英文:
What are the differences between Cheat engine and other applications like IDA, Ghidra, and x64dbg?
问题
我已经使用了Cheat Engine,以至于我现在理解了如何访问程序内存,如何查看汇编代码,找到指针,使用调试器等等。我还没有使用过IDA、Ghidra、x64dbg(或其他我不知道的工具),想知道它们之间有什么区别。谢谢。
英文:
I have used Cheat Engine to the point where I now understand how I can access memory in the program, how to view the assembly code, find pointers, use the debugger, etc. I have not used IDA, Ghidra, x64dbg (or any others I don't know about) and was wondering what difference there is between them. Thank you
答案1
得分: 0
它们都是具有不同用途的不同工具。Ghidra和ida属于静态分析工具。这些工具在程序不运行的情况下操作,它们只是从文件中提取字节并试图理解其中的内容。
它们集成了许多工具,以便在一个平台上更轻松地进行工作。字符串搜索、PE读取器等等,最有趣的是它们都提供反汇编器,试图从汇编代码中生成C代码。
调试器是一个在文件运行时工作的工具,它会附加到进程并读取内存、指令,允许您设置断点等等。它的优点是您可以看到数据在程序中移动的过程。
Cheat Engine有点像一把瑞士军刀,它可以同时执行许多任务,但它不能进行静态分析。Ida Pro和Ghidra也集成了一个调试器,用于在程序运行时查看,但大部分关注点都在静态分析上。
如果您想进入逆向工程领域,应该尝试使用它们并熟悉它们。没有一个工具可以完美地完成所有工作。需要许多工具并可以一起使用,以获得程序操作方式的清晰图像。
英文:
They are all different tools with different use cases. Ghidra and ida fall under static analysis tool. These tools operate without the program running, they just extract the bytes from the file and try to make sense of that.
They incorporate many tools under one roof to make your life easier. String search, pe readers, ... most interesting is they both offer a de-compiler which tries to make C code from the assembly.
A debugger is a tool that works on the file while its running, it attaches itself to the process and reads the memory, instructions, allows you to set breakpoints and much more. Plus side of it is that you can see the data as its moving thru the program.
Cheat engine is kinda a swiss army knife, it does allot of things at the same time but it cant do static analysis.
Ida pro and Ghidra also incorporate a debugger to look at the program while running, but most of the focus is on static analysis.
You should try them out and get familiar with them if you wane get into reverse engineering. There is not one tool that does everything perfect. Many tools are needed and can work together to get you a clear picture of how a program operates.
通过集体智慧和协作来改善编程学习和解决问题的方式。致力于成为全球开发者共同参与的知识库,让每个人都能够通过互相帮助和分享经验来进步。
评论