Prev: 2 questions about memory mapped files
Next: Timer-queue timer callback proc and re-entrancy
From: tim on 11 Mar 2010 06:19
Hi,

I have an application checking if debugger is running. If so the application
just exits. Is there a way to debug this kind of application?

Thanks,
tim


From: Francois PIETTE on 11 Mar 2010 07:46
> I have an application checking if debugger is running. If so the
> application just exits. Is there a way to debug this kind of application?

Do you have the application source code ?

--
francois.piette(a)overbyte.be
The author of the freeware multi-tier middleware MidWare
The author of the freeware Internet Component Suite (ICS)
http://www.overbyte.be


From: m on 11 Mar 2010 18:58
Yes.

BTW: If you tell us more about what you are trying to do, so that to us you
look less like a hacker, you will likely receive more useful replies ;)

"tim" <barus(a)poczta.onet.pl> wrote in message
news:hnajjr$c7l$1(a)news.onet.pl...
> Hi,
>
> I have an application checking if debugger is running. If so the
> application just exits. Is there a way to debug this kind of application?
>
> Thanks,
> tim
>
From: Alexander Grigoriev on 11 Mar 2010 23:14

Of course there is a way. You can connect a debugger in non-intrusive way.
You can inject a thread and have it suspend all other threads. You can
suspend the whole process and peek around its frozen memory. All that
anti-debugging is just an exercise in futility.

"m" <m(a)b.c> wrote in message
news:%232%23C2aXwKHA.1692(a)TK2MSFTNGP04.phx.gbl...
> Yes.
>
> BTW: If you tell us more about what you are trying to do, so that to us
> you look less like a hacker, you will likely receive more useful replies
> ;)
>
> "tim" <barus(a)poczta.onet.pl> wrote in message
> news:hnajjr$c7l$1(a)news.onet.pl...
>> Hi,
>>
>> I have an application checking if debugger is running. If so the
>> application just exits. Is there a way to debug this kind of application?
>>
>> Thanks,
>> tim
>>


From: m on 13 Mar 2010 21:09
Obviously - with physical access to the machine, there is no ultimately
successful anti-debugging device. But the OP is asking how to defeat one;
and presumably one that has been implemented by someone else in some
software that he would like to debug. If he doesn't know how to do this
already, then likely he shouldn't be doing it at all. But if what he really
was trying to ask was how to build an anti-debugging device for his program,
then there are a few ways to make a program more difficult to debug or
disassemble that he might consider.

"Alexander Grigoriev" <alegr(a)earthlink.net> wrote in message
news:eFHvypZwKHA.1692(a)TK2MSFTNGP04.phx.gbl...
> Of course there is a way. You can connect a debugger in non-intrusive way.
> You can inject a thread and have it suspend all other threads. You can
> suspend the whole process and peek around its frozen memory. All that
> anti-debugging is just an exercise in futility.
>
> "m" <m(a)b.c> wrote in message
> news:%232%23C2aXwKHA.1692(a)TK2MSFTNGP04.phx.gbl...
>> Yes.
>>
>> BTW: If you tell us more about what you are trying to do, so that to us
>> you look less like a hacker, you will likely receive more useful replies
>> ;)
>>
>> "tim" <barus(a)poczta.onet.pl> wrote in message
>> news:hnajjr$c7l$1(a)news.onet.pl...
>>> Hi,
>>>
>>> I have an application checking if debugger is running. If so the
>>> application just exits. Is there a way to debug this kind of
>>> application?
>>>
>>> Thanks,
>>> tim
>>>
>
>
 |  Next  |  Last
Pages: 1 2
Prev: 2 questions about memory mapped files
Next: Timer-queue timer callback proc and re-entrancy