Uploaded December 2019 | Updated September 2026, 2 weeks ago
A typical GDB error when setting breakpoints in binaries affected by ASLR is: "Cannot access memory at address 0x807". This can be frustrating, especially before you know how PIE works. This video shows several ways to debug stripped PIE binaries with GDB and Ghidra.
LEARN ON HEXTREE (ad)
Learn hacking on Hextree: hextree.io
Watch this video and more on Hextree: app.hextree.io/courses/yt-basic-buffer-overflows/common-exploitation-pitfalls
Join the Hextree Discord: discord.gg/xgQpCQCpvy
CHAPTERS
00:00 - Why PIE binaries move in memory
00:42 - Reading PIE offsets and runtime addresses
02:35 - What GDB does to ASLR
04:43 - Why raw breakpoints fail in stripped PIE binaries
06:16 - Two ways to set a runtime breakpoint
08:10 - Correcting Ghidra's assumed image base
09:48 - Reading process mappings from /proc
10:39 - Disabling ASLR for local debugging
12:05 - Rebasing Ghidra to match GDB
SUPPORT
Per video: patreon.com/join/liveoverflow
Per month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
Buy my handwriting font (ad): shop.liveoverflow.com
WATCH, FOLLOW & READ
Second channel: youtube.com/LiveUnderflow
Twitch: twitch.tv/LiveOverflow
Twitter: twitter.com/LiveOverflow
Instagram: instagram.com/LiveOverflow
TikTok: tiktok.com/@liveoverflow_
LiveOverflow blog: liveoverflow.com
Hextree blog (ad): hextree.io/blog
#BufferOverflow #BinaryExploitation #LiveOverflow
(ad) LiveOverflow YouTube channel is supported by advertisement and product placement.
A typical GDB error when setting breakpoints in binaries affected by ASLR is: "Cannot access memory at address 0x807". This can be frustrating, especially before you know how PIE works. This video shows several ways to debug stripped PIE binaries with GDB and Ghidra.
LEARN ON HEXTREE (ad)
Learn hacking on Hextree: hextree.io
Watch this video and more on Hextree: app.hextree.io/courses/yt-basic-buffer-overflows/common-exploitation-pitfalls
Join the Hextree Discord: discord.gg/xgQpCQCpvy
CHAPTERS
00:00 - Why PIE binaries move in memory
00:42 - Reading PIE offsets and runtime addresses
02:35 - What GDB does to ASLR
04:43 - Why raw breakpoints fail in stripped PIE binaries
06:16 - Two ways to set a runtime breakpoint
08:10 - Correcting Ghidra's assumed image base
09:48 - Reading process mappings from /proc
10:39 - Disabling ASLR for local debugging
12:05 - Rebasing Ghidra to match GDB
SUPPORT
Per video: patreon.com/join/liveoverflow
Per month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
Buy my handwriting font (ad): shop.liveoverflow.com
WATCH, FOLLOW & READ
Second channel: youtube.com/LiveUnderflow
Twitch: twitch.tv/LiveOverflow
Twitter: twitter.com/LiveOverflow
Instagram: instagram.com/LiveOverflow
TikTok: tiktok.com/@liveoverflow_
LiveOverflow blog: liveoverflow.com
Hextree blog (ad): hextree.io/blog
#BufferOverflow #BinaryExploitation #LiveOverflow
(ad) LiveOverflow YouTube channel is supported by advertisement and product placement.
