Search code examples
ollydbg

Ollydbg - debug program as administrator


I have a WIN32 program which I need to debug. It has to be ran as administrator - otherwise it doesn't do its job. I've searched through options and settings, but I haven't found anything usefull.

Does someone know a way to do that?


Solution

  • Ollydbg itself needs to be run as administrator 
    

    In fact every debugger needs admin privileges to work correctly
    a debugee is a child process of the debugger and it automatically gets admin privileges.

    if your question means how to run ollydbg as administrator from a limited account

    you can use the runas utility

    start run cmd.exe

    runas /user:machine\

    when the prompt for password appears provide admin password

    runas:\>runas /user:host\admin OLLYDBG.EXE
    Enter the password for host\admin:
    Attempting to start OLLYDBG.EXE as user "host\admin" ...
    

    ollydbg started as admin and any debugge opened by ollydbg will have admin privileges

    to check the access rights of both debugee and debugger use accesscheck from sysinternals

    it will let you know who is running what

    use accesschk by sysinternals to check the rights of debugee

    accesschk.exe -p ollydbg 
    Accesschk v4.20 - 
    Reports effective permissions for securable objects 
    Copyright (C) 2006-2008 Mark Russinovich 
    Sysinternals - www.sysinternals.com 
    [4056] OLLYDBG.EXE RW XXXXXX\Admin 
    RW NT AUTHORITY\SYSTEM 
    [3868] OLLYDBG.EXE RW XXXXX\guest 
    RW NT AUTHORITY\SYSTEM