Re:I Can Crack Your App With Just A Shell (And How To Stop Me)
by daeken on Monday January 17, 2011 @05:52PM
(#2113798)
To avoid having to modify the binary (and thus deal with checksums and the like), you can alternatively break on ptrace where the first arg == PT_DENY_ATTACH, then have it immediately return. Easy to do in GDB.
[ Parent
| on HN ]
There are no comments on this comment yet.