▸case-01 We are setting up an x86_64 Linux binary exploitation workspace for heap exploitation and return-oriented programming (ROP). Should we rely solely on standard stock GDB or install enhanced debugging plugins tailored for exploit development? Recommend the standard extension to install and state the setup approach. | pass→pass | 18,093 | 18,232 | +1% | 1 | 1 | 0% | 2,231 | 2,543 | +14% | 0 | 0 | — |
▸case-02 When triaging intermittent concurrency bugs or multi-threaded race condition crashes in C/C++ Linux binaries, standard GDB step-debugging often alters thread timing and masks the bug. What tool should be integrated with GDB to allow deterministic backward stepping and execution replay? Identify the tool framework and state its primary command mode. | pass→pass | 11,026 | 6,115 | -45% | 1 | 1 | 0% | 1,058 | 1,252 | +18% | 0 | 0 | — |
▸case-03 We are setting up an automated crash dump analysis environment for user-mode and kernel-mode Windows binaries. Which native Microsoft debugger should be integrated into our Windows vulnerability research workflow? Identify the recommended tool. | pass→pass | 9,510 | 16,719 | +76% | 1 | 1 | 0% | 1,558 | 2,221 | +43% | 0 | 0 | — |
▸case-04 We need to programmatically inspect register state and register dynamic breakpoint callbacks during automated exploit payload testing in GDB. Which programming language runtime embedded inside GDB should be used for scriptable control? Name the supported language runtime. | fail→fail | 9,658 | 9,202 | -5% | 1 | 1 | 0% | 670 | 758 | +13% | 0 | 0 | — |
▸case-05 During dynamic vulnerability analysis of an x86_64 C program in GDB, we want to pause execution on calls to `malloc` only when the requested allocation size in register `$rdi` exceeds 1024 bytes. Provide the exact GDB command syntax to set this conditional breakpoint. | pass→pass | 8,500 | 5,997 | -29% | 1 | 1 | 0% | 662 | 1,321 | +100% | 0 | 0 | — |
▸case-06 While debugging a macOS Mach-O binary in LLDB, we need to set a conditional breakpoint on `objc_msgSend` that pauses target execution only when argument `$rsi` equals target pointer address `0x7fff5fbff120`. Provide the LLDB command syntax to set this conditional breakpoint. | pass→pass | 5,245 | 5,407 | +3% | 1 | 1 | 0% | 1,064 | 1,241 | +17% | 0 | 0 | — |
▸case-07 When inspecting heap chunk metadata for potential use-after-free or heap overflow vulnerabilities in a Linux binary using GDB with pwndbg, what command should be executed to display active heap chunks and chunk headers? State the command name. | pass→pass | 5,575 | 10,885 | +95% | 1 | 1 | 0% | 643 | 1,062 | +65% | 0 | 0 | — |
▸case-08 We captured an execution recording of a process crash under rr and attached GDB. What GDB command moves execution backward by one machine instruction toward the origin of the invalid memory dereference? State the exact stepping command. | fail→fail | 8,231 | 3,308 | -60% | 1 | 1 | 0% | 581 | 677 | +17% | 0 | 0 | — |
▸case-09 When opening a Windows kernel crash dump (.dmp file) in WinDbg after a system bugcheck, what extension command performs automated crash triage and faulting stack analysis? Provide the WinDbg command name. | pass→pass | 7,046 | 2,456 | -65% | 1 | 1 | 0% | 327 | 685 | +109% | 0 | 0 | — |
▸case-10 We are conducting dynamic vulnerability analysis on an embedded MIPS binary running gdbserver on TCP port 1234 on IP address 192.168.1.50. Provide the GDB command to connect the local GDB session to this remote target. | pass→pass | 7,890 | 4,735 | -40% | 1 | 1 | 0% | 523 | 966 | +85% | 0 | 0 | — |
▸case-11 During dynamic analysis in GDB, we need to record function entry and exit points automatically without modifying binary source code or stepping manually line-by-line. Describe the GDB feature mechanism used to achieve automated call tracing. | fail→fail | 20,655 | 17,122 | -17% | 1 | 1 | 0% | 2,629 | 2,906 | +11% | 0 | 0 | — |
