A software development team is concerned that a new product's 64-bit Windows binaries can be deconstructed to the underlying code. Which of the following tools can a penetration tester utilize to…

The correct answer is B. OllyDbg. OllyDbg is a Windows-based x86/x64 debugger and disassembler that allows a penetration tester to reverse-engineer Windows PE (Portable Executable) binaries. It can disassemble compiled code, inspect memory, trace execution, and reveal the underlying logic of a binary - which is…

Tools and Code Analysis

Question

A software development team is concerned that a new product's 64-bit Windows binaries can be deconstructed to the underlying code. Which of the following tools can a penetration tester utilize to help the team gauge what an attacker might see in the binaries?

Options

AImmunity Debugger
BOllyDbg
CGDB
DDrozer

How the community answered

(31 responses)

B
90% (28)
C
3% (1)
D
6% (2)

Explanation

OllyDbg is a Windows-based x86/x64 debugger and disassembler that allows a penetration tester to reverse-engineer Windows PE (Portable Executable) binaries. It can disassemble compiled code, inspect memory, trace execution, and reveal the underlying logic of a binary - which is exactly what the development team needs to understand what an attacker could see. On the CompTIA PenTest+ exam, OllyDbg is the canonical answer for Windows binary reverse engineering. Option A (Immunity Debugger) is also a Windows debugger but is primarily used for exploit development and writing Python plugins for exploitation, not general reverse engineering of binaries. Option C (GDB) is the GNU Debugger, primarily used on Linux/Unix systems. Option D (Drozer) is an Android application security testing framework and is entirely unrelated to Windows binary analysis.

Topics

#Binary analysis#Reverse engineering#Debuggers#Penetration testing tools

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice