Log in

View Full Version : some technic to stop debugger... included OD


j2innet
October 24th, 2004, 22:00
some ppl use IsDebuggerPresent flag to switch to another routine to prevent something bla bla.. =)
but now, some technic that some thread behind will monitor for timing. Anything not right, it will kill the thread.
looking forward to have solution to over come this. anyone try this before? write C***ksMe and try it yourself.

1bitshort
October 25th, 2004, 09:07
yep, most (probably all) debuggers are single-threaded so there's definately plenty of anti-debug party tricks you can play with in other threads

MaRKuS TH DJM
October 28th, 2004, 12:10
if this thread just checks for timing... why not simply kill it?

Bob
December 3rd, 2004, 02:29
or freeze it