wiz60
11-11-2002, 12:41 PM
I had a thought about a fairly easy obfuscator.
It is implemented as a subroutine. It can be called from ANY key sniffer.
It is called without any arguments.
1. Get current date and time
2. Isolate seconds and save
3. Determine starting address for the subroutine
4. Loop from start of process memory to start of subroutine
5. xor memory byte with seconds from step 2
6. sleep for interval
7. loop from start of process memory to start of subroutine
8. xor memory byte with seconds from step 2
9. return
There may need to be a fiddle to get you access to the code section - but its doable. Remeber guys this is running in your program space on your program.
The result - the fingerprint is obscured every cycle in a different manner. The code above is too inoucous to be a fingerprint of its own.
Thoughts?
It is implemented as a subroutine. It can be called from ANY key sniffer.
It is called without any arguments.
1. Get current date and time
2. Isolate seconds and save
3. Determine starting address for the subroutine
4. Loop from start of process memory to start of subroutine
5. xor memory byte with seconds from step 2
6. sleep for interval
7. loop from start of process memory to start of subroutine
8. xor memory byte with seconds from step 2
9. return
There may need to be a fiddle to get you access to the code section - but its doable. Remeber guys this is running in your program space on your program.
The result - the fingerprint is obscured every cycle in a different manner. The code above is too inoucous to be a fingerprint of its own.
Thoughts?