http://dhdh1.springnote.com/pages/3299025

  1. PEB.BeingDebugged Flag: IsDebuggerPresent()
  2. PEB.NtGlobalFlag,Heap.HeapFlags,Heap.ForceFlags
  3. CheckRemoteDebuggerPresent() / NtQueryInformationProcess()
  4. Debugger Interrupts
  5. Timing Check
  6. SeDebugPrivilege
  7. Parent Process
  8. NtQueryObject
  9. Debugger Windows Search
  10. Debugger Process Search
  11. Device Driver 이름으로 검색
  12. OllyDbg:Guard Pages
  13. Checksum
  14. Garbage Code And Code Permutation
  15. Anti-Disassembly
  16. Misdirection and Stopping Execution via Exception
  17. Blocking Input
  18. ThreadHideFromDebugger
  19. Unhandled Exception Filter
  20. OutputDebugString()
  21. Process Injection
  22. Debugger Blocker
  23. TLS Callbacks
  24. Stolen Byte
  25. API Redirection
  26. Multi-Threaded Packer
  27. Virtual Machines

밑에 정리된게 조금 중복된거 같아도 이거 공부하면 꽤 도움이 될 듯 합니다. 하나하나~

Posted by 비회원

댓글을 달아 주세요