Dailydave mailing list archives

RE: Debugger effects Windows Heap?

From: "Dave Korn" <dave.korn () artimi com>
Date: Mon, 5 Jun 2006 17:02:35 +0100

On 04 June 2006 09:22, RaMatkal wrote:

It was recently suggested to me that a debugged processes heap operates
differently to when the process is not being debugged (Windows) even when
you 'attach' with the debugger. (Thus the recomendation to switch off the
BeingDebugged variable in the PEB when writing exploits).

Firstly, anyone know if this is true?

Secondly, anyone know where i can find any info on this?


  Definitely.  Search MSDN, I've read about it there although I'm afraid I
can't find any decent search terms off the top of my head.

    cheers,
      DaveK
-- 
Can't think of a witty .sigline today....

Current thread:

Probably the wrong forum... Python Polynomial Manipulation ? Halvar Flake (May 30)
- Re: Probably the wrong forum... Python Polynomial Manipulation ? Arun Koshy (May 31)
- Re: Probably the wrong forum... Python Polynomial Manipulation ? Arun Koshy (May 31)
- Re: Probably the wrong forum... Python Polynomial Manipulation ? Dan Moniz (May 31)
- Re: Probably the wrong forum... Python Polynomial Manipulation ? Nicholas Andre DePetrillo (May 31)
- Re: Probably the wrong forum... Python Polynomial Manipulation ? Pete Markowsky (May 31)
- Re: Probably the wrong forum... Python Polynomial Manipulation ? Will Beers (May 31)
  - Debugger effects Windows Heap? RaMatkal (Jun 05)
    - Re: Debugger effects Windows Heap? Blue Boar (Jun 05)
    - RE: Debugger effects Windows Heap? Dave Korn (Jun 05)
    - RE: Debugger effects Windows Heap? Aleksander P. Czarnowski (Jun 05)