3 ms·
If the shellcode doesn't run, then it can't respond to the server's challenge-response query. And the server knows the user is cheating.
by phire 7y ago
If the shellcode doesn't run, then it can't respond to the server's challenge-response query.
And the server knows the user is cheating.
- saagarjha 7y agoI didn't see a challenge-response in the code presented. If there is one then I guess that would help in this scenario.
- nneonneo 7y agoIt doesn’t really even have to be a real challenge-response since the server controls the shellcode. Just have the shellcode unconditionally submit something (maybe a value that requires a minimum amount of computation or WinAPI sanity checks). If you don’t run that bit of code, down comes the ban hammer.