Some programs have always same addressing and some different
Why do IDA and Ollydbg always open some programs with the main() function at the same address?
The address given by IDA is equal to that given by Ollydbg in runtime. However, when I wrote my own C ...
- 261
4
votes
1
answer
737
views
Where to start with iOS debugging?
Long story short, I have always had a jailbroken device, I have written and ported multiple tools to iOS, and have a fair knowledge of objective-C, ROP, and Linux exploitation. I have begun to take an ...
- 345
4
votes
1
answer
6k
views
How to find where the code is cycling - infinite loop?
Is there some way or technique to determine which code cycles in the program? Like if my application gets on an infinite loop and I would like to know exactly where it loops?
- 261
4
votes
1
answer
205
views
How to debug cfg80211.ko
I have an Linux embedded device that I want to debug the cfg80211.ko
I have full root SSH on that device.
How can I debug cfg80211.ko?
- 281
4
votes
1
answer
652
views
Does pwntools provide any Radare2 integration?
I want to use pwntools with Radare2, since this is my debugger of choice.
However, I can only find GDB-related library calls in pwntools' documentation (pwnlib.gdb).
Anyone with experience in ...
- 295
4
votes
1
answer
575
views
OS X Power PC RE tool (debugger/disassembler)
So I want to know is such tool exist without counting IDA PRO. And is there any GUI version of it if exist - because I really don't want to debugging with terminal. My OS X version is Snow Leopard. I ...
- 421
4
votes
0
answers
565
views
How to do live debugging of ARM64 binaries on macOS with M1/M2 chips?
I'm trying to figure out why NSSavePanel fails in my SwiftUI app. I tried every possible documentation, or asking on the Swift programming forums - to no avail.
I'm originally a Windows programmer, ...
- 1,721
4
votes
0
answers
310
views
How to redirect stdin in OllyDbg?
When I use IDA, I can use stdin from the file as in bash.
When I tried to do it in OllyDbg, it processed the parameters simply as a string.
Can I redirect stdin in OllyDbg?
3
votes
2
answers
3k
views
How to detect a debugger using some "time" checking strategies?
I have seen several anti-debug strategies, and I am wondering if there are some anti-debugger methods that can evaluate the program running time, thus detecting the exist of debugger.
- 2,485
3
votes
3
answers
3k
views
Find Address of Windows Kernel Functions
How can I find the address of a Windows kernel function?
In this case I'm trying to find CreateThread.
Can this be done from a debugger? Olly/Immunity?
- 275
3
votes
3
answers
6k
views
Check DEP , ASLR and SafeSEH enabled or not , immlib
How to check if DEP, ASLR and SafeSEH defense mechanism are enabled or not in a program using immlib library of Python in Immunity Debugger ?
Actually I am looking for small code snippet for each.
- 265
3
votes
2
answers
450
views
How to get all the references to function using PyDBG?
I'd like to get all the addresses in the binary that some function is called from using PyDbg. The address of the function will be supplied as a parameter.
Do I have actually to scan all the code, ...
- 3,062
3
votes
1
answer
2k
views
How to debug using OpenWatcom's debugger?
OpenWatcom's debugger just executes the binary instead of single-stepping through it, when I attempt the following steps:
File->Open, select executable
Run->Trace Into
This attempt is on ...
- 627
3
votes
1
answer
435
views
Disassembly - Why the CMP instruction is multiplying by 2 the value being compared
I'll get right to the point, I have a crack me program, that is a program with a password inside that needs to be found so that you can complete the challenge.
I easily found the cmp instruction ...
3
votes
1
answer
460
views
Why most debuggers don't auto recognize functions?
may anyone explain to me why most of the debuggers don't auto recognize functions?
This is a feature I only found in IDA and ollydbg, any other debugger I tried just don't analyze the functions as ...
- 315
3
votes
1
answer
460
views
Program crashes after resuming from breakpoint
After solving few crackmes I tried to take one step further and move on "real life" reversing tasks, targeting a known win7 program's password check feature.
The program in question obviously doesn't ...
- 33
3
votes
1
answer
1k
views
Interacting with command line programs in Hopper disassembler (Mac OS 10.9)
To test the debugging capabilities of Hopper, I wrote a simple C++ command line application, and tried to run it on the remote debugging server (with gdb). However, I learned after I failed to be able ...
