Questions tagged [debuggers]
Debuggers allow the user to view and change the running state of a program.
207
questions
0
votes
0
answers
200
views
How to access and modify data segment when doing hardware breakpoint crashes the application?
I want to modify the data segment in the x64_DBG, however, I don't know how to access it.
lea r8,qword ptr ds:[7FEF0CA6AD8]
In the above code, the address 7FEF0CA6AD8 is loaded in r8 register. I ...
- 629
0
votes
1
answer
1k
views
Anti-kernelmode functions (specifically zwquerysysteminformation) [closed]
I'm working on a program that has lots of checks, and I've decided to start by disabling their anti-kernel mode, as it'd surely be more easy to isolate than normal anti-debugging. After poking around ...
- 3
-1
votes
2
answers
4k
views
How can I use an x64 debugger to reroute a .NET application's logic?
I'd like to improve my reverse engineering skills, so I made this WPF application (targeting x64, of course):
MainWindow.xaml:
<Window x:Class="ApplicationTest.MainWindow"
xmlns="http://...
- 144
-1
votes
1
answer
139
views
Logging the Instruction Pointer Register
Is there a tool that logs the value the IP register of a specific process running?
I am trying to compare the instruction excution before and after a file modification.
-1
votes
2
answers
9k
views
Attaching Ida to a process
I am a little new to ida. So don't judge on the question I am about to ask but I am tired chasing my tail around. I am trying to attach ida to a running process but I get the following error messages:
...
- 1
-3
votes
2
answers
3k
views
Anti-debug techniques for MS-Windows?
Is there any anti-debugger tricks used by malware other than interrupt INT 0x2D ? And, how do they work ? Working examples would be really nice !
- 135
-4
votes
1
answer
5k
views
Set a breakpoint before WriteFile operation in OllyDbg [closed]
In the process monitor, I see a WriteFile operation. How can I set a breakpoint and view everything about this operation in OllyDbg?
If this is not possible with OllyDbg, what other tools can I use?
- 317