Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:




dailydave logo Dailydave mailing list archives

Re: Debugger effects Windows Heap?
From: Blue Boar <BlueBoar () thievco com>
Date: Mon, 05 Jun 2006 10:01:35 -0700

http://www.immunitysec.com/pipermail/dailydave/2005-October/002585.html

RaMatkal wrote:
It was recently suggested to me that a debugged processes heap operates differently to when the process is not being debugged (Windows) even when you 'attach' with the debugger. (Thus the recomendation to switch off the BeingDebugged variable in the PEB when writing exploits).

Firstly, anyone know if this is true?

Secondly, anyone know where i can find any info on this?

Thanks in advance,

RaMatkal


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]