View Single Post
  (#9 (permalink)) Old
SunBeam
Keeper of Kadesh
 
SunBeam's Avatar
 


128-Bit Member

 
Posts: 326
Join Date: Aug 2006
Location: Inside a SEH..
Last Online: 09-21-2009 08:26 AM
Reputation: SunBeam is on a distinguished road
User is Offline
romania
   
09-14-2009, 09:33 AM

Quote Originally Posted by PoZHx View Post
Hmm i dont quite understand that =/
Well currently im using:
  • Anti-Breakpoints (int3 and hardware)
  • Check Debug Flags using NtQueryInformationProcess
  • Checking Debugger using int2 (by setting up SEH? - not 100% sure on how that works)
  • Few Anti-Debugging API's e.g. CheckRemoteDebuggerPresent() etc
Is it worth taking a look into your suggestion?
PM me please one of your trainers Just curious :-P I'll then tell you how to bypass each of the options you named above..
  
Reply With Quote