S
S
slinkinone2015-04-25 18:37:47
linux
slinkinone, 2015-04-25 18:37:47

IDA Pro - how to debug 64-bit windows applications under linux?

Hello!
There is a need for step by step debugging of some 64 bit .exe file. (No selfish goals are pursued - elementary self-development in the field of reverse)
I work with the IDAPro tool version 5.2. The question is how to properly debug a 64-bit application under Linux.
At the office On the site we see that for 64 bit only remote debugging is possible. ( https://www.hex-rays.com/products/ida/support/free...
By running linux_server64 in one tab and opening the file I need with idal64 in another, I set the "Process options" settings (hostname - 127.0. 0.1, port - 23946) The password is empty because I start the server without it.
I put a breakpoint anywhere, F4 - start debugging and see that IDA swears at the server ("Incompatible debugging server"), and then the message "The file can't be loaded by the debugger plugin".
bcc6a2102c7b4890977eeed46fcb731b.png
And in the server window we see a message about a new connection. ("Accepting incoming connection").
815168e5989e43f9b6e6795d5721c6a4.png
Please tell me what is the reason for this error and how to overcome it.
Also, I will not refuse comments like - how to properly debug 64-bit applications with IDAPro (or other tools) under linux.
If you debug using a virtual machine with 64-bit Windows, the result is the same. (Attach for comment by user vilgeforce)
c3a0fc78941c4f5399b81074ee8971a2.png
Thanks for the responses to users t00rm3n and Naves .For remote debug, you need to run the server in the environment where the application is being debugged. By running win64_remotex64.exe and specifying localhost in ID-e, we get the possibility of remote debugging.

Answer the question

In order to leave comments, you need to log in

1 answer(s)
V
Vladimir Martyanov, 2015-04-25
@slinkinone

If you're trying to debug an MZPE file on Linux, it probably won't work. Try Windows 64-bit as an environment to run the debug server and debug. If it works, that's the reason.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question