Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Top Posters

Who's Online (1)

Powered by Vanilla. Made with Bootstrap.
Bypassing Anti Debugging Filters?
  • Xin
    Posts: 3,251
    A lot of popular software now will kill the process if you attempt to open it in a debugger or use it with a network analyser to prevent cracking, do you guys know of any ways to block this?

    I know there are some olly plugins that can try make it invisible but not all of them work.
    Xin
  • xpl0yt
    Posts: 8
    If you think it is just a simple IsDebuggerPresent you can do a two byte patch and take it out. As for olly i use the stealth64 plugin. Another tip is that most hard core reverse engineering 'drivers' do function on 64 bit i have gotten lucky several times to see a a company did not make a 64bit driver for their software. As for network analysis you can easily rig up your own packet logger if the application does not use SSL and they use the winsock API, connect / send / receive are very easy to hook.


    Cheers - xpl0yt