We’ll then get into some OS specific methods that abuse some mishandling of descriptor table information in WoW64, and ways to block custom methods of syscall hooking like technique documented on the Reverse Engineering blog.
We’ll then get into a side-channel attack that can be employed - platform agnostic - that is highly efficient. This post will cover a few standard detection methods that can be used for both Intel/AMD offering an explanation, a mitigation, and a general rating of efficacy. To kick off the article it’s important for those outside of the game hacking arena to understand the usage of hypervisors for cheating, and the importance of anti-cheats staying on top of cheat providers using them.
Daax, iPower, ajkhoury, drew Apr 13, 2020Īs our first article addressing the various methods of detecting the presence of VMMs, whether commercial or custom, we wanted to be thorough and associate it with our research on popular anti-cheat vendors.
0 kommentar(er)
