Debugging a DLL Export With x64dbg [Patreon Unlocked]

Debugging a DLL Export With x64dbg [Patreon Unlocked]

OALabs

2 года назад

26,752 Просмотров

Ссылки и html тэги не поддерживаются


Комментарии:

@eusebiosksipolitos2524
@eusebiosksipolitos2524 - 24.09.2023 19:55

Cool...

Ответить
@BGroothedde
@BGroothedde - 02.09.2023 21:52

What happens if the exported symbol expects parameters or uses a different calling convention? Great video, thanks!

EDIT I see the parameter solution in the comments, however the conv still has me wondering

Ответить
@sushmithavetri5198
@sushmithavetri5198 - 27.07.2023 09:00

Very useful and informative. Thank you

Ответить
@bloodyink3423
@bloodyink3423 - 26.07.2023 18:58

In order to avoid calculating rva you May strip relocs from pe file for example via cff Explorer.

Ответить
@polarrbtw
@polarrbtw - 14.07.2023 00:24

I dont have any exports in PE Bear

Ответить
@jahwni
@jahwni - 12.04.2023 10:49

This is awesome, thanks!

Ответить
@jasonrobertcheney
@jasonrobertcheney - 09.07.2022 21:24

Great video for patreon, without unlocking them all is it possible to get a list of videos available to the Patreon? Thx in adv.

Ответить
@rpstar2023
@rpstar2023 - 09.02.2022 19:50

Great video. Very well explained. Thank you.

Ответить
@xN4VYS34Lx
@xN4VYS34Lx - 20.01.2022 09:10

You help so much man.

Ответить
@warsang
@warsang - 06.01.2022 17:09

As always, great video! Clear, well explained useful tips and tricks :) Is it also possible if you have a different ordinal address between Xdbg and IDA to rebase the program from IDA directly or am I missing something?

Ответить
@typedeaf
@typedeaf - 02.12.2021 02:47

If the function expected parameters, would you just pass those param when you invote the DLL, as if they were for dllmain?

Ответить
@orgozlan323
@orgozlan323 - 04.10.2021 21:34

Amazing, Thank you !

Ответить