- 474
3
votes
1
answer
686
views
How to view the content of a file before it is written?
I've got a process that writes to a file (database). In process monitor I see WriteFile. After this I see the file is about to be either written or updated (offset:length).
How can I reveal the ...
- 317
3
votes
1
answer
377
views
How to use software watchpoints in LLDB?
After trying to use watch command, LLDB said the device had 0 available hardware watchpoints. In GDB you can use
set can-use-hw-watchpoints 0
How do you disable hardware watchpoints in LLDB?
- 164
3
votes
1
answer
556
views
What do the first 16 bytes on the stack represent?
Whenever I attach a process in OllyDbg v1.10 on my Windows 7 64-bit machine, I notice that the first saved EBP on the stack doesn't point to the very base of the stack. Instead it points 16 bytes ...
- 828
3
votes
1
answer
4k
views
Find what writes to a dynamic memory address
I am looking at some code using x64dbg and found the assembly code that writes to a certain block of memory: dword ptr [rdx + 0x18]. And changing this space in the dump has an output that I am looking ...
- 31
3
votes
2
answers
309
views
Extracting data from a Program for external use
I am looking at basically capturing VU Meter data from an audio recording program, preferably the highest resolution possible, and inputting that data into a circuit to power LED's, respectively. I ...
- 31
3
votes
1
answer
588
views
Brother DCP-L2550DW Identify Toner Reset TN-760 or TN-730 (Continued)
I'm really continuing discussion on a previous question posed 2 years ago ("Identifying a toner chip and its communication protocol to re-program it").
I found that user to have the most ...
- 31
3
votes
1
answer
1k
views
How to search for intermodular calls in WinDBG
In Olly/Immunity Debugger, I can search for "All intermodular calls". Is there a way to do this using WinDBG?
Thanks
- 31
3
votes
1
answer
2k
views
How to extract information from dll compiled in gcc with debug symbols?
I recently read that GCC annotates the source-code into the debug symbols it produces, although I haven't found any examples on how to retrieve this.
If this is true, how can I view the data in the ...
- 177
3
votes
0
answers
88
views
x32dbg version causes crash on breakpoint
i'm a newbie to this whole shindig, and have started with https://gamehacking.academy. i'm finding this fun, but am getting stuck here: when i try to apply a breakpoint using x32dbg, as in https://...
3
votes
0
answers
735
views
Ghidra view stack frame values
I'm learning reverse engineering, and I'm using Ghidra's debugger to analyze a running program. I want to view the values that are on the stack for a function, but I can't figure out how to do this.
I'...
- 131
3
votes
0
answers
55
views
IDA's debuggers disappeared
Using IDA 7
I've been debugging a program with remote GDB just fine. Today when I opened the database, most of the debuggers are missing from the list, including GDB. It's only when opening this ...
- 31
3
votes
1
answer
5k
views
I'm unable to copy to executable (ollydebug)
I just finished up with cracking this crackme I found off the net and it's cracked and everything,but the problem is that in ollydebug I don't happen to see a option to copy the modified code and save ...
- 33
3
votes
0
answers
387
views
How to quickly/easily make an analysis (reverse engineering) of the code of unknown CMS or framework on PHP? [closed]
I would like to know what tools and techniques do you use for rapid analyze of unknown code CMS or framework. If more specifically that for the following tasks:
1. To locate the file (s) html ...
- 31
3
votes
0
answers
326
views
IDA Pro Symbian Debugger 'general OS related' Error [closed]
I am using remote symbian: c5-03 (Application TRK 3.2.7 for all S60 5.0 devices with production images). However, whenever I start the debugger, I get this error:
general OS-related error
What went ...
- 39
3
votes
1
answer
1k
views
Cannot open '/proc/.../maps': No such file or directory in radare2 debug mode
When I try to load a program to radare2 debug mode, most of the time I get the following error:
$sudo r2 -d a.out
Hello world!= attach 2851 2851
Cannot open '/proc/2851/maps': No such file or ...
- 153
2
votes
2
answers
3k
views
At which address on the stack or in memory is eax stored after the malloc call? [closed]
Here is my objdump -d snippet with the malloc call and surrounding code. This binary is stripped.
dbgLab.bin: file format elf32-i386
080483d0 <malloc@plt>:
80483d0: ff 25 04 a0 04 08 ...
user4466
2
votes
2
answers
2k
views
Debugging Virtual Machine using Windbg
I am trying to connect to a Windows XP Professional Virtual Machine running under Microsoft Virtual PC for debugging purposes.
