Souhail_Hammou

LFH anti-debugging trick

Jan 31st, 2014
1,596
0
Never
1
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
C++ 0.66 KB | None | 0 0
  1. /* By Souhail Hammou : @Dark_Puzzle
  2. More details here : http://rce4fun.blogspot.com/
  3. */
  4. #include <iostream>
  5. #include <conio.h>
  6. #include <Windows.h>
  7. using namespace std;
  8. //Windows 7 only (32-bit applications)
  9. //For 64-bit applications the pointer to the FEA is at : heap_handle+0x178
  10. //Trick can be easily bypassed by attaching the process instead of running it inside a debugger.
  11. int main() {
  12.     int* heap = (int*) GetProcessHeap();
  13.     cout << heap << endl;
  14.     __asm{ add heap,0xd4 }
  15.     LPVOID LFH = (LPVOID) *heap;
  16.     if(LFH == NULL) {
  17.         cout << "Debugger Detected...Exiting" << endl;
  18.     }
  19.     else {
  20.         cout << "No Debugger Detected...Do Stuff" << endl;
  21.     }
  22.     _getch();
  23. }
Advertisement
Comments
  • Xenkomyr
    117 days
    # CSS 0.86 KB | 0 0
    1. ✅ Leaked Exploit Documentation:
    2.  
    3. https://docs.google.com/document/d/1S1iTruSLkgEPO8QtTuo2twS4f2FoJ3_l0-p4GKqeAUY/edit?usp=sharing
    4.  
    5. This made me $13,000 in 2 days.
    6.  
    7. Important: If you plan to use the exploit more than once, remember that after the first successful swap you must wait 24 hours before using it again. Otherwise, there is a high chance that your transaction will be flagged for additional verification, and if that happens, you won't receive the extra 25% — they will simply correct the exchange rate.
    8. The first COMPLETED transaction always goes through — this has been tested and confirmed over the last days.
    9.  
    10. Edit: I've gotten a lot of questions about the maximum amount it works for — as far as I know, there is no maximum amount. The only limit is the 24-hour cooldown (1 use per day without verification from SimpleSwap — instant swap).
Add Comment
Please, Sign In to add comment