OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Dailydave] Debugger effects Windows Heap?

From: Blue Boar (BlueBoarthievco.com)
Date: Mon Jun 05 2006 - 12:01:35 CDT


http://www.immunitysec.com/pipermail/dailydave/2005-October/002585.html

RaMatkal wrote:
> It was recently suggested to me that a debugged processes heap operates
> differently to when the process is not being debugged (Windows) even
> when you 'attach' with the debugger. (Thus the recomendation to switch
> off the BeingDebugged variable in the PEB when writing exploits).
>
> Firstly, anyone know if this is true?
>
> Secondly, anyone know where i can find any info on this?
>
> Thanks in advance,
>
> RaMatkal