PDA

View Full Version : some technic to stop debugger... included OD


j2innet
10-24-2004, 11:00 PM
some ppl use IsDebuggerPresent flag to switch to another routine to prevent something bla bla.. =)
but now, some technic that some thread behind will monitor for timing. Anything not right, it will kill the thread.
looking forward to have solution to over come this. anyone try this before? write C***ksMe and try it yourself.

1bitshort
10-25-2004, 10:07 AM
yep, most (probably all) debuggers are single-threaded so there's definately plenty of anti-debug party tricks you can play with in other threads

MaRKuS TH DJM
10-28-2004, 01:10 PM
if this thread just checks for timing... why not simply kill it?

Bob
12-03-2004, 02:29 AM
or freeze it