📚 OpenRCE is preserved as a read-only archive. Launched at RECon Montreal in 2005. Registration and posting are disabled.








Flag: Tornado! Hurricane!

ASM Bots: Core War, rebooted. x86 bots fight in shared memory. asmbots.io

Blogs >> waleedassar's Blog

Created: Tuesday, January 29 2013 01:46.16 CST  
Direct Link, View / Make / Edit Comments
Wow64-Specific Anti-Debug Trick
Author: waleedassar # Views: 20392

http://waleedassar.blogspot.com/2013/01/wow64-specific-anti-debug-trick.html

Created: Sunday, January 27 2013 02:59.16 CST  
Direct Link, View / Make / Edit Comments
Injecting 64-Bit DLL Into 32-Bit Process
Author: waleedassar # Views: 21583

http://waleedassar.blogspot.com/2013/01/wow64logdll.html

Created: Sunday, December 9 2012 04:28.18 CST  
Direct Link, View / Make / Edit Comments
Windows Internals: SkipThreadAttach
Author: waleedassar # Views: 22262

http://www.waleedassar.blogspot.com/2012/12/skipthreadattach.html

Created: Saturday, November 24 2012 19:54.12 CST  
Direct Link, View / Make / Edit Comments
SuppressDebugMsg As Anti-Debug Trick
Author: waleedassar # Views: 23655

My latest blog post where i explain a new anti-debug trick.

http://waleedassar.blogspot.com/2012/11/suppressdebugmsg-as-anti-debug-trick.html

Have fun

Created: Friday, November 23 2012 20:35.07 CST  
Direct Link, View / Make / Edit Comments
Hiding Threads From Debuggers
Author: waleedassar # Views: 22204

My lastest blog post where i discuss in detail the topic of hiding threads from debuggers.

http://waleedassar.blogspot.com/2012/11/hidding-threads-from-debuggers.html

Have fun.


Archived Entries for waleedassar
Subject # Views Created On
OllyDbg RaiseException Bug 9177     Monday, November 12 2012
Defeating Memory Breakpoints 9414     Monday, November 12 2012
SizeOfStackReserve As Anti-Attaching Trick 8416     Monday, November 5 2012
Virtual PC Detection Tricks 9677     Monday, October 29 2012
PAGE_EXECUTE_WRITECOPY As Anti-Debug Trick 8151     Friday, September 28 2012
Anti-Dumping - Part 3 8899     Saturday, September 8 2012
PE Header Major/MinorSubsystemVersion 10868     Sunday, August 5 2012
Native x86 User-mode System Calls Hooking 11375     Friday, July 27 2012
CreateRemoteThread vs. RtlCreateUserThread 10806     Saturday, June 30 2012
IDA Pro And CodeView Debug Info Bug 8299     Tuesday, June 26 2012
IDA Pro Bug 8119     Wednesday, June 20 2012
OllyDbg NumberOfSections Crash 7930     Friday, April 20 2012
GetModuleFileNameEx And Infinite Loops 4277     Saturday, March 31 2012
OllyDbg v1.10 And Wow64 7075     Saturday, March 31 2012
OllyDbg Resource Table Parsing Integer Overflow 3721     Thursday, March 29 2012
Anti-Dumping 3478     Saturday, March 24 2012
OllyDbg Section Name Crash 2617     Wednesday, March 21 2012
Visual Basic Malware - Part 1 2481     Wednesday, March 14 2012
OllyDbg v2.01 And TLS Callbacks 11105     Wednesday, March 7 2012
Collection Of OllyDbg Bugs And Exploits 1670     Friday, March 2 2012
OllyDbg Fake ImageName Bug 2064     Tuesday, February 21 2012
OllyDbg v1.10 And Hardware Breakpoints 32675     Monday, February 6 2012
Yet Another Anti-Debug Trick 14585     Tuesday, January 31 2012
An OllyDbg Bug Disables Software Breakpoints 11207     Friday, January 13 2012
Another OllyDbg Anti-Debug Trick 3239     Sunday, January 1 2012
A new Anti-Olly trick. 10961     Tuesday, December 27 2011
ICanAttach, a plugin to bypass anti-attaching tricks. 18417     Tuesday, December 13 2011
TLSCatch, An OllyDbg Plugin To Catch TLS Callbacks Easily 8608     Saturday, October 30 2010
svchost from A to zinc part5 4574     Wednesday, September 8 2010
svchost from A to zinc part4 5420     Monday, September 6 2010
svchost from A to Zinc part3 4949     Saturday, September 4 2010
svchost from A to Zinc part2 4089     Saturday, September 4 2010
svchost from A to Zinc 3246     Friday, September 3 2010
PE import tables scanner 4848     Friday, September 3 2010

There are 31,328 total registered users.


Recently Created Topics
[help] Unpacking VMP...
Mar/12
Reverse Engineering ...
Jul/06
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06
Question about memor...
Dec/12


Recent Forum Posts
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow
let 'IDAPython' impo...
sohlow
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n


Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM

oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

More ...


Recent Blog Comments
nieo on:
Mar/22
IAT Patcher - new tool for ...

djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit