Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

To avoid having to modify the binary (and thus deal with checksums and the like), you can alternatively break on ptrace where the first arg == PT_DENY_ATTACH, then have it immediately return. Easy to do in GDB.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: