Questions tagged [immunity-debugger]
An OllyDbg 1.1 derivative made by Immunity Inc., that internally supports python scripting and shipped with many scripts to ease vulnerability and exploitation research.
66
questions
4
votes
2
answers
2k
views
Manipulate EIP in Immunity Debugger
I just was playing around with Windbg, debugging some application.
At some point I had to manipulate EIP which was pretty easy in Windbg. But then once I switched back to Immunity, I could not figure ...
- 443
2
votes
3
answers
2k
views
Find the instruction matching an opcode
I have two bytes '\x74\x06' and I want a list of all instructions that start with this opcode.
What tools would you use for this? I am trying to do it with Immunity Debugger but so far no luck. The ...
- 71
1
vote
2
answers
509
views
Passing an environment to debugged program in Olly/Immunity
I am debugging a program that reads an environment variable. So far, I could not find how to launch it in Immunity/Olly with a custom environment.
Anybody know how this can be done?
- 71
9
votes
2
answers
5k
views
Where is ntdll.dll?
I am trying to get the base address of ntdll.dll over the PEB. So, what I did was to dump the PEB (d fs:[30]). Then, I tried to get to PEB_LDR_DATA over the offset 0xC. Over the offset 0x1C of ...
- 443
3
votes
2
answers
3k
views
Dump TEB/PEB in immunitydbg
I am trying to learn actually how to get to the PEB inside of TEB. I have tried this with windbg but could not manage to dump the PEB with stuff like:
!peb
or
dt nt!_PEB_LDR_DATA
And others. But, ...
- 443
3
votes
1
answer
1k
views
How to search for intermodular calls in WinDBG
In Olly/Immunity Debugger, I can search for "All intermodular calls". Is there a way to do this using WinDBG?
Thanks
- 31
4
votes
1
answer
1k
views
Runtime memory reading with injection
I'm reversing an application written in C. I have a certain function that I want to log runtime, without pausing/stopping the application.
My desired values of that function are:
[ESP + 4] which ...
- 2,038
6
votes
0
answers
696
views
Shotcuts in immunity debugger
Recently I started using Immunity Debugger instead of Olly where I got really got used to my custom keybidings. I could not seem to find an option to configure shortcuts/keybindings in immunity ...
- 2,038
4
votes
1
answer
2k
views
How do I trace instructions in an Immunity Debugger PyCommand?
This sounds like a very simple thing to accomplish but I can't seem to get it working.
I'd like to run a part of a program in ImmDbg instruction by instruction and keep track of some actions that it ...
- 41
3
votes
1
answer
1k
views
Loading a Driver in Immunity
It sounds strange and I realize that you usually use WinDbg to debug drivers, but I was reading up on Gray Hat Python and it states:
To test this out, try loading the driver C:\WINDOWS\System32\...
- 131
8
votes
1
answer
1k
views
Reversing Patches (Binary Diffing)
Does any of you know of a recent tool to bindiff using ImmunityDebugger?
I know about BinDiff by Zynamics and PatchDiff for IDA. But I really want a tool like this in ImmDBG. I also know about Radare'...
- 2,321
3
votes
3
answers
6k
views
Check DEP , ASLR and SafeSEH enabled or not , immlib
How to check if DEP, ASLR and SafeSEH defense mechanism are enabled or not in a program using immlib library of Python in Immunity Debugger ?
Actually I am looking for small code snippet for each.
- 265
2
votes
1
answer
294
views
Server-side bind() function, immlib
How do I get IP address and port number out of bind function in Server application. Can it be achieved with hooks like bphook in immunity debugger?
My problem is that I don't know how to unpack ...
- 126
2
votes
1
answer
778
views
Use of FastLogHook function in immlib?
I am a newbie in python programming for Debugging . I wrote a code for using the function FastLogHook() in immlib but i am not able to figure out the exact problem with my code as it is not working :(
...
- 265
5
votes
1
answer
2k
views
How to use fastloghook in immunity debugger
How does fastloghook work in immunity debugger pycommand section? i cant figure it out. Everything i try does not work and i know this code is a mess. I seriously dont understand fastloghook which ...
- 126
11
votes
3
answers
15k
views
How can I prevent Immunity Debugger / OllyDbg from breaking on attach?
When I attach OllyDbg or ImmunityDebugger to a process, it automatically breaks execution. I'm attaching to a user-mode service running as SYSTEM and only need to catch exceptions, so this is not ...
- 1,252