This plugin allows to hide debugger from IsDebuggerPresent API
function.
This plugin allows to hide debugger from IsDebuggerPresent API
function.
Cool, nice work!![]()
Thanks!Originally Posted by dELTA
![]()
Hi Aster!x,
Always happy to see new tot. Not much documentation, out of curiosity, how does this compare/improve on the already available Isdebuggerpresent plugin?
regards
Hi Aster!x,
Kudos on the plugin. If you don't mind a couple of comments, the nicest thing you could do is teach people how to create their own Olly plugins by including the source. I fully encourage all forms of source on this board as it's the best kind of information to pass along.
I mention this specifically because, not to take away any credit at all from what you have done, but because SV also created an IsDebuggerPresent plugin and included full ASM source. I haven't actually tested either plugin, but comparing the two dlls it seems you have done it slightly different, using ContinueEventDebugHook and WaitForDebugEventHook and a different combination of _ODBG exports. It might be instructive if you included your source and people who are interested could compare the different approaches.
This is just a suggestion, and an encouragement for further plugins and open source, from which we all benefit.
Heh, I see Js (long time no Asp-talk ;-) had the same idea.
Cheers,
Kayaker
Hi Js!
My english not so good for give more full description, but you may try and choose for itself best.
![]()
Hi Kayaker!
I'll think.
Possible little later full sorces will be available on _http://www.wasm.ru/
and accordingly will here appear link.![]()
Code was corrected.
The size of the file became else less.
if you need help on the translation part, let us know..
there's a lot of valuable content on wasm.ru that just doesn't get to be known by the rest of the world.
The other day I was searching for undocumented windows features and out of 6 google searches, wasm.ru stuff was there 5 times..
New version of plugin
Thanks for the update.![]()
Regards,
JMI
Hide Debugger 1.2.2 has been released
more options added
added protection against OutputDebugString exploit
attachment deleted because plugin may crash Olly if debug string has READONLY access, will soon be a new version.
Last edited by Aster!x; May 9th, 2005 at 07:53. Reason: attachment deleted because plugin may crash Olly if debug string has READONLY access, will soon be a new version.
Bookmarks