Flag: Tornado! Hurricane!

Error: Authentication required to access requested resource.

 Forums >>    >> 

Topic created on: by .


  GynvaelColdwind     July 2, 2009 14:09.52 CDT
Hi,

Check this out:
http://deneke.biz/obsidian

Hmm, I wouldn't call it 'non-invasive' (the author calls it non-itrusive, but its almost the same), but it's interesting anyway, since it is not using Debugger API nor ring0 tricks.

However I did have some trouble using it ;< Hope you'll have better luck!

Take care!
G.C.

  Soul12     July 2, 2009 17:22.09 CDT
or you could take a look here

http://www.reverse-engineering.info/PE_Information/Crackers_Guide_To_Program_Flow.pdf

  Soul12     July 2, 2009 17:22.10 CDT
<ups double post>

  PeterFerrie     July 5, 2009 00:39.26 CDT
CreateToolhelp32Snapshot is very intrusive, since it inserts a thread in the target process, in order to gather certain information about that process.  This new thread is detected easily by the target process, and can cause a hostile reaction.  NtQueryInformationProcess should be used instead.

Note: Registration is required to post to the forums.

There are 16,575 total registered users.


Recently Created Topics
how to crate a PATC...
Mar/10
wsnpoem audio.dll
Mar/09
suggestions - RE tra...
Mar/09
Requesting Suggestio...
Mar/06
Force enable debug p...
Mar/05
upgrading new image ...
Mar/03
upgrading new image ...
Mar/03
upgrading new image ...
Mar/03
Can some one give me...
Mar/02
Error in generating ...
Feb/28


Recent Forum Posts
wsnpoem audio.dll
zhane
suggestions - RE tra...
Silkut
how to crate a PATC...
Silkut
suggestions - RE tra...
RolfRolles
wsnpoem audio.dll
debbie
Requesting Suggestio...
secursig
Requesting Suggestio...
phn1x
how to get executabl...
RabidCi...
how to get executabl...
RabidCi...
Force enable debug p...
Silkut


Recent Blog Entries
RolfRolles
Mar/08
Compiler Optimizations for ...

ReWolf
Mar/04
When memory management goes...

thesprawler
Feb/20
log1949.txt -- Wondering ho...

thesprawler
Feb/20
log1949.log -- created on C...

thesprawler
Feb/17
Trying to reverse the firmw...

More ...


Recent Blog Comments
Boken on:
Mar/12
Compiler Optimizations for ...

wildinto on:
Mar/10
Compiler Optimizations for ...

Orr on:
Mar/10
Compiler Optimizations for ...

bughoho on:
Mar/09
Compiler Optimizations for ...

cliffwolf on:
Mar/08
Compiler Optimizations for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit