Friday, 15 June 2012

debugging - Disassembling a function with Immunity Debugger -



debugging - Disassembling a function with Immunity Debugger -

i hope i'm asking right way getting started trying larn exploit development. i've taken several tutorials , started off using gdb in linux, comfortable in. i'm starting utilize immunity debugger on windows , have question how view functions within gui.

in gdb utilize commands:

info functions disas main

and able see main function. compiled code unstripped simplicity.

how can recreate in immunity or ollydbg? want see list of functions can either examine them or set breakpoints on them. can't seem figure out!

thanks!

this can achieved programatically in immunitydebugger:

module = imm.getmodule('calc.exe') if not module.isanalysed(): module.analyse() functions = imm.getallfunctions(module.getbase()) # functions list of function addresses in calc.exe

there function:

imm.searchfunctionbyname('name_to_search')

but in experience, not reliable. ida pro improve way accomplish this. disassembly engine superior ollydbg. function offets ida , find them in ollydbg.

lastly, recommend windbg if doing exploit development. takes time larn it, more powerful , feature-rich ollydbg ( kernel debugging, instance).

debugging disassembling disassembly ollydbg

No comments:

Post a Comment