Dailydave mailing list archives

Re: Debugger effects Windows Heap?

From: Blue Boar <BlueBoar () thievco com>
Date: Mon, 05 Jun 2006 10:01:35 -0700

http://www.immunitysec.com/pipermail/dailydave/2005-October/002585.html

RaMatkal wrote:

It was recently suggested to me that a debugged processes heap operatesdifferently to when the process is not being debugged (Windows) evenwhen you 'attach' with the debugger. (Thus the recomendation to switchoff the BeingDebugged variable in the PEB when writing exploits).
Firstly, anyone know if this is true?

Secondly, anyone know where i can find any info on this?

Thanks in advance,

RaMatkal

Current thread:

Probably the wrong forum... Python Polynomial Manipulation ? Halvar Flake (May 30)
- Re: Probably the wrong forum... Python Polynomial Manipulation ? Arun Koshy (May 31)
- Re: Probably the wrong forum... Python Polynomial Manipulation ? Arun Koshy (May 31)
- Re: Probably the wrong forum... Python Polynomial Manipulation ? Dan Moniz (May 31)
- Re: Probably the wrong forum... Python Polynomial Manipulation ? Nicholas Andre DePetrillo (May 31)
- Re: Probably the wrong forum... Python Polynomial Manipulation ? Pete Markowsky (May 31)
- Re: Probably the wrong forum... Python Polynomial Manipulation ? Will Beers (May 31)
  - Debugger effects Windows Heap? RaMatkal (Jun 05)
    - Re: Debugger effects Windows Heap? Blue Boar (Jun 05)
    - RE: Debugger effects Windows Heap? Dave Korn (Jun 05)
    - RE: Debugger effects Windows Heap? Aleksander P. Czarnowski (Jun 05)