Re: Next step after telnet access?
Posted: Sat Aug 17, 2013 12:47 pm
breakpoints seem to not be handled correctly. I tried debugging with the armlinux_server binary that is shipped with IDA. It works better than gdb for me but still, breakpoints aren't handled correctly (and so isn't single stepping). I.e. the debugging client is not being notified about a breakpoint event. I think the same goes for gdb. One situation I absolutely do not understand is the following:
1. set a breakpoint on a particular TCP packet processing function
2. send data to TCP port
3. observe that nothing happens (altho breakpoint should have been triggered or at least tv should have processed the packet)
4. remove breakpoint
5. only then(!) TCP packet processing function is executed
Further anti-debugging code somewhere? integrity check?
edit: I have not customized memjack to patch functions other than adbg_CheckSystem() since I do not know what the other patches are for.
1. set a breakpoint on a particular TCP packet processing function
2. send data to TCP port
3. observe that nothing happens (altho breakpoint should have been triggered or at least tv should have processed the packet)
4. remove breakpoint
5. only then(!) TCP packet processing function is executed
Further anti-debugging code somewhere? integrity check?
edit: I have not customized memjack to patch functions other than adbg_CheckSystem() since I do not know what the other patches are for.