RFC - Dilemma of sharing knowledge
-
Hello all Thanks to my friend, a few days ago, I came across a Microsoft Research's product - Detours. Though binary patching (to modify program code functionality) has been there since the 80s, Detours makes it painless for us. It's ALMOST transparent ! Please visit Microsoft Research's site for more details. Due to the philosophy of CodeProject, I wish to share the knowledge that I have gained using Detours with you all. However, as with anything , the information that I am willing to share might have considerable impact on Win32 security. You got it - I may unintentionally land up helping crackers. Yet, the information will no doubt help authentic developers in their daily work. You see - using Detours, you do not even need the source code in order to extend the functionality of an existing program ! Detours is NOT supported by Microsoft at all, and will work ONLY on WinNT architecture, except the binary rewriting function for adding payloads and modifying of import tables of Detours which ALSO works on Win9x. I am at a loss as to what I should be doing. I really would not like wasting my time writing articles which Chris and his group will not be able to publish on this great site. I have put up a plan of articles at http://www.geocities.com/kbshankar2000/ArticleSchedule.html. All source will be in form of C++/Win32 API using VS6 Project. Please send in your comments till the 29th of March. Based on all your feedback, I will take furthur action. Regards, and thanks for reading Kamal Shankar "God then made two great lights; the greater light to rule the day, and the less light to rule the night" - Genesis 47:3
-
Hello all Thanks to my friend, a few days ago, I came across a Microsoft Research's product - Detours. Though binary patching (to modify program code functionality) has been there since the 80s, Detours makes it painless for us. It's ALMOST transparent ! Please visit Microsoft Research's site for more details. Due to the philosophy of CodeProject, I wish to share the knowledge that I have gained using Detours with you all. However, as with anything , the information that I am willing to share might have considerable impact on Win32 security. You got it - I may unintentionally land up helping crackers. Yet, the information will no doubt help authentic developers in their daily work. You see - using Detours, you do not even need the source code in order to extend the functionality of an existing program ! Detours is NOT supported by Microsoft at all, and will work ONLY on WinNT architecture, except the binary rewriting function for adding payloads and modifying of import tables of Detours which ALSO works on Win9x. I am at a loss as to what I should be doing. I really would not like wasting my time writing articles which Chris and his group will not be able to publish on this great site. I have put up a plan of articles at http://www.geocities.com/kbshankar2000/ArticleSchedule.html. All source will be in form of C++/Win32 API using VS6 Project. Please send in your comments till the 29th of March. Based on all your feedback, I will take furthur action. Regards, and thanks for reading Kamal Shankar "God then made two great lights; the greater light to rule the day, and the less light to rule the night" - Genesis 47:3
There is considerable information on Detours in the public domain - like this research paper so I don't think you'd be contributing to the downfall of civilisation with the articles you are proposing... '--8<------------------------ Ex Datis: Duncan Jones Merrion Computing Ltd
-
Hello all Thanks to my friend, a few days ago, I came across a Microsoft Research's product - Detours. Though binary patching (to modify program code functionality) has been there since the 80s, Detours makes it painless for us. It's ALMOST transparent ! Please visit Microsoft Research's site for more details. Due to the philosophy of CodeProject, I wish to share the knowledge that I have gained using Detours with you all. However, as with anything , the information that I am willing to share might have considerable impact on Win32 security. You got it - I may unintentionally land up helping crackers. Yet, the information will no doubt help authentic developers in their daily work. You see - using Detours, you do not even need the source code in order to extend the functionality of an existing program ! Detours is NOT supported by Microsoft at all, and will work ONLY on WinNT architecture, except the binary rewriting function for adding payloads and modifying of import tables of Detours which ALSO works on Win9x. I am at a loss as to what I should be doing. I really would not like wasting my time writing articles which Chris and his group will not be able to publish on this great site. I have put up a plan of articles at http://www.geocities.com/kbshankar2000/ArticleSchedule.html. All source will be in form of C++/Win32 API using VS6 Project. Please send in your comments till the 29th of March. Based on all your feedback, I will take furthur action. Regards, and thanks for reading Kamal Shankar "God then made two great lights; the greater light to rule the day, and the less light to rule the night" - Genesis 47:3
