CompTIA PenTest+ (PT1-002) — Question 24

A software development team is concerned that a new product's 64-bit Windows binaries can be deconstructed to the underlying code. Which of the following tools can a penetration tester utilize to help the team gauge what an attacker might see in the binaries?

Answer options

• A. Immunity Debugger
• B. OllyDbg
• C. GDB
• D. Drozer

Correct answer: C

Explanation

GDB is a powerful debugger that allows penetration testers to analyze the behavior of binaries and inspect their internal states, making it suitable for understanding what attackers might uncover. Immunity Debugger and OllyDbg are also debuggers, but GDB is more widely used for this purpose, especially in a Linux context. Drozer is focused on Android security and is not relevant for analyzing Windows binaries.