Immunity Debugger and API
Mohammad Hosein (MohammadHosein) <mhtajikgmailcom> Friday, July 13 2007 17:11.14 CDT


well Dave just sent an interesting ANN to the list , i am not going to be one of those beta testers and i definitely will not be at the Party , but i really like to know more about this so if any of you guys know a bit more shed a little light here , more importantly : this is going to be an expensive Commercial piece of work , right ?

--

Today's blast from the past is a Squirrelmail GPG-plugin advisory from
2003 that I found while looking for exploits for modern versions. Back
in the day you just made fun of such things, whereas now you sell them
to people, it looks like.

In other news Immunity is co-hosting with Applied Security an
exclusive party at the Bellagio in Vegas on August 3rd. Among other
reasons, we'd like to celebrate the launch of Immunity Debugger with
free drinks!

Immunity Debugger, if you haven't read the talk Nico gave at SyScan
[1], is a vulnerability focused debugger with a nice GUI and a Python
API built-in. We think it's great and the beta testers have loved it
so far! Damian Gomez, the primary developer, is going to be giving a
Defcon talk on it that you should be sure to catch.

We do have (limited) room for a few more beta testers. If you are not
on the Immunity Debugger beta list, but think you should be, just send
betaid at immunityinc.com a quick paragraph as to why. A select group
of our beta testers will receive invites to the party (send your
snail-mail address with your Beta request). We're especially looking
for experienced exploit writers and reverse engineers who are
interested in using the Immunity Debugger Python API.


Comments
pedram Posted: Friday, July 13 2007 20:38.59 CDT
Actually it's going to be entirely free and I believe they are releasing it at DEF CON this year. What Immunity essentially did is purchase the OllyDbg source code, drop Python into it and create a slew of tools and libraries on top of it all. Cool concept. I haven't had a chance to play with it in depth quite yet but it looks promising. I'm going to look into tying it into PaiMei in some way, shape or form.

jms Posted: Saturday, July 14 2007 22:59.17 CDT
I made a plea to get on that beta list, not sure whether I will get any love. I am definitely interested in playing with the PythonAPI though.

nicowow Posted: Monday, July 16 2007 20:49.15 CDT
Hey, As pedram said Immunity Debugger will be released on the first week of August. Im part of the team developing it, so we are more than please to accept new people on the beta testing program and receive feedback.
Maybe we can add a forum here ;)
Anyways, mail me into [email protected] with a small paragraph and I will totally send you a copy

Cheers
Nico
PS: jms, i belive i did mail you with a beta copy of it

MohammadHosein Posted: Monday, July 16 2007 22:03.59 CDT
nico,
this new baby branched from olly 1.1 or the new one which is under development ?