Skip to main content

Questions tagged [debugging]

Process of analyzing live programs through software (e.g. ptrace) or hardware (e.g. JTAGs) devices.

164 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
7 votes
0 answers
344 views

running iOS debugserver on non-jailbroken devices

There are multiple tutorials on how to debug applications on jailbroken devices. These usually involves resigning debugserver, scp and running it from ssh with few tweaks to the entitlements and ...
3asm_'s user avatar
  • 506
6 votes
1 answer
606 views

Radare2 - How to save/restore metadata in debug session (BPs, flag, comments..)?

How can i save/reuse/preserve Radare2 metadata (BPs, comments, flags..) of a debug session for a new debug session? I restart the debugger alot and preserving environment would be very helpful. I ...
Maniaxx's user avatar
  • 185
5 votes
0 answers
622 views

Comparison of Windows Debuggers

I have some experience reverse engineering ELF files using tools like GDB, radare2, and Ghidra, but I am new to Windows debugging. There are quite a few different debuggers out there for Windows and ...
jinscoe123's user avatar
4 votes
0 answers
544 views

How to do live debugging of ARM64 binaries on macOS with M1/M2 chips?

I'm trying to figure out why NSSavePanel fails in my SwiftUI app. I tried every possible documentation, or asking on the Swift programming forums - to no avail. I'm originally a Windows programmer, ...
c00000fd's user avatar
  • 1,691
4 votes
0 answers
117 views

API Breakpoints not hitting while debugging a malware using x32dbg

I have been having a really strange issue which I have tried all ways to troubleshoot from my end but was not successful. I am going through a malware analysis course and following the debugging ...
Daksh Kapur's user avatar
4 votes
0 answers
591 views

Decoding the Apple vendor tag in the 802.11 beacon

Background Looking to answer Is there a way to detect if you're connected via a shared WiFi Hotspot? on apple.stackexchange.com lead me to How does iOS and OS X detect when a Wi-Fi network is a ...
thewade's user avatar
  • 41
4 votes
0 answers
388 views

Trying to identify Renesas custom SoC through CPU die inspection

Was wondering if someone could help me identify which series a Renesas Custom SoC belongs to within the super-H family by looking at optical images of the die circuitry layout of the device, and by ...
Dukes Mayonnaise's user avatar
4 votes
0 answers
308 views

How to redirect stdin in OllyDbg?

When I use IDA, I can use stdin from the file as in bash. When I tried to do it in OllyDbg, it processed the parameters simply as a string. Can I redirect stdin in OllyDbg?
Alexander Goryushkin's user avatar
4 votes
0 answers
367 views

Using GDB to trace guest OS inside a hypervisor, the whole running on Qemu - kvm

I use Gdb to trace the execution (breakpoint, single stepping, ...) of a hypervisor OS in Qemu and it works fine so far. qemu-system-x86_64 -enable-kvm -display sdl -cpu host -serial my: stdio -m ...
Mahouk's user avatar
  • 141
4 votes
0 answers
5k views

View static field values in dnSpy

I'm using dnSpy (version: 4.5.3) to debug a .NET binary. I can successfully view the values of Local variables in the Locals window but I cannot view the values of static fields. However, per this ...
Neon Flash's user avatar
3 votes
0 answers
186 views

What is the best emulator/environment for android debugging?

I know the question smells like I want a ready solution but I have been trying many things and after a lot of headaches, still I can't do what I want. There are fast emulators but they don't provide ...
shetal's user avatar
  • 51
3 votes
0 answers
78 views

How to unpack emotet with x64dbg and do dynamic analysis?

I am a beginner at malware analysis. I have been trying to analyze Emotet using X64DBG. I followed the steps below and succeeded once, but when I repeated the same steps, I failed. Can you tell me if ...
KOT's user avatar
  • 31
3 votes
0 answers
87 views

x32dbg version causes crash on breakpoint

i'm a newbie to this whole shindig, and have started with https://gamehacking.academy. i'm finding this fun, but am getting stuck here: when i try to apply a breakpoint using x32dbg, as in https://...
Axolotl Kumar's user avatar
3 votes
0 answers
246 views

PEStudio DLL analysis: flag in export section

I start to use PEStudio for DLL analysis; I understand (more or less) everything, except the "exports (flag)" section: What does it mean the X in the flag column? So, what is a/the flag? ...
Gianluca's user avatar
  • 131
3 votes
0 answers
38 views

How to view a QJsonValue while debuging exe with IDA

I'm step by step debugging a program in IDA. The program uses the Qt-toolkit. The function that I'm stepping through is handling a json document. For example here it is accessing the key workgroup and ...
user42984's user avatar
3 votes
0 answers
290 views

Display open handle ids in IDA Pro

Is there a way to display all the open handles of a process in IDA Pro while debugging it? I'm debugging a 64-bit binary on Windows OS with the win64_remotex64.exe as the debugging server. I want to ...
Neon Flash's user avatar
3 votes
0 answers
83 views

How to retrieve generically memory reads of an input and determine all relevant offsets?

