beating IsDebuggerPresent for my unpacker

		Exetools > General > General Discussion
beating IsDebuggerPresent for my unpacker

02-28-2005, 21:59

D-Jester

VIP

Join Date: Nov 2003

Location: Ohio, USA

Posts: 269

Rept. Given: 39

Rept. Rcvd 61 Times in 41 Posts

Thanks Given: 0

Thanks Rcvd at 4 Times in 4 Posts

Quote:

Originally Posted by TQN

I have a wonder: this function will be called from: the loader or the victim process.

The code example is the called from the victim. He asked how to defeat it, I'm not going to code it for him.

However with little to no modification this code or its equivalent could be used in combination with y0da's Force Library and thus IsDebuggerPresnt could be defeated via RemoteExec which enables you to execute code within the context of another process

Regards...

__________________
Even as darkness envelops and consumes us, wrapping around our personal worlds like the hand that grips around our necks and suffocates us, we must realize that life really is beautiful and the shadows of despair will scurry away like the fleeting roaches before the light.

Last edited by D-Jester; 02-28-2005 at 22:02.

« Previous Thread | Next Thread »

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is Off HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Beating a two session max!	abitofboth	General Discussion	6	04-14-2005 09:07

All times are GMT +8. The time now is 23:26.