Essential Keyboard Shortcuts

Useful keyboard shortcuts for Tools related to Reverse Engineering.

Tools covered :

OllyDbg

Shortcut	Function
Global shortcuts
Ctrl+F2	Restart program
Alt+F2	Close program
F3	Open new program
F5	Maximize/restore active window
Alt+F5	Make OllyDbg topmost
F7	Step into (entering functions)
Ctrl+F7	Animate into (entering functions)
F8	Step over (executing function calls at once)
Ctrl+F8	Animate over (executing function calls at once)
F9	Run
Shift+F9	Pass exception to standard handler and run
Ctrl+F9	Execute till return
Alt+F9	Execute till user code
Ctrl+F11	Trace into
F12	Pause
Ctrl+F12	Trace over
Alt+B	Open Breakpoints window
Alt+C	Open CPU window
Alt+E	Open Modules window
Alt+L	Open Log window
Alt+M	Open Memory window
Alt+O	Open Options dialog
Ctrl+T	Set condition to pause Run trace
Alt+X	Close OllyDbg
Disassembler Shortcuts
F2	Toggle breakpoint
Shift+F2	Set conditional breakpoint
F4	Run to selection
Alt+F7	Go to previous reference
Alt+F8	Go to next reference
Ctrl+A	Analyse code
Ctrl+B	Start binary search
Ctrl+C	Copy selection to clipboard
Ctrl+E	Edit selection in binary format
Ctrl+F	Search for a command
Ctrl+G	Follow expression
Ctrl+J	Show list of jumps to selected line
Ctrl+K	View call tree
Ctrl+L	Repeat last search
Ctrl+N	Open list of labels (names)
Ctrl+O	Scan object files
Ctrl+R	Find references to selected command
Ctrl+S	Search for a sequence of commands
Asterisk (*)	Origin
Enter	Follow jump or call
Plus (+)	Go to next location/next run trace item
Minus (-)	Go to previous location/previous run trace item
Space ( )	Assemble
Colon (:)	Add label
Semicolon (;)	Add comment

Shortcut	Function
Flow Control
F5	Continue
F10	Step over
F11	Step Into
Shift+F11	Step out
F7	Run to line
Ctrl+Shift+I	Set instruction pointer to highlighted line
Ctrl+Break or Alt+Del	Break
Ctrl+Shift+F5	Restart
Shift+F5	Stop debugging
Alt+H,D	Detach
Setup
F6	Attach to process
Ctrl+R	Connect to remote
Ctrl+D	Open dump file
Ctrl+K	Attach to kernel debugger
Ctrl+E	Launch process
Ctrl+P	Launch app package
Breakpoints
F9	Toggle breakpoint on highlighted line
Ctrl+Alt+K	Toggle initial break
Alt+B,A	Add breakpoint
Windowing
Ctrl+Tab	Open window changer
Ctrl+1	Open/focus on command window
Ctrl+2	Open/focus on watch window
Ctrl+3	Open/focus on locals window
Ctrl+4	Open/focus on registers window
Ctrl+5	Open/focus on memory window
Ctrl+6	Open/focus on stack window
Ctrl+7	Open/focus on disassembly window
Ctrl+8	Open/focus on breakpoints window
Ctrl+9	Open/focus on thread window
Scripting
Ctrl+Shift+O	Open script
Ctrl+Shift+Enter	Execute script
Ctrl+S	Save script
Alt+S,N	New script
Alt+S,U	Unlink script

Shortcut	Function
General
F2	Toggle breakpoints
F3	Search for text
F7	Step into
F8	Step over
F9	Run
Ctrl+F2	Run until selection
Ctrl+F9	Run until return
Ctrl+Shift+F9	Run until address
Ctrl+Shift+F10	Run until next call
Navigation
Ctrl+G	Go to address
Ctrl+T	Toggle trace mode
Ctrl+L	Set/unset log breakpoint
Ctrl+Shift+L	Toggle log breakpoint condition
Ctrl+M	Toggle memory breakpoint
Ctrl+Shift+M	Toggle hardware breakpoint
Ctrl+R	Rename label/comment
Ctrl+Alt+I	Import database
Disassembly
Spacebar	Toggle breakpoint at the current line
Shift+Enter	Go to expression
F4	Toggle software breakpoint
F6	Step into trace
F10	Step over trace
F11	Step into branch
Graph
Ctrl+D	Go to destination
Ctrl+Shift+D	Go to origin
Ctrl+B	Toggle breakpoints on current selection
Ctrl+Shift+B	Toggle breakpoints on current graph
Ctrl+Shift+E	Toggle graph edges
Ctrl+Shift+F	Toggle graph flags
Ctrl+Shift+H	Toggle graph highlighting
Ctrl+Shift+N	Toggle graph numbers
Memory
Alt+M	Memory map
Alt+B	Memory breakpoints
Alt+D	Data breakpoints
Alt+S	Search memory
Alt+L	Log data