Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Question about debugger security

Can an attacker attach a debugger to my app after installing it to the market, or does the app have to be marked as debuggable first? How secure is this? Are there ways to get around it?

like image 541
synic Avatar asked Mar 17 '10 15:03

synic


People also ask

What is the purpose of debugger?

A debugger is a software tool that can help the software development process by identifying coding errors at various stages of the operating system or application development. Some debuggers will analyze a test run to see what lines of code were not executed.

How can you debug a system in a production environment while it is being used?

A debugger would have to install different tools on the server, run the application in debug mode, and remotely connect to it using some advanced IDE. This process will not only make the application nearly unresponsive for users, but also wouldn't be possible as you don't have access to the host server.


1 Answers

Marked debuggable or not, if a hacker has your code on his/her machine he/she will be able to use a variety of tools to attach to your process, examine the code, the memory, execute arbitrarily etc. This goes for any app and any platform. Your best hope is to follow security best practices and obfuscate to make it hard for someone to crack your code.

like image 103
Paul Sasik Avatar answered Oct 28 '22 10:10

Paul Sasik