Skip to content

blaquee/Nanomite

 
 

Repository files navigation

#Nanomite - Graphical Debugger for x64 and x86 on Windows

Features

  • Debugging x86 and x64 (+ WOW64) processes
  • Breakpoints
    • Software
    • Memory
    • Hardware
  • Step In
  • Step Over
  • Step Out
  • Step back to user code
  • Attaching
  • Detaching
  • Single Step Tracing
  • Supporting child processes
  • Supporting multithreading
  • Display source code
  • Patching of instructions
  • Detailed view of:
    • disassembly
    • windows
    • handles
    • debug strings
    • threads
    • (child)processes
    • exceptions
    • process privileges
    • loaded modules
    • strings
    • callstack
    • stack
    • heap
    • cpu registers
    • functions
    • pe header
    • TEB/TBI
    • PEB/PBI

Hotkeys

  • most windows can be closed with "esc"
  • most windows can be reloaded with "F5"
  • STRG + C can be used to copy data from selected field in table - for more check context menu
  • MainWindow
    • STRG + B = Breakpoint Manager
    • STRG + O = Open new file
    • STRG + R = Restart debugging
    • STRG + I = Show detail info window
    • STRG + T = Show trace window
    • STRG + P = Show patch window
    • STRG + A = Show attach window
    • STRG + S = Stop debugging
    • STRG + D = Detach from debuggee
    • ALT + 1 = Show memory window
    • ALT + 2 = Show heap window
    • ALT + 3 = Show string window
    • ALT + 4 = Show debug output window
    • ALT + 5 = Show handle window
    • ALT + 6 = Show windows window
    • ALT + 7 = Show peeditor window
    • ALT + 8 = Show function window
    • ALT + 9 = Show process privilege window
    • ALT = Select menu bar and navigate with arrows
    • F6 = Step Out
    • F7 = Step In
    • F8 = Step Over
    • F9 = Start/Continue debugging
    • F12 = Options
    • Break = Suspend debugging
  • Attach Dialog
    • Return = Attach to selected process
    • Double Click = Attach to selected process
  • Breakpoint Manager
    • Del = Remove selected breakpoint
    • Double Click = Send offset to disassembler
  • Disassembler Window
    • F2 = Set software breakpoint to selected line
    • Return = Follow selected jump, call
    • Backspace = Go back after goto/follow
    • Escape = Close window
  • Function Window
    • Double Click = Show selected function in diassembler
    • Return = Show selected function in diassembler
  • Options
    • Del = Remove selected custom exception
  • Patch Manager
    • Del = Remove selected patch
    • Return = Send selected offset to disassembler
    • Double Click = Send selected offset to disassembler
  • Register Window
    • Double Click = Opens reg edit window
  • Trace Window
    • Double Click = Send selected offset to disassembler

Changelog

###Version 0.1 beta 15

  • fixed a bug which lead to a memory leak when a invalid file was loaded
  • fixed a bug which caused a break when continue was used after a trace
  • fixed a bug which caused problems when scrolling up in disassembler view
  • fixed a bug which returned wrong offset when adding a breakpoint to a wow64 process
  • fixed a bug which did not clean up properly if using the "recent file" menu to debug new process
  • fixed a bug which did not clean up properly if a process terminates in a multiprocess session
  • fixed a bug which did not replace memory breakpoints correctly
  • fixed a bug which did not display the correct source code under certain conditions
  • fixed a bug which did not reload the gui when deleting a patch from patchmanager using hotkey
  • fixed a bug which did not disable trace_stop button when the debuggee terminates while tracing
  • fixed a bug which did not allow breakpoints on int3 instructions
  • fixed a bug which may corrupted the memory breakpoints when a new thread starts
  • fixed a bug which may calculated wrong tls callback offsets
  • added save file dialog to memory dump and patch manager
  • added the correct offsets for loaded module imports in the peeditor
  • added double click handler in trace view, bp manager and patch manager to send a offset to disassembler window
  • added possibility to set nanomite also as wow64 jit debugger
  • added possibility to use Up/Down arrows and PageUp/Down to navigate in disassembler
  • added possibility to create a full process dump
  • added possibility to open function view for selected modules
  • added possibility to restart debugger with admin rights
  • added support for saving patches in dlls
  • added support of multiple tls callbacks
  • added "on execution" and "on write" memory breakpoint types
  • updated function view algorithm
  • updated winapi messagebox to qt

####Notes: - The full process dump can be done in detail view -> process tab -> context menu - The function view can now be showed also in detail view -> modules tab -> context menu

###For the full changelog click here

About

Graphical Debugger for x64 and x86 on Windows

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published