AlSch092 / ModifyTLSCallbacks

Edit the program's TLS callbacks at runtime

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

ModifyTLSCallbacks

Edit the program's TLS callbacks at runtime (anti-debugging method)

The debugger will try to parse our modified TLS callback pointer when we change it to the same address as the image base, resulting in the debugger failing to load. Tested and working with x64dbg, and CE debugger. Please see ModifyTLSCallbacks.cpp for a simple example.

About

Edit the program's TLS callbacks at runtime

License:GNU General Public License v3.0


Languages

Language:C++ 100.0%