I would like to record all memory read operations that are performed by an application on a given input file, to help infer which specific parts of an input are relevant for the specific execution ...
MmM's user avatar
  • 31
3 votes
1 answer
674 views

gdb - searching for pointers to a given memory region

Let's suppose there is a memory region that is m'mapped in memory, we need to find its address (which randomly changes, because of ASLR) by following a pointer path, basically, I'm trying to find a ...
Redouane Red's user avatar
3 votes
0 answers
537 views

Cannot debug some drivers with IDA

For some drivers I can use the following WinDBG command: bu driver!DriverEntry However there are some drivers that cannot be debugged this way. IDA output window displays the following error message:...
igor's user avatar
  • 31
3 votes
0 answers
167 views

Adobe Reader JIT Pages

I use Adobe Reader XI for a little research project. I know that Adobe use SpiderMonkey as its JS engine. When opening a .pdf file that contains JS, the JS code is compiled in runtime in parts (JIT)...
kvmN00bsky's user avatar
3 votes
0 answers
178 views

Anti-debug that can broke programm links (branches)?

I met the unknown (for me) method of anti-debugging today, while debugging in IDA Pro. This method delete fast all branches in file and the programm will look similar like on the image: ...
Boris's user avatar
  • 31
2 votes
1 answer
97 views

What is the gdb command equivalent of bp MODULE_NAME+0x12345678 in WinDBG?

What is the gdb command equivalent of bp MODULE_NAME+0x12345678 in WinDBG? I found this command useful to debug with ASLR (w/o disabling it).
alond22's user avatar
  • 113
2 votes
0 answers
67 views

Radare2: How to Create a Custom Scripted Panel?

TLDR: How do I get a panel in radare2 to correctly show the output of a radare2 command piped to an external script? e.g. afvd | python var_displayer.py This is my current view. Multiple panels, ...
Khalid's user avatar
  • 21
2 votes
0 answers
54 views

i want to know how to tracing a exe's http responses and log them

I want to "crack" this cheat loader protected by thermedia and I had someone do it before but lost contact with them and, now I would like to learn to do it myself. and they said a basic way ...
od8m's user avatar
  • 21
2 votes
0 answers
29 views

How we capture serial data on wirshark

I have capture this data but I am not understanding this data
Pooja's user avatar
  • 21
2 votes
0 answers
67 views

Problems trying to debug a running application on my PC

I've been reverse engineering an application out of necessity, meaning I'm a beginner on the subject. After days analyzing decompiled code from ILSpy I noticed that debugging the application would ...
Gabriel Minosso's user avatar
2 votes
0 answers
51 views

Manipulating Raw Stack Data without Local Variables and Function Parameters

Imagine a scenario where a program's stack data is corrupt and you need to diagnose the issue. How would you go about manipulating and analyzing the raw stack data without the use of any local ...
raheel0x01's user avatar
2 votes
0 answers
68 views

Buffer overflow gets() weird parsing

I'm attempting to do a buffer overflow with gets(). I've figured out how to write over the return address and I'm able to do so, however, I cannot write in the address I need because the 0x7F at the ...
user42774's user avatar
2 votes
0 answers
38 views

Finding a check in Chrome

Chrome doesn't allow switching on extensions which are not from the Chrome store. There is no this limitation in Chromium. So it is only in Chrome. It checks verified_contents.json (in which content ...
oleedd's user avatar
  • 163
2 votes
0 answers
55 views

Greenpacket OH-735 onboard header

I got myself a Greenpacket OH-735 LTE outdoor unit. On the outside it has a SIM slot and an ethernet interface. Access to the web interface is pretty restricted, not much to set and it is branded with ...
James's user avatar
  • 21
2 votes
0 answers
330 views

Find caller function by DLL loading in x64dbg

First of all I'm noob at debugging task and I'm try to self-study to learn how to debug exe using x64dbg. I have EXE file packed by themida. i bypassed themida packing using themida plugin in x64dbg....
Anuruddha wijesiri's user avatar
2 votes
0 answers
43 views

I am trying to develop a second version of SkiFree using OllyDbg. How can I add a new enemy or obstacle without the source code?

I am a programmer and reverse engineer. I am interested in reverse engineering SkiFree since it is free to use. However I have been wondering how to add a new enemy or obstacle since I do not have the ...
Picaboo3's user avatar
2 votes
0 answers
396 views

Strange exception thrown while debugging in Win10, but not Win7

I am disassembling a legacy 32-bit (x86) application using IDA Home (7.6) (for x86 disassembly) in a 64-bit Windows 10 environment running in a virtual machine (VMWare Fusion for Mac). The application ...
Code Doggo's user avatar
2 votes
0 answers
169 views

QEMU with GDB: Stepping Instruction causes Windows VM BSOD

I'm currently analyzing a piece of software inside a Windows 10 QEMU virtual machine which is connected to a remote GDB debugger. I have set breakpoints to audit what the application is doing. I have ...
Coburn64's user avatar
2 votes
0 answers
109 views

Ways of creating a new thread on Windows

I'd like to know about every possible way how a thread can be created in a process at the lowest possible level. There are loads of WinAPI-s to create a thread, but as far as I know all of them ends ...
original.roland's user avatar
2 votes
0 answers
295 views

x64dbg break when hex string is loaded

I'm trying to break execution when a string is loaded in memory. I can´t find the string by using the search for -> string references So I press Alt + M and press Ctrl + B to search my string ...
Enrique Alcázar Garzás's user avatar
2 votes
0 answers
855 views

Recommended plugins for x64dbg

I was wondering, as professional reverse engineers - what would be your "must-have" plug ins? Please give a brief description and say how it helps you and possible drawbacks. The more you can ...
beginner's user avatar
2 votes
0 answers
101 views

API Hiding Issue

I'm trying to analyze a malware which is hiding API names. When I open it with CFF Explorer, except a few API like GetProcAddress, nothing appears. Basically, I know how API hiding works. I set a ...
badbabo's user avatar
  • 21
2 votes
0 answers
1k views

Unable to attach java sources to APK being debugged in Android Studio -- Option not displayed

This article (https://developer.android.com/studio/debug/apk-debugger) explains how to debug third-party APKs and set breakpoints by attaching the java source (you can use decompiled code to get it ...
Chris's user avatar
  • 35
2 votes
0 answers
252 views

(iOS lldb) Unable to debug past a splash/loading screen

I'm trying to lldb debug this certain iOS application. Its behavior is that when I click the application, the splash/loading screen comes up, then the main activity. However, whenever I try to debug ...
Carol Ward's user avatar
2 votes
0 answers
132 views

Trace replayer won't load binary debug information

So I'm debugging a linux application with what I believe DWARF debug information on x86-64 host. Everything is working fine and as expected - the source files are loaded immediately on function ...
rec's user avatar
  • 475
2 votes
0 answers
2k views

Debugging a position independent executable ELF

I am trying to follow the write-up about hackercalc (a challenge for DEFCON 2015 quals). First, by loading the challenge into gdb, I observe that: (gdb) info files ... Entry point: 0xcf8 ... So I ...
Ta Thanh Dinh's user avatar
2 votes
0 answers
736 views

Debugging digitally signed executable

I'm having trouble debugging a win32 executable file under Windows 7. I've tried using ollyDbg and x64dbg: the former simply does nothing, while the latter complains with an "Error starting process (...
Damian's user avatar
  • 21
2 votes
0 answers
5k views

A debugger has been found running in your system

For education reasons I just came into reverse engineering, so I found an app that I want to reverse. Basically it has a basic auth system (login and pass). I sniffed traffic with Wireshark and found ...
Not even close's user avatar
2 votes
0 answers
223 views

Javascript equivalent of JEB

In case you already know, there is a full-feature decompiler for Java/Android called JEB (https://www.pnfsoftware.com/) Some of the most important features include the ability to rename identifiers ...
Nederealm's user avatar
  • 277
2 votes
0 answers
501 views

How allocate memory on Kernel mode by windbg?

How allocate memory on Kernel mode by windbg? I use .dvalloc on user mode but not working on kernel mode thanks.
forbiddenhi's user avatar
2 votes
0 answers
2k views

Remotely debugging Android native ARM library running in Bluestacks

I want to debug a native library loaded by JNI on Android. I have set up the debugging environment to debug native code running on Bluestacks. I got gdbserver installed on rooted Bluestacks, running ...
blackd0t's user avatar
  • 121
2 votes
0 answers
2k views

How to set-up GDB debugging in IDA Pro on Linux via Wine?

I tried running on linux via root terminal: gdbserver --multi localhost:23947 And then at IDA Pro at Wine I use Remote GDB debugger with my local ip and port: However when I start debugging I think ...
sasho648's user avatar
  • 421
2 votes
0 answers
611 views

Trying to run MIPS ELF with a cross toolchain but sigbus error

I finally successfuly installed a cross toolchain from this site in order to run and debug a mips elf on my x86-64 . I only have the elf file. I can disassemble it but when i try to run it with : ...
creuchmeuch's user avatar
2 votes
0 answers
2k views

Bypassing Enigma loader

Currently I'm trying to get past Enigma's loader, which asks you for a name & key, as an excercise. I have very little progress, as I haven't worked too much with packers. What I did was ...
rev's user avatar
  • 1,293