Reverse Engineering Stack Exchange
Reverse Engineering Stack Exchange

Questions tagged [immunity-debugger]

An OllyDbg 1.1 derivative made by Immunity Inc., that internally supports python scripting and shipped with many scripts to ease vulnerability and exploitation research.

67 questions
11
votes
2 answers

Immunity Debugger reset windows to default tiling

I have changed the windows from the original tiling layout in Immunity Debugger. I would like to restore the original tiling. I have tried restarting the program but the modified tiling remains. Is there a procedure for restoring the original…
Concklin F
  • 111
  • 1
  • 1
  • 3
6
votes
2 answers

Saving labels and comments in Immunity Debugger

I am using Immunity Dbg v1.85 (the latest version to date). I spent about an hour analyzing a piece of malware, while making comments and relabeling functions from something like X.00402AC0 to something more useful like X.password_checker. After…
AK-33
  • 61
  • 1
4
votes
2 answers

Changing the font in immunity debugger?

Does anyone know how to change the font size in immunity debugger? The font option under Options -> Appearance -> Font doesn't seem to change anything and just resets whenever you restart the program.
James
  • 43
  • 1
  • 3
3
votes
1 answer

Is it possible to name mona output files?

Is it possible to have mona.py save the output from a specific command to a specific file. So for example if I wanted to run multiple compare commands could I have them all saved to different output files? The way it works presently is that they…
john
  • 31
  • 1
2
votes
0 answers

Move focus to Immunity Debugger command line

As the title says, I want to know if there is a keyboard shortcut that upon pressing will allow me to write in the Immunity command line?
knowmore
  • 21
  • 2
1
vote
1 answer

Add a "dynamic breakpoint" in immunity debugger

Let's suppose an obfuscated binary program. This programs loads a payload in memory. This payload contains encrypted instructions. The program decrypts this payload and jumps to it. I want to break the program in immunity debugger when the CPU runs…
Bob5421
  • 797
  • 1
  • 9
  • 20
1
vote
1 answer

Immunity Debugger showing path instead of argv[1]

I'm trying to learn Buffer Overflow Here is the vulnerable code #include #include int main(int argc, char const *argv[]) { char buffer[64]; if(argc < 2){ printf("The number of argument is incorrect\n"); …
leila
  • 13
  • 2
1
vote
0 answers

What are C2 & C3 characters in SLmail bad characters?

According to this site, there are 3 bad characters in SLmail v5.5 https://www.whitelist1.com/2016/11/xstack-overflow-1-exploiting-slmail.html To sum it up, there are 3 bad characters that being interpreted literally by the compiler, their immediate…
Wolf
  • 111
  • 2
1
vote
1 answer

Immunity crashes on start

First off, I hope this is the right place to ask this question, if not please let me know where I should ask it. I have a Windows XP sp2 VM (fresh install with no updates), with Python and immunity installed. When I try and launch immunity, I see…
Jay
  • 111
  • 1
  • 3
0
votes
0 answers

Immunity debugger not finding the process after crashing the process and detaching it

I launch both immunity debugger and vulnserver as administrator. I attach vulnserver.exe, then I send my payload to overwrite the EIP to crash it. After that I exit both immunity debugger and vulnserver and reopen them as administrator. But when I…
raylyn
  • 1