3 ms·
Guard pages are for the process that creates them, they're not for the other processes that try to read the memory.
by Dwedit 6mo ago
Guard pages are for the process that creates them, they're not for the other processes that try to read the memory.
- dvt 6mo agoAbsolutely wrong. Are we writing the same code here? Page guards are for all userspace access. (In fact, I think kernel space might also trigger them, but can be circumvented. PS: I'm being polite :) Kernel space 100% triggers them, but can be cleverly circumvented by fucking with logs.)
- Hikikomori 6mo agoCould you not use VirtualProtectEx to strip PAGE_GUARD? Even so, none if these methods offer protection, at best you can get some detection, but that doesn't matter when they got your passwords already.
- dvt 6mo ago[dead]