3 ms·
http://www.triplefault.io/2017/08/detecting-debuggers-by-abusing-bad.html http://www.triplefault.io/2017/08/detecting-debuggers-by-abu... >Since Windows will i
by j_s 9y ago
http://www.triplefault.io/2017/08/detecting-debuggers-by-abusing-bad.html http://www.triplefault.io/2017/08/detecting-debuggers-by-abu...
>Since Windows will incorrectly assume that our int 3 exception was generated from the single-byte variant, it is possible to confuse the debugger into reading "extra" memory. We leverage this inconsistency to trip a "guard page" of sorts.