News for hackers. Stuff that matters.

A comment on Any sufficiently advanced uninstaller is indistinguishable from malware. Parent comment

Re:Any sufficiently advanced uninstaller is indistinguishabl... by jborean93 on Wednesday September 13, 2023 @02:51AM (#37493084)
You essentially replace a function with your own. The project is at https://github.com/microsoft/Detours.

I’ve created a PowerShell module that wraps this library to make it easier to hook functions on the fly for testing https://github.com/jborean93/PSDetour. For example I used it to capture TLS session data for decryption https://gist.github.com/jborean93/6c1f1b3130f2675f1618da5663... as well as create an strace like functionality for various Win32 APIs (still expanding as I find more use cases) https://github.com/jborean93/PSDetour-Hooks

[ Parent | on HN ]
Re:Any sufficiently advanced uninstaller is indistinguishabl... by grepfru_it on Wednesday September 13, 2023 @03:42AM (#37493449)
> as well as create an strace like functionality for various Win32 APIs

Yes please. Thank you for this

[ Parent | on HN ]