Exetools

Exetools (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   Which debugger is best? (https://forum.exetools.com/showthread.php?t=13115)

djbobo 01-24-2011 19:39

if you are C programmer, I suggest try Boomerang and Hex-Rays Decompiler.
both give you C like text.

piccolo 01-26-2011 03:57

An odd one which is sometimes forgotten but which isnt at all bad is to use the open watcom compiler with its debugger. It is totally free and it used to be a payware thing... Just check the open watcom site for it..

Evilcry 01-31-2011 21:21

Debugger choice depends on complexity and particular context, basically OllyDbg2 cover a wide range of situations.

But for complex environment debugging WinDbg + scripting is "the best", both on ring3 and ring0 situations.

It's a bit unfriendly for a beginner, but I strongly suggest to learn also this debugger ;)

Easy drivers, can be debugged with Syser.

_C0d3r_ 02-01-2011 18:47

Also ImmunityDebugger is pretty good: basically is OllyDbg with some tweak such as a built-in pythonAPI, a function graphing tool and a heap analysis tool.

Ida pro is really powerfull, but not as immediate and easy to use as OllyDbg; moreover, OllyDbg's plugins are actually useful.

Is now really outdated, but also W32DASM used to be good.

Finally, as stated above, if you want to get a bit more "in" the OS, there's Syser for your comfort. Syser is SoftIce's little up-to-date brother (as they say "Softice is left. Syser will continue.").

amigo 03-08-2011 04:01

I am untreatable fan of Softice :). It is possible to run Softice under Vista also (it's better - after little exports modification in Vista kernel files), although it has only basic functionality and is not as stable as under systems it was designated for. But you can easy Ctrl-D at any time to view the ring0 code and you can trace through the code. The processes list, changing contextes - don't work :( So it's necessary to make old simple tricks as inserting INT3 in the start of the debugged file - to get into proper context to set breakpoints in debugged process. All it is reasonable only if you are interested in ring0 code tracing. For ring3 tracing you have a lot of other debuggers as listed above

cnbragon 03-10-2011 10:38

windbg is powerful on kernel debugging, ollydbg is powerful on application debugging and reverse engineering.

kamy 03-16-2011 21:11

one vote for Olly

LaDidi 04-29-2011 20:03

OllyDbg 1.1 is the best for RING-3 debugging
IDA is a good assistant...

Git 04-29-2011 20:22

The microsoft kernel debugger makes OD look like a toy.

Git

o_o 05-08-2011 19:29

I second OllyDbg for every day use.
WinDbg for r0 work.

greengo 05-14-2011 18:43

OllyDbg & Scripts & ImmunityDebugger

hosiminh 05-16-2011 20:16

Quote:

Originally Posted by mostafaebady (Post 71141)
Hi
ollydbg I think the best option is to crack software such facilities is very wide, which is the only surprise is that 64-bit programs and does not support NET.

You are right about x64 and wrong about .net
OD can run .net app (x32), although you wont see anything similar to ildasm or any other .net disassembler/debugger .
I was even able to fish a serial on some stupid app (forgot name).

RaptorFactor 05-17-2011 21:26

WinDbg is the most powerful debugger by far imo, however it's nowhere near as user-friendly as some of the alternatives.

It depends what you're trying to do tbh.

If you're debugging your own code which you wrote using VS, then I'd use the builtin VS debugger for that.
If you're debugging regular non-packed/obfuscated applications and you don't mind a bit of a learning curve, then I'd use WinDbg.
If you're debugging x64 native applications then I'd use WinDbg.
If you're debugging heavily packed and/or obfuscated targets (x86 native) then OllyDbg is probably the way to go (due to the large amount of helpful plugins to remove some of the more tedious work).
If you're doing kernel debugging then I'd use WinDbg.
etc

Others obviously have other preferences. I'd suggest just giving the most popular tools a try and finding what you're most comfortable with. It's all about finding and using the best tool for the job.

wx69wx 05-20-2011 18:35

i like od,but is there a update version for win7?

RaptorFactor 05-22-2011 20:19

Quote:

Originally Posted by wx69wx (Post 73008)
i like od,but is there a update version for win7?

Not sure what you mean, as I don't recall OllyDbg 1.x beign 'broken' on Windows 7 (though I haven't used it in a long time, so I'm unsure). However, OllyDbg 2.0 has been released as of this year, and I've successfully used it on my Windows 7 x64 machine.

http://www.ollydbg.de/version2.html


All times are GMT +8. The time now is 06:16.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX