Immunity Debugger

[Ni0x]

Мало кто знаком с этим отладчиком. Описание на англ.

Immunity Debugger is a powerful new way to write exploits, analyze malware, and reverse engineer binary files. It builds on a solid user interface with function graphing, the industry's first heap analysis tool built specifically for heap creation, and a large and well supported Python API for easy extensibility.

* A debugger with functionality designed specifically for the security industry
* Cuts exploit development time by 50%
* Simple, understandable interfaces
* Robust and powerful scripting language for automating intelligent debugging
* Lightweight and fast debugging to prevent corruption during complex analysis
* Connectivity to fuzzers and exploit development tools

Заточен в основном для поиска уязвимостей в программах, снабжен для этого специализированными плагинами. Внешне напоминает Olly. Очень порадовали плагины на питоне.
http://www.immunityinc.com/products-immdbg.shtml
Чтобы скачать, нужно пройти небольшую регистрацию.

[ProTeuS]

>>Мало кто знаком с этим отладчиком. Описание на англ.
https://forum.antichat.ru/thread46235.html

[0x0c0de]

Плагины и скрипты для Immunity Debugger

http://www.tuts4you.com/download.php?list.72

[ProTeuS]

Immunity Debugger v1.4

1.40 Build 0

New Features:

- Debugger Core:
o Added Silent Debugging Flag [accesible via Debugging options ALT-O or via immlib]
http://forum.immunityinc.com/index.php?topic=157.0
o Added Analysis Second Pass [Decoding Functions]
http://forum.immunityinc.com/index.php?topic=163.0

- Debugger GUI Core:
o Now you can add headers + other useful information on every Row
displayed at the Disasm Window. The information will be saved
as part of dump struct.
o Dettach option added to File Menu: Go to File -> Dettach [You need to be attached to
gray out Dettach]
http://forum.immunityinc.com/index.php?topic=158.0


- Debugger GUI:
o Right click on disasm line -> Add Header will add headers to your line



- Immunity Debugger API:
o Row Headers / Adding Lines to CPU
- Added imm.addHeader() and imm.getHeader() methods.
- imm.addLine behaves like addHeader()
- Added imm.removeHeader()/imm.removeLine() && imm.getHeader()/imm.getLine()
- Added imm.getTraceArgs()

o Added imm.goSilent() method.
o Added imm.undecorateName() method: Undecorate symbol names
http://forum.immunityinc.com/index.php?topic=159.0
o Added imm.Dettach() method: Dettach current process from debugger
o Added imm.prepareForNewProcess() method: Prepare Debugger core for a fresh start
o Updated BoB's UserDB.txt (http://peid.info/BobSoft/Downloads.html)

- PyCommands:
o Added namefunc.py : a simple samplescript that uses imm.addHeader to name
functions in module
o Added traceargs.py: find User supplied arguments into a given function.
o Added JMS's Mike & Boo script
o User Contributed PyCommands:
- BoB (http://PEiD.info/BobSoft/)
* scanpe.py (http://forum.immunityinc.com/index.php?topic=137.0)
* hidedebug.py (http://forum.immunityinc.com/index.php?topic=140.0)
* bpxep.py (http://forum.immunityinc.com/index.php?topic=138.0)


Bug Fixes:

- Fixed error when adding knowledge and changing python enviroments later.
(__dict__ not accesible in restricted mode error)

Download:


You can upgrade your current Immunity Debugger by going to Help/Update
or directly downloading the new installer from
http://debugger.immunityinc.com/register.html