Contents
How to use immunity debugger to debug an application?
There are generally two ways to use Immunity Debugger to debug an application: Make sure the application is running, open Immunity Debugger, and then use File -> Attach to attack the debugger to the running process. Open Immunity Debugger, and then use File -> Open to run the application.
How to debug an EXE with input parameters?
I am opening the executable, then do “File > Change Command Line”, then type something like “C:\\Program Files (x86)\\Name\\file.exe”, -flagname, flag, and even if I restart the program, it will crash as if parameters were unset. Any idea what am I doing wrong? Sign up for free to join this conversation on GitHub .
What is Mona plugin for immunity debugger?
Mona is a powerful plugin for Immunity Debugger that makes exploiting buffer overflows much easier.
How to crash an application using a buffer?
Crash the application using this buffer, and make sure that EIP is overwritten by B’s (\) and that the ESP register points to the start of the C’s (\). Generate a bytearray using mona, and exclude the null byte (\) by default. Note the location of the bytearray.bin file that is generated.
Which is the best immunity plugin for Python?
An advanced heap analysis plugin for Immunity Debugger Immunity Debugger python script for TLS parsing A taint tracer written via Immunity’s plugin system. Taint is tracked on registers and memory locations. Currently, ~40 commonly used instructions are implemented.
Why is the EIP important in buffer overflow?
EIP offset is the exact value that gives us the information that how many bytes will fill the buffer and overflow into the return address (EIP). Controlling the EIP is a very crucial part of buffer overflow attacks because EIP is the register that will ultimately point to our malicious code so that it could be executed.
How can I determine the offset of the EIP Register?
Using the buffer length which caused the crash, generate a unique buffer so we can determine the offset in the pattern which overwrites the EIP register, and the offset in the pattern to which other registers point. Create a pattern that is 400 bytes larger than the crash buffer, so that we can determine whether our shellcode can fit immediately.