New RCE blog

[Aguila]

I thought that it is nice to have an own blog... so here it is. Bookmark it

 

https://ntquery.wordpress.com

[metr0]

Done. Give us some more content in return, will you?

[Aguila]

yep, started now with 3 articles. Hope they are interesting!

[kao]

Bookmarked.

[Dragon Palace]

Nothing special.

[Teddy Rogers]

  On 3/29/2014 at 12:32 PM, Aguila said:

I thought that it is nice to have an own blog... so here it is. Bookmark it

 

https://ntquery.wordpress.com

 

Would this have worked...

 

https://forum.tuts4you.com/blog/aguila-ntquery/

 

Ted.

[Aguila]

  On 3/30/2014 at 1:27 PM, Teddy Rogers said:

Would this have worked...

 

https://forum.tuts4you.com/blog/aguila-ntquery/

 

Ted.

ah you mean using this board as blog?

Maybe... I am just testing it a little bit. If people dont like it, I will stop anyway.

 

 

Here is something new again:

https://ntquery.wordpress.com/2014/03/30/anti-debug-ntqueryobject/

 

@chixiaojie

Please tell us your strong anti-debug stuff...

[ahmadmansoor]

nice blog ,and Good start .

  Quote

 

@chixiaojie

Please tell us your strong anti-debug stuff...

I think I can give u a very good example if u want (and allow me ) . I can upload the program for u .

the protection depended on QueryPerformanceCounter , GetTickCount , QueryPerformanceFrequency ,

to defeat HW-BP and BP and step in step out

let me know if u want to study it    .

by the way the target not protected by any protector .

Good luck in ur new blog - I have add it to our best sites of exetools site list -

[Aguila]

@ahmadmansoor

 

I am currently working on a ring3 hide plugin/tool and that is why I am currently looking for anti-debug stuff. I know that there is TitanHide, but sometimes you don't want to install a driver and it cannot protect against things like BlockInput.

[HDzero]

well done.

hoping you can upload the full tutorial,no matter old or new