New plugin for OllyDbg

[Aster!x]

This plugin allows to hide debugger from IsDebuggerPresent API
function.

[dELTA]

Cool, nice work!

[Aster!x]

Cool, nice work!

Thanks!

[Js]

Hi Aster!x,
Always happy to see new tot. Not much documentation, out of curiosity, how does this compare/improve on the already available Isdebuggerpresent plugin?
regards

[Kayaker]

Hi Aster!x,

Kudos on the plugin. If you don't mind a couple of comments, the nicest thing you could do is teach people how to create their own Olly plugins by including the source. I fully encourage all forms of source on this board as it's the best kind of information to pass along.

I mention this specifically because, not to take away any credit at all from what you have done, but because SV also created an IsDebuggerPresent plugin and included full ASM source. I haven't actually tested either plugin, but comparing the two dlls it seems you have done it slightly different, using ContinueEventDebugHook and WaitForDebugEventHook and a different combination of _ODBG exports. It might be instructive if you included your source and people who are interested could compare the different approaches.

This is just a suggestion, and an encouragement for further plugins and open source, from which we all benefit.

Heh, I see Js (long time no Asp-talk ;-) had the same idea.

Cheers,
Kayaker

[Aster!x]

Hi Js!
My english not so good for give more full description , but you may try and choose for itself best.

[Aster!x]

Hi Kayaker!

I'll think.
Possible little later full sorces will be available on _http://www.wasm.ru/
and accordingly will here appear link.

[Aster!x]

Code was corrected.
The size of the file became else less.

[doug]

if you need help on the translation part, let us know..

there's a lot of valuable content on wasm.ru that just doesn't get to be known by the rest of the world.

The other day I was searching for undocumented windows features and out of 6 google searches, wasm.ru stuff was there 5 times..

[Aster!x]

New version of plugin

[JMI]

Thanks for the update.

Regards,

[Aster!x]

Hide Debugger 1.2.2 has been released

more options added

[pLayAr]

good work & thanks

[Aster!x]

added protection against OutputDebugString exploit

attachment deleted because plugin may crash Olly if debug string has READONLY access, will soon be a new version.

[Piccinano]

Good work!

Thanks!