PhantOm是一个用于隐藏OllyDbg的插件，包含驱动extremehide.sys，防止多种检测方法。它修复了内存断点的错误，新增了自定义处理异常功能，并提供对GetProcessTimes等函数的保护。适用于Windows 2000 SP4和XP SP2，使用前建议关闭可能阻止驱动加载的软件。
[PhantOm plugin 1.25 ]
by Hellsp @ wn & Archer
/ / spring aggravation:
/ / IHA! PEOPLE WITH ALL DAY! SPRING WALKS! BEER begins! GULYAYTE DEVUSHKAMI X!
/ / ZHIVITE FULL LIFE!
| Privety fly to:
| Bronco, kioresk, RSI, lord_Phoenix, HoBleen, Grim Fandango,
| Guru.eXe, vad8787, PE_Kill.
————————————————– —————————
The plug to hide OllyDbg (with driver).
Helps detection of the following methods:
/ / driver - extremehide.sys
[+] NtQueryInformationProcess.
[+] SetUnhandledExceptionFilter.
[+] OpenProcess.
[+] Invalid Handle.
[+] NtSetInformationThread.
[+] RDTSC.
[+] NtYieldExecution.
[+] NtQueryObject.
[+] NtQuerySystemInformation.
[+] Windows hide.
[+] GetProcessTimes.
[+] NtSetContextThread.
最低0.47元/天 解锁文章
2532
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
