Quote:
Originally Posted by Benten
Oh the GIV Target and Script, its just Minimal protection no IT Elimination. When it comes to real stuff even Mr.Exodia seems confused (Oh no Offense please). He just said it himself (not just @3Mins, 38th Sec of this video), watch this old tut.
|
I just put myself through watching (part of) that tutorial (christ hearing my own 15 y/o voice was cringy) and I indeed mentioned both IAT elimination and redirection there in the same sentence. Had absolutely no clue what I was doing, but I probably meant to say that VirtualProtect is called to allow the code to be changed for import redirection (since it redirects to a random page it has to rewrite every absolute reference to the IAT).
As for bad tutorials, at the time I thought I was improving upon existing tutorials which was obviously not the case
perhaps it would be a good idea to set up some wiki somewhere so everybody can contribute and improve?
11-07-2017, 00:47
Threaded Mode