| View previous topic :: View next topic |
| Author |
Message |
DoomsDay
Grandmaster Cheater
 Reputation: 0
Joined: 06 Jan 2007
Posts: 768
Location: %HomePath%
|
 Posted: Sat Dec 01, 2007 1:10 am Post subject: |
 |
|
| Kaspersky wrote: | how do people get the fact "you need admin priv to get in the registry" ?
it's not true :S |
Ever heard of Windows Server 2003? You could also try making your account limited on WinXP if you want. |
|
| Back to top |
|
 |
appalsap
Moderator
 Reputation: 0
Joined: 27 Apr 2006
Posts: 6753
Location: Pakistan
|
| Posted: Sat Dec 01, 2007 9:09 am Post subject: |
|
|
The argument works both ways, if you do the PROPER thing NOT assuming you have administrator privileges and are able to write in program files, and instead use %appdata%, when you delete the program folder, THOSE files still exist!
you don't need administrator access to write into the registry either, I don't know where you got that assumption (maybe because regedit.exe automatically elevates? that's because too many people use it to modify stuff in HKEY_LOCAL_MACHINE and they'll get confused when they get access denied)
_________________
|
|
| Back to top |
|
|
assaf84
Expert Cheater
![]() Reputation: 0
Joined: 03 Oct 2006
Posts: 238
|
| Posted: Tue Dec 04, 2007 2:20 am Post subject: |
|
|
| Wiccaan wrote: | Depending on what you are using this for, I personally prefer XML over INI. But if it's for a quick tossup, INI is faster.
As for injection that requires the reading of a file, you can run into issues with the dll being able to read the config file effectively without using a little hack here or there to obtain the original path. In that case I would either have the DLL read from registry, use a small hack to obtain the original launch path to get the config file, or have the launcher communicate to the dll via MMF.
Many possibilities to choose from I guess :s
I attempt to use the registry as little as possible unless the thing I release is installed so it can easily remove the keys when its uninstalled. If not you usually land up with keys that will never be used anymore causing the reg to get cluttered up with crap. |
What is MMF? |
|
| Back to top |
|
|
DeletedUser14087
I post too much
![]() Reputation: 2
Joined: 21 Jun 2006
Posts: 3069
|
| Posted: Tue Dec 04, 2007 6:38 am Post subject: |
|
|
| x0r wrote: | Well I'll first strike Kaspersky's 'point' since he's a retard, I was referring to writing of the registry; not reading.
linden & Wiccaan both pointed out something that prompted me to write my own implementation for INI reading, this is that too many programs leave the registry bloated. So instead I've decided just to go with my own implementation of INI reading/writing whilst being aware of the two-pronged side of INIs; they're very easily deleted. |
then just use ini, instead of going through all the mess registry needs |
|
| Back to top |
|
|
atom0s
Moderator
 Reputation: 205
Joined: 25 Jan 2006
Posts: 8588
Location: 127.0.0.1
|
| Posted: Tue Dec 04, 2007 6:37 pm Post subject: |
|
|
| assaf84 wrote: | | Wiccaan wrote: | Depending on what you are using this for, I personally prefer XML over INI. But if it's for a quick tossup, INI is faster.
As for injection that requires the reading of a file, you can run into issues with the dll being able to read the config file effectively without using a little hack here or there to obtain the original path. In that case I would either have the DLL read from registry, use a small hack to obtain the original launch path to get the config file, or have the launcher communicate to the dll via MMF.
Many possibilities to choose from I guess :s
I attempt to use the registry as little as possible unless the thing I release is installed so it can easily remove the keys when its uninstalled. If not you usually land up with keys that will never be used anymore causing the reg to get cluttered up with crap. |
What is MMF? |
MMF stands for Memory Mapped File.
Full overview/summary:
http://en.wikipedia.org/wiki/Memory-mapped_file
_________________
- Retired. |
|
| Back to top |
|
|
assaf84
Expert Cheater
![]() Reputation: 0
Joined: 03 Oct 2006
Posts: 238
|
| Posted: Wed Dec 05, 2007 1:10 am Post subject: |
|
|
| Wiccaan wrote: | | assaf84 wrote: | | Wiccaan wrote: | Depending on what you are using this for, I personally prefer XML over INI. But if it's for a quick tossup, INI is faster.
As for injection that requires the reading of a file, you can run into issues with the dll being able to read the config file effectively without using a little hack here or there to obtain the original path. In that case I would either have the DLL read from registry, use a small hack to obtain the original launch path to get the config file, or have the launcher communicate to the dll via MMF.
Many possibilities to choose from I guess :s
I attempt to use the registry as little as possible unless the thing I release is installed so it can easily remove the keys when its uninstalled. If not you usually land up with keys that will never be used anymore causing the reg to get cluttered up with crap. |
What is MMF? |
MMF stands for Memory Mapped File.
Full overview/summary:
http://en.wikipedia.org/wiki/Memory-mapped_file |
Ohh..
So, a CEM file is actually a MMF file?
BTW, I have a little question/theory (MapleStory):
Is it possible to copy maple's memory to another place (some allocated place), and make it run from there, by changing the EIP in one place in the original code to it's match opcode in the cave? |
|
| Back to top |
|
|
atom0s
Moderator
Reputation: 205
Joined: 25 Jan 2006
Posts: 8588
Location: 127.0.0.1
|
| Posted: Wed Dec 05, 2007 2:05 am Post subject: |
|
|
| assaf84 wrote: | Ohh..
So, a CEM file is actually a MMF file?
BTW, I have a little question/theory (MapleStory):
Is it possible to copy maple's memory to another place (some allocated place), and make it run from there, by changing the EIP in one place in the original code to it's match opcode in the cave? |
Not sure what a CEM file is, and I don't play Maple. Never have, never will. Sorry.
_________________
- Retired. |
|
| Back to top |
|
|
assaf84
Expert Cheater
![]() Reputation: 0
Joined: 03 Oct 2006
Posts: 238
|
| Posted: Wed Dec 05, 2007 2:25 am Post subject: |
|
|
| Wiccaan wrote: | | assaf84 wrote: | Ohh..
So, a CEM file is actually a MMF file?
BTW, I have a little question/theory (MapleStory):
Is it possible to copy maple's memory to another place (some allocated place), and make it run from there, by changing the EIP in one place in the original code to it's match opcode in the cave? |
Not sure what a CEM file is, and I don't play Maple. Never have, never will. Sorry. |
Smart decision, XD
I don't play maple myself, I'm just making stuff for it.. |
|
| Back to top |
|
|
ups2000ups
I post too much
![]() Reputation: 0
Joined: 31 Jul 2006
Posts: 2471
|
| Posted: Wed Dec 05, 2007 2:31 am Post subject: |
|
|
i choose ini files
simple and you could easy send it to a friend
and for exampel school compter is it normaly blocked with .reg files
_________________
dont complain about my english...
1*1 = 2? |
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
