首页
社区
课程
招聘
[推荐]AntiDebugTimePlugin 0.1
发表于: 2013-9-20 15:33 2895

[推荐]AntiDebugTimePlugin 0.1

2013-9-20 15:33
2895
https://www.vscen.com/?share=dZsEUf
Modern computer programs are more complex in writing and more difficult for reversing. Serious programs have various means of protection against debugging. It prevents application reversing. There are a number of various approaches, like Debug Blocker, Nanomites, others.

Measuring time to identify that an application is being debugged becomes the widespread practice lately. The OllyDbg has the HideOD and Hide Debugger anti-debug plugins, which have no possibility to hide actual time. This causes difficulties in application reversing.

Let’s consider the system of debugger identification. The debuggers are capable of making breakpoints in code. In this case the operation of the program is suspended. The program can detect such stopping by monitoring the system time. If there is a too long pause between the instructions – most likely the program has been stopped for analysis.

[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入!

收藏
免费 0
支持
分享
最新回复 (1)
雪    币: 114
活跃值: (180)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
2
google翻译一下:
现代计算机程序以书面形式更复杂,更难以扭转。严重的计划有各种手段防止调试。它可以防止应用程序扭转。有一些不同的方法,如调试拦截器,Nanomites,其他。

测量时间来确定应用程序正在调试成为近来普遍的做法。该OllyDbg的HideOD的和隐藏调试器反调试插件,其中有没有隐藏实际时间的可能性。这会导致应用程序的扭转困难。

让我们考虑调试识别系统。调试器能够使代码中的断点。在这种情况下,程序的操作被暂停。该程序可以检测等监控系统时间停止。如果有一个过长的暂停指令之间的 - 最有可能是程序已停止分析。
2013-9-20 17:11
0
游客
登录 | 注册 方可回帖
返回
//