Reverse Engineering a Software Crack

Re:Reverse Engineering a Software Crack by cedws on Tuesday April 23, 2024 @07:02PM (#40138358)

Very interesting. I really should get back into RE.

Selfish question for a project of my own: is there any way to magically gain early code execution in a process on Windows other than a shim DLL? I'm too lazy to write one to pass through the all exports (reflective shim DLL possible...?)

[ Parent | on HN ]

Re:Reverse Engineering a Software Crack by chc4 on Tuesday April 23, 2024 @07:22PM (#40138538)

CreateProcess the victim with CREATE_SUSPENDED, do whatever code patching, then ResumeThread it. Pretty sure you can even CreateRemoteThread into the victim for DLL injection, since it just suspends the primary thread, and then patch "yourself" in DllMain instead of having to do remote memory calls.

[ Parent | on HN ]

Re:Reverse Engineering a Software Crack by reeeeaway on Wednesday April 24, 2024 @02:10AM (#40141189)

Alternatively, give frida a go. It handles all the hard parts for you magically and then you get to instrument the binary with Javascript :) mixing dynamic and static techniques is really powerful

[ Parent | on HN ]