Log in

View Full Version : [ARTeam] xADT eXtensible Anti-Debug Tester v 1.0


Shub-nigurrath
July 22nd, 2006, 19:37
Hi all,
it's a pleasure to announce this tool in its final first official distribution.

The tool is thought to be an unique extensible platform for integrating all the anti-debugging tricks you might see around, using an unique extensible interface you also might easily extend. The tool is useful to test the hiding features of the debugging tools and custom loaders as well as the hiding of any other reversing tool: see how well they're hidden or not. The second advantage is to finally have an unique testing program and to not have hundreds of spare tiny programs. The easiness of adding new external tests, writing new plugins is also one important feature IMHO, which finally free the author of new anti-debugging tools to concentrate on the logig of the test without having to spend a single second on its user's interface.

Do you think your Olly is well hidden? Try this tool from Olly and all the possible hiding tools around, up to today there's always one test which detects Olly!

I already packaged this first distribution with a lot of internal tests and plugins. Sources of 3 real plugins are included as well: 2 written with Visual C++ and one with MASM (10x deroko)

See the internal readme.txt for a brief documentation on the tool, additional information on how to write your own plugins, and a short FAQ.

http://releases.accessroot.com

PS posted also on other boards, excuse me for the this little of spam

JMI
July 22nd, 2006, 20:06
Hi Shub:

Thanks for sharing your tool with our members.

Regards,

Ricardo Narvaja
July 23rd, 2006, 08:34
i use 3 or 4 plugins for hide ollydbg but 3 results are positive always, there are plugins that cover all items, or there are no exixstent plugin that cover the 3 items positive, using hideod, hidedebugger, advanced plugin, etc
Someone have a better combination of plugins for hide all?

Ricardo Narvaja
Very good work Shub, excellent tool

linhanshi
July 23rd, 2006, 09:06
Thx for share.

Shub-nigurrath
July 23rd, 2006, 09:58
indeed even the OllyAdvanced plugin from Markus doesn't hide completely to all the tests.

I hope to see other writing new plugins so as to keep the tests of this tool updated..

Ricardo Narvaja
July 23rd, 2006, 14:57
yes i have 3 items detected with last ollyadvanced beta 10.
Thanks a lot for the tool
Ricardo

Shub-nigurrath
July 27th, 2006, 19:34
Hi all,
version 1.1 is out.

version 1.1
+splitter function, panels now can be resized dynamically
+windows and splitter position is now saved
+divided the messages panel into two positive and negative panels to separate results list
+now the title bar reports a count of test results
+added a PDK. Now plugin can start using it from the main program (like OllyDbg does)
-fixed internal test ZwQueryInformationThread
-small bugs fixed