I was following the MSDN kernel mode debugging article, however bcdedit ...
- 143
2
votes
3
answers
1k
views
IDA Pro debugger hit counter
I'm looking for a way to found out how many times instruction at specified address was executed before break point hit.
Is there some standard way? I cannot found this in its interface.
- 849
2
votes
3
answers
937
views
App prints debug strings but no OutputDebugString used
An application I'm reversing frequently outputs debug strings. Some of them could aid me in locating the code I'm looking for, but somehow, the app doesn't seem the be using OutputDebugString at all (...
- 595
2
votes
1
answer
4k
views
What does Hopper's Debugger Server do?
Hopper offers a GDB/LLDB Debugger Server companion to the standard program. I'm unclear on what this should / can be used for. When I run the debugger server on the same machine that I'm using I see ...
- 171
2
votes
1
answer
1k
views
How to set a breakpoint when a method is called using LLDB on OS X?
I'm trying to hit a breakpoint that I set in LLDB (CLI), but for whatever reason I'm not hitting my breakpoint. I am messing around with the stock Calculator.app on OS X, and am trying to call / hit ...
- 331
2
votes
2
answers
1k
views
How to debug Windows Media Player without attach mode?
When I try to debug Windows Media Player and play a movie this error message is shown:
Running this process under a debugger while using DRM content is not allowed.
But with drmdbg it can debug ...
- 317
2
votes
1
answer
1k
views
How to print eax value with Radare2?
I am solving a crack me challenge but I am stuck. The challenge executes several jne tests. The first test is the simpliest but I don't arrive to print the eax value to know the content of cmp ...
- 221
2
votes
1
answer
133
views
EDB /usr/bin/xterm
Currently, I am debugging a CLI application that requires a lot of big inputs.
Can I change the default /usr/bin/xterm in edb to something like /bin/bash?
- 151
2
votes
1
answer
8k
views
Access violation when reading [OLLYDEBUG]
Any time I try to crack a program I get this error in olly:
What causes this error? How can I fix this?
If anyone has suggestion or advice that would be great. I already tried pressing F9 but that ...
- 21
2
votes
1
answer
967
views
WinDbg - RVA of current instruction
Do someone know a windbg command to display the RVA of a certain instruction within it's module?
Right now, if I want to find the RVA of the current instruction, let's say, the RVA of that test eax, ...
- 337
2
votes
1
answer
754
views
Custom gdb output
Yesterday i noticed a nice output from dbg while going through a write up on the internet. As am new to dbg i googled a lot as i wanted to make dbg work similar for me. As seen below this ...
- 23
2
votes
2
answers
785
views
Is there a way to tell the IDA debugger to apply all patches from the database?
I'm in the process of "enhancing" an Android application that comes with a huge compiled .so file. After patching about 200 bytes in the database, i'd like to attach to the running app, apply all ...
- 13k
2
votes
1
answer
2k
views
Unpacking script
As malware are often packed, I'm looking to automate some of the unpacking tasks when that's possible.
In order to do that, I thought that OllyScript was an interesting way to write unpacking script ...
- 386
2
votes
1
answer
748
views
Can't debug process with IDA Windbg debugger: "Could not initialize WinDbg engine with error: %1 is not a valid Win32 application"
I tried to debug a C++ that I created but I am getting the following error:
I have this C:\Program Files (x86)\Windows Kits\10\Debuggers\x64 in the PATH environment variable (based on this answer), ...
- 583
2
votes
1
answer
980
views
GDB inserting breakpoint cause Segmentation Fault
I was trying to play around with gdb, and I'm especially interest in seeing how the Procedural Linkage Table(PLT) and the Global Offset Table (GOT) interact with each other. So I set some breakpoints ...
- 21
2
votes
1
answer
3k
views
Program prevents x64dbg from starting or kills it if it's already running. What to do?
I have the following problem with x64dbg. I am trying to debug a x64 PE program with x64dbg on Windows.
It looks like the program has some sort of anti-debug protection. I have the following behavior:
...
- 21
2
votes
1
answer
500
views
When reopening file lose all information in radare2
I have problem with my radare2, when I try to reopen file in debug mode (ood) my radare loses all informations about that file.
any help to avoid this?
- 85