We changed our privacy policy. Read more.

Questions tagged [immunity-debugger]

An OllyDbg 1.1 derivative made by Immunity Inc., that internally supports python scripting and shipped with many scripts to ease vulnerability and exploitation research.

Filter by
Sorted by
Tagged with
1
vote
0answers
40 views

Edit ASCII value in Assembler (using Immunity Debugger)

I am trying to edit ASCII String via Immunity Debugger: However when I right click to do binary edit and then I click ok, the MOV DWORD instruction is replaced with some random instruction which ...
1
vote
0answers
59 views

What are C2 & C3 characters in SLmail bad characters?

According to this site, there are 3 bad characters in SLmail v5.5 https://www.whitelist1.com/2016/11/xstack-overflow-1-exploiting-slmail.html To sum it up, there are 3 bad characters that being ...
1
vote
0answers
181 views

Immunity error BB010002

I am trying to make this exploit work and having some difficulty. So I skipped to a 'fixed' version of it from here and the only thing I changed was the shell code: https://github.com/cokebottle/oscp-...
1
vote
0answers
871 views

Immunity Debugger Unable to set Breakpoint

I have recently installed Immunity Debugger in order to do some dynamic analysis on some Malware however am getting the same 2 errors no matter what i try. The first error is that Immunity is 'Unable ...
1
vote
0answers
605 views

OllyDbg step over command not behaving exactly as the Immunity Debugger

I am taking Lena Reverse Engineering Tutorial and it uses OllyDbg debugger for its teaching. In the first chapter, he shows the file in OllyDbg debugger and steps over through it "step by step" until ...
1
vote
0answers
272 views

immunity debugger MSVCR90.dll R6034

I'm new to the science of reverse engineering. I recently downloaded immunity debugger 1.85 32bit Assembler-Level Debugger. My host machine is Windows 7 64 bit. I have python 2.7 installed as 32 bit ...
1
vote
0answers
623 views

Opening program via Ollydbg/Immunity in Win7 causes exception unless in XP Compatibility Mode

When opening the reverseme included with Lena's tutorials for debugging in either Immunity or Ollydbg an exception is produced within ntdll that results in termination of the process with code ...
0
votes
1answer
39 views

what means "ilegal use of registers"?

I read pe program using a Pe Reader to view all sections, the .text section starts is "0x0001000": What is in the pe program reader: And is this what i see on the debugguer :
0
votes
1answer
429 views

IDA Pro Address doesn't correlate to Immunity Debugger address

I'm trying to use immunity debugger to step through a confusing binary. When I open it in IDA Pro, I see certain addresses next to the instructions: .text:01001392 inc eax When I ...
0
votes
1answer
2k views

Unpacking and dumping executable from DLL

I'm trying to unpack and dump executable from a DLL packed file, I've loaded the DLL to Immunity Debugger using LOADDLL.exe. I think I've reached the OEP 0x3DADDD (the memory location of the unpacked ...
0
votes
0answers
116 views

immunity debugger crashes on start - I have python 2.7 & 3.7, and have the environment values set

I'm a student who is studying with Immunity Debugger. I've been using it for a while but it began to crash just today. I'm thinking it has got to do with my python configuration because I've been ...
0
votes
1answer
101 views

Empty Parameter an MessagerBox

I am trying to learn to reverse Engineering , i am very new and my English is very Poor... .I wanting to make this exercise , but can't it , because not receive the hWnd identified from the MessageBox ...
0
votes
1answer
1k views

Can't debug a service

I am working on Lab11-03 in "Practical Malware Analysis" book. The malware I am analyzing trojanized the file cisvc.exe which is the indexing service in Windows XP. After that the malware ...
-1
votes
1answer
122 views

Finding some specific adresses in an exe file

I'm an absolutely beginner in the reverse engineering field. I've an exe program and I should find : address of main function/address of function that validate user input/address of hardcoded password....

1
2