Hi all,
it's a pleasure to publish a new tutorial from me.
Improving the HideDebugger function v10
This time I did a long walk into the antidebugging tricks coding some countermeasures and a C based function. The tutorial comes along with a complete description of techniques used (for example offset intependent code in C, several windows internal details an so on) and of course the whole code.
I think the result is quite appealing and complex to let you have a long reading.
not all the method are new, and I never told they are. What is new is the tutorial and the function that is completely mine.
Anyway: updated to version 1.1 the tutorial.
I realized that there was an error in the ZwQueryProcessInformation patch I now fixed. I also added some further discussion on offset independent code with C which I think might be of interestest to other too.
gkend
I do not understand what are you trying to say. First is useless to hide your opinions behind chinese in an english subforum, given that you proven that you are able to write english.
Secondly if you have something to propose that's better, you have to do it, criticism without actions are useless, facts are what matters.
Anyway opinions are opinions and you are free to post them. I'm also free to say as well that I do not agree and that politeness obliges me to not say more.
I anyway think that who know how to do things does, who doesn't, blames.
Everyone can do with hands what he want to do and the same with one's mouth,howerver, please obey the rule, Don't Use Chinese in English Subarea!
By the way, I have a little agree with what gkend have been said :P
最初由 Shub-Nigurrath 发布 gkend I do not understand what are you trying to say. First is useless to hide your opinions behind chinese in an english subforum, given that you proven that you are able to write english.
Secondly if you have something to propose that's better, you have to do it, criticism without actions are useless, facts are what matters. Anyway opinions are opinions and you are free to post them. I'm also free to say as well that I do not agree and that politeness obliges me to not say more.
I anyway think that who know how to do things does, who doesn't, blames.
Hi, Shub-Nigurrath, the tutorial is great, I like it. :-)
as you just said, opinions are opinions and he is free to post, but he can't do sth. to prove himself, so whatever :-P
And forgive gkend:he is always so critical
to others. In the other subareas,he does the
same thing to many ppl,just like what he
did to you. But he never did anything to
prove himself.
Hope he can put forward something practical
in the future.
Anyway I also think this is a useless reply, but I wanted to post it anyway, even if it's starting to go OT.
forgot, I understood what gkend was telling, I'm not that dumb. What I didn't was why...
This is not repeated work at all for two reasons: 1) there's no C routines like these around, 2) the patches to system API are hidden well into olly plugins which are not opensource (I instead always leave public sources), 3) most of the topics discussed are not so well known by all ppl, even who claims to know C.
On the other hand, yes, this was mostly a reasuming tutorial for which the most important value is to give an unique place where things are presented with an uniform approach and a new source code for all the things into one single place. It took to me a while to collect all the information presented, it's not a simple task. I would see anyone to take the challenge to write better a document, takes time. I will publish it too on our pages if quality fits.
said this, no more polemic by my side, back to action.
but , the fact is sometimes repeat is what we need. Take example ,for breakfest,for lunch,for dinner...
for technique,we also need repeat.Someone do design need innovation,but someone as our begginers need "repeat",and someone as "teachers" also need "repeat"."Tutorial",as we see,is for someone begginners,need to be rewritten if something in it is wrong or something is stale.
we need practise,and for beginners sometimes "repeat" is best practise.
it is wrong to negate "repeating everything".
My major is chemistry.and we always "repeat" what someone had done.if veryone think it's useness, why we do this yet?
we should look back to summary what we have done.
what i say ,in one word ,is "repeat" and "innovation" are associated.
my english is poor ,and it is my first to write so much in forum.
and i don't konw whether you can understand what i say.
