Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Question regarding detectability #4

Open
zaryar opened this issue Sep 26, 2023 · 1 comment
Open

Question regarding detectability #4

zaryar opened this issue Sep 26, 2023 · 1 comment

Comments

@zaryar
Copy link

zaryar commented Sep 26, 2023

I've been active in the cheating scene for a while now, but this would be my introduction to kernel level cheating.
I've already done some research, data pointer hooked functions are mostly detected in the assembly code.
Are there any other detection vectors I need to look out for?

@Ch40zz
Copy link

Ch40zz commented Sep 29, 2023

A well hidden data ptr that isnt part of some common table is probably safe.
One problem can be stack walking. NMIs can be used to stackwalk for example.
Leaving executable memory mapped is also not great.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants