Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Top Posters

Who's Online (0)

Powered by Vanilla. Made with Bootstrap.
OllyDbg Debugging Question
  • Xin
    Posts: 3,251
    Hey guys im trying to create an exploit and can get a program crash, however when i run the program attatched to Ollydbg, it doesnt crash, is this some settings i need to configure to stop like breakpoints or something>

    Trying to make this POC an exploit

    http://www.exploit-db.com/exploits/15669/
    Xin
  • I'd use GDB if I were you. Much better and It's been integrated on nix systems for like ever. PM me if you want I may be able to help with the exploit.
  • Xin
    Posts: 3,251
    Yeah i use GDB as well, but this is a windows file and its easier to use other things, anyway i found its just that particular software that didnt crash in the debugger as itried another one and it did which is strange
    Xin
  • said:


    Yeah i use GDB as well, but this is a windows file and its easier to use other things, anyway i found its just that particular software that didnt crash in the debugger as itried another one and it did which is strange


    That is strange. Maybe ollydbg has something like a anti-stack smashing function?
  • Xin
    Posts: 3,251
    said:


    said:


    Yeah i use GDB as well, but this is a windows file and its easier to use other things, anyway i found its just that particular software that didnt crash in the debugger as itried another one and it did which is strange


    That is strange. Maybe ollydbg has something like a anti-stack smashing function?


    Yeah oh well
    Xin
  • D4rk357
    Posts: 34
    It catches the exception before it happens as windbg does i guess
  • Xin
    Posts: 3,251
    Btw added link
    Xin
  • D4rk357
    Posts: 34
    said:


    Btw added link


    http://img405.imageshack.us/img405/830/96825796.jpg

    I checked it .. Even the SEH chain is not getting overwritten .. Very hard to exploit(if it is exploited ) .. Thats why 0v3r left it .. He is a pretty good buffer overflow exploit writer himself :)
  • nu11byte
    Posts: 53
    Try immunity debugger. I haven't tried it, but I prefer immunity dbg anyway.
  • McKittrick
    Posts: 194
    Immunity is nothing more than Olly with cosmetic changes
  • m0rph
    Posts: 332
    said:


    Try immunity debugger. I haven't tried it, but I prefer immunity dbg anyway.


    ...he did use Immunity...

    McKittrick, they have their differences
    while( !(succeed = try() ) );
  • McKittrick
    Posts: 194
    the page i saw once in someone describing it went something like "this is Ollydbg with just more eye candy. it is pretty much the exact same tool copied over"

    i ran both and saw no differences