OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: [Dailydave] Debugger effects Windows Heap?

From: Aleksander P. Czarnowski (alekcavet.com.pl)
Date: Mon Jun 05 2006 - 18:04:02 CDT


This might be what you are looking for:
http://cgdev.iworld.com/forum/printthread.php?t=267256
Cheers,
Alex Czarnowski
AVET INS

> -----Original Message-----
> From: RaMatkal [mailto:RaMatkalhotmail.com]
> Sent: Sunday, June 04, 2006 10:22 AM
> To: dailydave
> Subject: [Dailydave] Debugger effects Windows Heap?
>
> It was recently suggested to me that a debugged processes
> heap operates differently to when the process is not being
> debugged (Windows) even when you 'attach' with the debugger.
> (Thus the recomendation to switch off the BeingDebugged
> variable in the PEB when writing exploits).
>
> Firstly, anyone know if this is true?
>
> Secondly, anyone know where i can find any info on this?
>
> Thanks in advance,
>
> RaMatkal
>