> For the complete documentation index, see [llms.txt](https://notes.nomanaziz.me/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.nomanaziz.me/cybersecurity/penetration-testing/tryhackme/main-methodology/3.-gaining-access-exploitation/buffer-overflow/2.-mona-setup.md).

# 2. Mona Setup

Mona is a powerful plugin for Immunity Debugger that makes exploiting buffer overflows much easier.

\| The latest version can be downloaded here: <https://github.com/corelan/mona> | The manual can be found here: <https://www.corelan.be/index.php/2011/07/14/mona-py-the-manual/>

Copy the mona.py file into the PyCommands directory of Immunity Debugger (usually located at C:\Program Files\Immunity Inc\Immunity Debugger\PyCommands).

In Immunity Debugger, type the following to set a working directory for mona.

```bash
!mona config -set workingfolder c:\mona\%p
```