▸case-12 We need to inspect a running web service process with process ID (PID) 4521 on macOS using LLDB without terminating the process. Provide the LLDB command to attach to this process. | pass→pass | 8,621 | 9,221 | +7% | 1 | 1 | 0% | 594 | 973 | +64% | 0 | 0 | — |
▸case-13 Write a Python code snippet utilizing GDB's native Python API to programmatically create a breakpoint at address `0x401150` and override its execution callback. | pass→pass | 12,985 | 7,191 | -45% | 1 | 1 | 0% | 1,449 | 1,545 | +7% | 0 | 0 | — |
▸case-14 In WinDbg, we want to set a breakpoint on `nt!NtMapViewOfSection` that triggers only when parameter `ProcessHandle` equals `0xffffffff`. Provide the WinDbg breakpoint command syntax. | pass→pass | 15,461 | 12,360 | -20% | 1 | 1 | 0% | 2,031 | 2,577 | +27% | 0 | 0 | — |
▸case-15 To detect where corrupting memory writes occur at address `0x7ffff7dd6010` during exploit analysis in GDB, what command sets a hardware data watchpoint on write access to that address? Provide the GDB command syntax. | pass→pass | 9,979 | 10,721 | +7% | 1 | 1 | 0% | 885 | 1,030 | +16% | 0 | 0 | — |
▸case-16 When debugging a protected binary that verifies code section checksums in memory, standard `int 3` breakpoints alter code memory and trigger anti-debugging detection. What type of breakpoint mechanism should be used in GDB or WinDbg to avoid altering memory bytes? Explain which breakpoint mechanism to select. | pass→pass | 9,262 | 10,792 | +17% | 1 | 1 | 0% | 1,685 | 2,108 | +25% | 0 | 0 | — |
▸case-17 A Linux service produced a core dump file `core.8821` upon crashing. Provide the CLI command syntax to launch GDB while passing both executable binary `/usr/bin/target_app` and core file `core.8821` for post-mortem triage. | pass→pass | 2,204 | 8,946 | +306% | 1 | 1 | 0% | 431 | 936 | +117% | 0 | 0 | — |
▸case-18 When writing external Python automation scripts to control LLDB sessions and inspect thread frame registers, what standard Python library module must be imported? Name the module. | pass→fail | 12,302 | 4,782 | -61% | 1 | 1 | 0% | 1,273 | 653 | -49% | 0 | 0 | — |
▸case-19 When analyzing a crash in WinDbg, what command displays the target stack frame backtrace along with the first three hexadecimal parameters passed to each function call? State the command. | pass→pass | 2,358 | 8,429 | +257% | 1 | 1 | 0% | 343 | 701 | +104% | 0 | 0 | — |
▸case-20 We need to set up a static application security testing (SAST) rule using Semgrep to detect unescaped string formatting in raw SQL query construction across Python Flask repositories. Provide a Semgrep rule configuration snippet to detect string formatting in SQL queries. | pass→pass | 18,295 | 16,825 | -8% | 1 | 1 | 0% | 2,425 | 2,674 | +10% | 0 | 0 | — |
▸case-21 We need to statically explore path constraints to find an input payload that solves a crackme binary's validation function without executing the binary dynamically in interactive debugger sessions. Identify the symbolic execution framework in Python and provide a brief code setup example using Z3 constraint solving. | pass→pass | 18,258 | 16,611 | -9% | 1 | 1 | 0% | 2,381 | 1,610 | -32% | 0 | 0 | — |
▸case-22 We need to craft custom raw TCP packets with malformed BGP header fields to test a remote router parser over the network from an external scanner host without attaching host debuggers. Identify the standard Python network packet manipulation library for raw packet crafting. | pass→pass | 5,843 | 13,296 | +128% | 1 | 1 | 0% | 862 | 1,466 | +70% | 0 | 0 | — |
▸case-23 When debugging a crash dump in WinDbg, loaded symbol tables are stale or missing for newly loaded DLL modules. What WinDbg command forces symbols to reload and verify for all loaded modules? State the command. | pass→pass | 9,984 | 4,750 | -52% | 1 | 1 | 0% | 796 | 1,083 | +36% | 0 | 0 | — |
▸case-24 While paused at a breakpoint in LLDB during target binary execution, what command disassembles assembly instructions surrounding the current program counter? State the LLDB command syntax. | pass→pass | 3,423 | 8,297 | +142% | 1 | 1 | 0% | 578 | 777 | +34% | 0 | 0 | — |