0
0

Delete article

Deleted articles cannot be recovered.

Draft of this article would be also deleted.

Are you sure you want to delete this article?

【備忘録】gdbとGhidraの併用

Last updated at Posted at 2024-07-03

Ghidraで表示されるアドレスとgdbで表示されるアドレスは異なるので、アドレスの対応を調べる必要がある。例えば、GhidraではCMPは001011f6にある。unknown_016.png
また、00100000から始まっているので、unknown_017.png
gdbでも開始位置から11f6進んだところにCMPがあるはず。このコマンドを使うと

pwndbg> info proc mappings

unknown_018.png
0x555555554000から始まっていることがわかるので、0x5555555551f6にCMPがあるはず。unknown_019.png
あった

0
0
0

Register as a new user and use Qiita more conveniently

  1. You get articles that match your needs
  2. You can efficiently read back useful information
  3. You can use dark theme
What you can do with signing up
0
0

Delete article

Deleted articles cannot be recovered.

Draft of this article would be also deleted.

Are you sure you want to delete this article?