If you ever want to debug
r2 while it is debugging another process (so basically debug while debug
r2 -d /bin/ls or when using
ood) remember about few important things.
Radare2 will create a new process so it is important to be sure if
gdb is set to attach to a newly created process or keep being attached to the parent depending on the use case. It can be changed by setting
follow-fork-mode variable to either
By default it is set to
child so it would seems to be correct, but if we would like to check what
r2 is doing after the process has been created and before it started execution it would need to be changed to
parent and later to
This was handy to know for checking why some payloads where not loaded correctly to provide an answer for this Stack Overflow question.