Patch in memory .net app

		Exetools > General > General Discussion
Patch in memory .net app

07-03-2018, 19:00

taos

The Art Of Silence

Join Date: Aug 2004

Location: In front of my screen

Posts: 580

Rept. Given: 65

Rept. Rcvd 54 Times in 19 Posts

Thanks Given: 69

Thanks Rcvd at 137 Times in 36 Posts

Patch in memory .net app

Hi, I have an obfuscated .net app. This app use WMI (Select * From Win32_processor) to get motherboard serial numer and CPUID. I don't want to patch directly EXE (it has several checks to avoid this) so I got 2 vectors of attack:

a) Patch WMI to return always the same values in different hardware

Anyone has info about this?

b) Patch in memory using a loader for .net

Anyone has info too?
(I have seen how to hook functions but it always make changes at EXE so is not valid for me)

Thanks

__________________
omnino lo qui quae que quod somos es pulvis en el ventus.
TAOS

-The opposite of courage in our society is not cowardice, but conformity-

« Previous Thread | Next Thread »

Thread Tools
Show Printable Version Email this Page
Display Modes
Switch to Linear Mode Switch to Hybrid Mode Threaded Mode

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is Off HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
.NET dll Memory Patch	Avi_RE	General Discussion	0	10-14-2023 16:46
Somebody know..., Get a memory value and patch-cut	s3ct0r	General Discussion	0	07-15-2005 03:50

All times are GMT +8. The time now is 23:07.