Skip to main content

All Questions

1 vote
1 answer
206 views

How to create an executable that keeps the same virtual address on different runs

I want to create an executable that keeps the same virtual address during different execution runs. This is definitely possible because I've seen these files in CTFs(Capture the flag) where the ...
rderik's user avatar
  • 113
8 votes
1 answer
416 views

How to detect internal and shared libraries used in an executable file?

Problem: We want to be able to tell with some certainty that specific versions of internal libraries are being used by a program. For example, if a software uses old, deprecated libraries internally. ...
learnerX's user avatar
  • 233
1 vote
2 answers
980 views

identify packer compression or encryption algorithm

I do have an executable packed file. I want to detect compression or encryption algorithm dynamic and static ways separatly; of course without signature base way. How can I detect compression or ...
Alireza Jafari Fard's user avatar
2 votes
0 answers
57 views

What are possible ways to dynamically analyze windows service? [duplicate]

I am working executable, which is meant to be loaded as windows service. I have statically determine certain breakpoints that I'd like it to break upon execution. Is there any particular way to ...
PSS's user avatar
  • 3,088
11 votes
2 answers
2k views

Debugging EXE with TLS

How do I debug an executable that uses TLS callbacks? It's my understanding that these run before my debugger will attach.
mrduclaw's user avatar
  • 4,076