Patching exe's is old news. If you wish to write about it then simply post it here. It's not exactly a matter of national security. cheers, Chris Maunder
-
Hello all Thanks to my friend, a few days ago, I came across a Microsoft Research's product - Detours. Though binary patching (to modify program code functionality) has been there since the 80s, Detours makes it painless for us. It's ALMOST transparent ! Please visit Microsoft Research's site for more details. Due to the philosophy of CodeProject, I wish to share the knowledge that I have gained using Detours with you all. However, as with anything , the information that I am willing to share might have considerable impact on Win32 security. You got it - I may unintentionally land up helping crackers. Yet, the information will no doubt help authentic developers in their daily work. You see - using Detours, you do not even need the source code in order to extend the functionality of an existing program ! Detours is NOT supported by Microsoft at all, and will work ONLY on WinNT architecture, except the binary rewriting function for adding payloads and modifying of import tables of Detours which ALSO works on Win9x. I am at a loss as to what I should be doing. I really would not like wasting my time writing articles which Chris and his group will not be able to publish on this great site. I have put up a plan of articles at http://www.geocities.com/kbshankar2000/ArticleSchedule.html. All source will be in form of C++/Win32 API using VS6 Project. Please send in your comments till the 29th of March. Based on all your feedback, I will take furthur action. Regards, and thanks for reading Kamal Shankar "God then made two great lights; the greater light to rule the day, and the less light to rule the night" - Genesis 47:3
-
Hello all Thanks to my friend, a few days ago, I came across a Microsoft Research's product - Detours. Though binary patching (to modify program code functionality) has been there since the 80s, Detours makes it painless for us. It's ALMOST transparent ! Please visit Microsoft Research's site for more details. Due to the philosophy of CodeProject, I wish to share the knowledge that I have gained using Detours with you all. However, as with anything , the information that I am willing to share might have considerable impact on Win32 security. You got it - I may unintentionally land up helping crackers. Yet, the information will no doubt help authentic developers in their daily work. You see - using Detours, you do not even need the source code in order to extend the functionality of an existing program ! Detours is NOT supported by Microsoft at all, and will work ONLY on WinNT architecture, except the binary rewriting function for adding payloads and modifying of import tables of Detours which ALSO works on Win9x. I am at a loss as to what I should be doing. I really would not like wasting my time writing articles which Chris and his group will not be able to publish on this great site. I have put up a plan of articles at http://www.geocities.com/kbshankar2000/ArticleSchedule.html. All source will be in form of C++/Win32 API using VS6 Project. Please send in your comments till the 29th of March. Based on all your feedback, I will take furthur action. Regards, and thanks for reading Kamal Shankar "God then made two great lights; the greater light to rule the day, and the less light to rule the night" - Genesis 47:3
I agree, publish it. Aspect Oriented Programming is an interesting area and one I'm sure many people would like to see some direct, hands-on material for that centers around Win32. David
-
Patching exe's is old news. If you wish to write about it then simply post it here. It's not exactly a matter of national security. cheers, Chris Maunder
And when written appropriate, even Windows Installer can patch executables using a binary diff created from the old install database and the new install database, which creates a simple patch for use by other customers as one sort of an upgrade path. I've seen a few custom installations do this to their products as well, though it was so long ago I can't remember what it was.
Microsoft MVP, Visual C# My Articles
-
Patching exe's is old news. If you wish to write about it then simply post it here. It's not exactly a matter of national security. cheers, Chris Maunder
;) But remember - it's you who's going to edit those - don't say I didn't warn you ;) Allright. Let's roll. "God then made two great lights; the greater light to rule the day, and the less light to rule the night" - Genesis 47:3