Conversation

StealthHook - A method for hooking functions without modifying memory protection. This tool automatically discovers writable global pointers/vtable entries that are nested within the target function, enabling stealthy function hooking and interception. x86matthew.com/view_post?id=s

263

764

namazso

@namazso

Heh, I used this technique for a long time, and so did Steam's CEG DRM from 2008. Sadly (or rather not) CET will kill this. Although malware "developers" have been stuck on 32-bit land for the past 20 years, so they probably won't feel a thing.

1:59 AM · Dec 11, 2022

Bookmark

that's interesting - i originally used this method to bypass punkbuster (not very difficult!) on quake3-based games a long time ago, it always served me well. i will check out CET, i suspected that the modern control-flow features would eventually block this method.

vx-underground

@vxunderground

Dec 11, 2022

Namazso, you've established a reputation of being profoundly condescending and negative in nearly you do. You're truly a beacon of light. You've unlocked 1 angry monkey with a stick.

GIF