博客记录了OllyDBG插件的更新历史。2005年12月15日v0.11版本完成PEB补丁，处理调试器检查相关问题，点击项目会分配1024b内存且不释放；2005年12月14日v0.1版本完成DontChangeDRx功能设置，禁止ZwSetInformationThread和ZwQueryInformationProcess特定操作。
================
history
================
2005.12.15 v0.11
patch PEB done.
IsDebuggerPresent,ProcessHeap(GetProcessHeap) and NtGlobalFlag are
gets values from PEB to check debugger at the same way, so I patch
for the same way.
After click this item, plugin will alloc a 1024b memory and will not
free it, this thing is happen because the characteristic of OllyDBG,
so, don't worry about it:)
2005.12.14 v0.1
DontChangeDRx done.
DontChangeDRx will set OllyDBG can/or cannot change DRx.
ban ZwSetInformationThread done.
Made the ZwSetInformationThread just 'retn 10'.
ban ZwQueryInformationProcess done.
Make the return value of ZwQueryInformationProcess always be 0.
http://bbs.pediy.com/upload/2005/35/files/anti-anti.rar
history
================
2005.12.15 v0.11
patch PEB done.
IsDebuggerPresent,ProcessHeap(GetProcessHeap) and NtGlobalFlag are
gets values from PEB to check debugger at the same way, so I patch
for the same way.
After click this item, plugin will alloc a 1024b memory and will not
free it, this thing is happen because the characteristic of OllyDBG,
so, don't worry about it:)
2005.12.14 v0.1
DontChangeDRx done.
DontChangeDRx will set OllyDBG can/or cannot change DRx.
ban ZwSetInformationThread done.
Made the ZwSetInformationThread just 'retn 10'.
ban ZwQueryInformationProcess done.
Make the return value of ZwQueryInformationProcess always be 0.
http://bbs.pediy.com/upload/2005/35/files/anti-anti.rar
扫一扫
1583
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
