Questions tagged [immunity-debugger]

An OllyDbg 1.1 derivative made by Immunity Inc., that internally supports python scripting and shipped with many scripts to ease vulnerability and exploitation research.

Filter by
Sorted by
Tagged with
1
vote
1answer
2k views

Windows debugger with ltrace functionality

I recently found the program: ltrace. And was wondering if it's possible to achieve the same using one of the gui debuggers for windows: ida, immunity, etc. The only thing I've found is a port of the ...
1
vote
1answer
876 views

How to efficiently debug Loops with OllyDbg/Immunity?

I'm currently reversing a function which looks like the following .text:0040383F 8D 04 BF lea eax, [edi+edi*4] .text:00403842 6A 14 push 20 .text:00403844 C1 E0 03 ...
1
vote
1answer
784 views

Cannot call function (properly) in C++

I am developing a DLL for the purpose of injecting it into a running process for a game. I've found the memory addresses to some key functions(via Immunity Debugger) and I am trying to call those ...
2
votes
3answers
2k views

Find the instruction matching an opcode

I have two bytes '\x74\x06' and I want a list of all instructions that start with this opcode. What tools would you use for this? I am trying to do it with Immunity Debugger but so far no luck. The ...
1
vote
2answers
471 views

Passing an environment to debugged program in Olly/Immunity

I am debugging a program that reads an environment variable. So far, I could not find how to launch it in Immunity/Olly with a custom environment. Anybody know how this can be done?
9
votes
2answers
4k views

Where is ntdll.dll?

I am trying to get the base address of ntdll.dll over the PEB. So, what I did was to dump the PEB (d fs:[30]). Then, I tried to get to PEB_LDR_DATA over the offset 0xC. Over the offset 0x1C of ...
3
votes
2answers
3k views

Dump TEB/PEB in immunitydbg

I am trying to learn actually how to get to the PEB inside of TEB. I have tried this with windbg but could not manage to dump the PEB with stuff like: !peb or dt nt!_PEB_LDR_DATA And others. But, ...
3
votes
1answer
1k views

How to search for intermodular calls in WinDBG

In Olly/Immunity Debugger, I can search for "All intermodular calls". Is there a way to do this using WinDBG? Thanks
4
votes
0answers
513 views

Shotcuts in immunity debugger

Recently I started using Immunity Debugger instead of Olly where I got really got used to my custom keybidings. I could not seem to find an option to configure shortcuts/keybindings in immunity ...
3
votes
3answers
5k views

Check DEP , ASLR and SafeSEH enabled or not , immlib

How to check if DEP, ASLR and SafeSEH defense mechanism are enabled or not in a program using immlib library of Python in Immunity Debugger ? Actually I am looking for small code snippet for each.
2
votes
1answer
280 views

Server-side bind() function, immlib

How do I get IP address and port number out of bind function in Server application. Can it be achieved with hooks like bphook in immunity debugger? My problem is that I don't know how to unpack ...
2
votes
1answer
751 views

Use of FastLogHook function in immlib?

I am a newbie in python programming for Debugging . I wrote a code for using the function FastLogHook() in immlib but i am not able to figure out the exact problem with my code as it is not working :( ...
5
votes
1answer
2k views

How to use fastloghook in immunity debugger

How does fastloghook work in immunity debugger pycommand section? i cant figure it out. Everything i try does not work and i know this code is a mess. I seriously dont understand fastloghook which ...
10
votes
3answers
14k views

How can I prevent Immunity Debugger / OllyDbg from breaking on attach?

When I attach OllyDbg or ImmunityDebugger to a process, it automatically breaks execution. I'm attaching to a user-mode service running as SYSTEM and only need to catch exceptions, so this is not ...

1
2