📚 OpenRCE is preserved as a read-only archive. Launched at RECon Montreal in 2005. Registration and posting are disabled.








Flag: Tornado! Hurricane!

Blogs >> waleedassar's Blog

Created: Tuesday, January 29 2013 01:46.16 CST  
Direct Link, View / Make / Edit Comments
Wow64-Specific Anti-Debug Trick
Author: waleedassar # Views: 18406

http://waleedassar.blogspot.com/2013/01/wow64-specific-anti-debug-trick.html

Created: Sunday, January 27 2013 02:59.16 CST  
Direct Link, View / Make / Edit Comments
Injecting 64-Bit DLL Into 32-Bit Process
Author: waleedassar # Views: 18191

http://waleedassar.blogspot.com/2013/01/wow64logdll.html

Created: Sunday, December 9 2012 04:28.18 CST  
Direct Link, View / Make / Edit Comments
Windows Internals: SkipThreadAttach
Author: waleedassar # Views: 18894

http://www.waleedassar.blogspot.com/2012/12/skipthreadattach.html

Created: Saturday, November 24 2012 19:54.12 CST  
Direct Link, View / Make / Edit Comments
SuppressDebugMsg As Anti-Debug Trick
Author: waleedassar # Views: 20291

My latest blog post where i explain a new anti-debug trick.

http://waleedassar.blogspot.com/2012/11/suppressdebugmsg-as-anti-debug-trick.html

Have fun

Created: Friday, November 23 2012 20:35.07 CST  
Direct Link, View / Make / Edit Comments
Hiding Threads From Debuggers
Author: waleedassar # Views: 18840

My lastest blog post where i discuss in detail the topic of hiding threads from debuggers.

http://waleedassar.blogspot.com/2012/11/hidding-threads-from-debuggers.html

Have fun.


Archived Entries for waleedassar
Subject # Views Created On
OllyDbg RaiseException Bug 7880     Monday, November 12 2012
Defeating Memory Breakpoints 8048     Monday, November 12 2012
SizeOfStackReserve As Anti-Attaching Trick 7059     Monday, November 5 2012
Virtual PC Detection Tricks 8315     Monday, October 29 2012
PAGE_EXECUTE_WRITECOPY As Anti-Debug Trick 7756     Friday, September 28 2012
Anti-Dumping - Part 3 8524     Saturday, September 8 2012
PE Header Major/MinorSubsystemVersion 8426     Sunday, August 5 2012
Native x86 User-mode System Calls Hooking 9670     Friday, July 27 2012
CreateRemoteThread vs. RtlCreateUserThread 10394     Saturday, June 30 2012
IDA Pro And CodeView Debug Info Bug 7991     Tuesday, June 26 2012
IDA Pro Bug 7834     Wednesday, June 20 2012
OllyDbg NumberOfSections Crash 7657     Friday, April 20 2012
GetModuleFileNameEx And Infinite Loops 4150     Saturday, March 31 2012
OllyDbg v1.10 And Wow64 6856     Saturday, March 31 2012
OllyDbg Resource Table Parsing Integer Overflow 3492     Thursday, March 29 2012
Anti-Dumping 3300     Saturday, March 24 2012
OllyDbg Section Name Crash 2467     Wednesday, March 21 2012
Visual Basic Malware - Part 1 2335     Wednesday, March 14 2012
OllyDbg v2.01 And TLS Callbacks 9438     Wednesday, March 7 2012
Collection Of OllyDbg Bugs And Exploits 1511     Friday, March 2 2012
OllyDbg Fake ImageName Bug 1876     Tuesday, February 21 2012
OllyDbg v1.10 And Hardware Breakpoints 30158     Monday, February 6 2012
Yet Another Anti-Debug Trick 12060     Tuesday, January 31 2012
An OllyDbg Bug Disables Software Breakpoints 8691     Friday, January 13 2012
Another OllyDbg Anti-Debug Trick 3082     Sunday, January 1 2012
A new Anti-Olly trick. 8925     Tuesday, December 27 2011
ICanAttach, a plugin to bypass anti-attaching tricks. 16236     Tuesday, December 13 2011
TLSCatch, An OllyDbg Plugin To Catch TLS Callbacks Easily 8370     Saturday, October 30 2010
svchost from A to zinc part5 4407     Wednesday, September 8 2010
svchost from A to zinc part4 5268     Monday, September 6 2010
svchost from A to Zinc part3 4776     Saturday, September 4 2010
svchost from A to Zinc part2 3941     Saturday, September 4 2010
svchost from A to Zinc 3091     Friday, September 3 2010
PE import tables scanner 4669     Friday, September 3 2010

There are 31,328 total registered users.


Recently Created Topics
[help] Unpacking VMP...
Mar/12
Reverse Engineering ...
Jul/06
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06
Question about memor...
Dec/12


Recent Forum Posts
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow
let 'IDAPython' impo...
sohlow
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n


Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM

oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

More ...


Recent Blog Comments
nieo on:
Mar/22
IAT Patcher - new tool for ...

djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit