Disable ASLR For Easier Malware Debugging With x64dbg and IDA Pro
Update: 2019-06-11
Description
This tutorial covers how to disable ASLR in your debugging VM to speed up your debugging when using x64dbg and IDA Pro.We have a short blog post here:
https://oalabs.openanalysis.net/2019/06/12/disable-aslr-for-easier-malware-debugging/
The registry value you want to add is:
HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\MoveImages
Feedback, questions, and suggestions are always welcome : )
Sergei https://twitter.com/herrcore
Sean https://twitter.com/seanmw
As always check out our tools, tutorials, and more content over at https://www.openanalysis.net
#ReverseEngineering #Debugging #ASLR #x64dbg
https://oalabs.openanalysis.net/2019/06/12/disable-aslr-for-easier-malware-debugging/
The registry value you want to add is:
HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\MoveImages
Feedback, questions, and suggestions are always welcome : )
Sergei https://twitter.com/herrcore
Sean https://twitter.com/seanmw
As always check out our tools, tutorials, and more content over at https://www.openanalysis.net
#ReverseEngineering #Debugging #ASLR #x64dbg
Comments
In Channel























