DLL Injection, patching and other
DLL Injection, patching and other
How Enigma deals with this?
Re: DLL Injection, patching and other
After testing, I found that enigma cant fight aganist debuggers and DLL injection.
I am succsesfuly injected DLL, attached ollydbg (no steath plugins), and patched some memory.
I am succsesfuly injected DLL, attached ollydbg (no steath plugins), and patched some memory.
Re: DLL Injection, patching and other
For the debuggers check there is Anti-Debugger feature an a numerous anti-debugger plugins.
As regarding dll injection and memory editing, I believe you won't find solution ever.
There are methods to avoid dll injection, but they are working not for all injection methods.
For the memory editing nothing will help you. To avoid this, you should understand what code the cracker modify, why it is being modified, and, for example, apply a code virtualization for it.
We've been asked these questions too much times. It's interesting by game distributers, right?
So client executables of the games are the same. Cracker may take a clean exe, understand how it works, and make a memory editing cheat. To protect such executable, you should not find a solution to avoid memory editing because you'll never find it. You should understand what memory is modified, is it code or data, and, for example, if it is a code, use Virtual Machine and apply code virtualization to the critical code parts.
As regarding dll injection and memory editing, I believe you won't find solution ever.
There are methods to avoid dll injection, but they are working not for all injection methods.
For the memory editing nothing will help you. To avoid this, you should understand what code the cracker modify, why it is being modified, and, for example, apply a code virtualization for it.
We've been asked these questions too much times. It's interesting by game distributers, right?
So client executables of the games are the same. Cracker may take a clean exe, understand how it works, and make a memory editing cheat. To protect such executable, you should not find a solution to avoid memory editing because you'll never find it. You should understand what memory is modified, is it code or data, and, for example, if it is a code, use Virtual Machine and apply code virtualization to the critical code parts.
Re: DLL Injection, patching and other
Actually I developing anti-hacking software for server. I need just to prevent memory edits, or make old offsets not compatble.
Themida has that features. But it have troubles with AV software, the only reason I looked on your protector.
Enigma good only for analysing prevention.
What software or methods you can advise?
Themida has that features. But it have troubles with AV software, the only reason I looked on your protector.
Enigma good only for analysing prevention.
What software or methods you can advise?
Re: DLL Injection, patching and other
As I wrote, there is no methods that allows to avoid memory editing.
To make the old offsets invalid, you have to use virtual machine function that applies code virtualization.
Current Virtual Machine requires map file with the list of functions to allow you to select necessary. If you do not have it, I recommend to create it manually (in case you know functions offsets) or use IDA disassembler that allows to create a map file.
To make the old offsets invalid, you have to use virtual machine function that applies code virtualization.
Current Virtual Machine requires map file with the list of functions to allow you to select necessary. If you do not have it, I recommend to create it manually (in case you know functions offsets) or use IDA disassembler that allows to create a map file.