Which technique is used to identify modules by using Mona.py within a Windows binary analysis workflow?

Which technique is used to identify modules by using Mona.py within a Windows binary analysis workflow?

• A. Immunity Debugger
• B. OllyDbg
• C. WinDbg
• D. IDA Pro

Answer: (A)

Mona.py is a Python script that runs inside Immunity Debugger, extending it with automation for exploit development tasks. In a Windows binary analysis workflow, Mona.py helps identify loaded modules by listing each module and its base address (and sometimes exports), so you can map where code and libraries live in memory. This makes it much easier to calculate offsets, locate gadgets for a potential ROP chain, and account for ASLR/DEP. The other tools listed don’t integrate with Mona.py in the same way, so the workflow described—using Mona.py within a Windows binary analysis process—belongs to Immunity Debugger.

Mona.py is a Python script that runs inside Immunity Debugger, extending it with automation for exploit development tasks. In a Windows binary analysis workflow, Mona.py helps identify loaded modules by listing each module and its base address (and sometimes exports), so you can map where code and libraries live in memory. This makes it much easier to calculate offsets, locate gadgets for a potential ROP chain, and account for ASLR/DEP. The other tools listed don’t integrate with Mona.py in the same way, so the workflow described—using Mona.py within a Windows binary analysis process—belongs to Immunity Debugger.