Using the Immunity Debugger to find executable modules

The Immunity Debugger is an application that helps us find out the behavior of an application at runtime. It also helps us to identify flaws, the value of registers, reverse engineer the application, and so on. Analyzing the application in the Immunity Debugger will not only help us understand the values contained in the various registers better, but will also tell us about a variety of information about the target application, such as the instruction where the crash took place and the executable modules linked to an executable file.

An executable can be loaded into the Immunity Debugger directly by selecting Open from the File menu. We can also attach a running app by attaching its process ...

Get Mastering Metasploit - Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.