![]() |
DbgHook plugin for Olly 2.1 hooks the classics functions used for antidebug��s tricks
1 Attachment(s)
DbgHook is plugin for Olly 2.1 that hooks the classics functions used for antidebug's tricks, the driver is for Windows 7 x64 (tested on build 7600.16385.1), so for running it need to be registered and PatchGuard disabled (you can use tools like DSEO).
the plugin lets you control the following options: -Flags -Time (dynamic fake time,it freeze process's timers when you stop the execution,you can also chose a time's multiplication factor for clocks and RDTSC) -Windows (hides Olly's window to debugged process) -NtQuerySystemInformation -NtSetDebugFilterState -NtQueryInformationProcess -NtOpenProcess -NtClose -NtUserBlockInput -OutputDebugString -NtTerminateProcess -NtQueryInformationThread -NtSetInformationThread -Driver's name the plugin by walter1945 from _https://quequero.org from attachment(with builds and sources) |
the code is very hacked and uncommented, but it looks like a nice thing :)
|
Quote:
I also decided to publish the source for two reason: -I'm not a good programmer so other people like me can learn how this tools works and how build a similar. -I hope other people of comunity contribute adding or improving the plugin. |
| All times are GMT +8. The time now is 07:07. |
Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX