1 00:00:01,180 --> 00:00:03,260 Hello and welcome back. 2 00:00:03,340 --> 00:00:13,700 In this lesson we are going to start off key particles on D and D debugging so there is a correct meter 3 00:00:14,980 --> 00:00:23,310 created for practicing anti anti debugging so we can download Craig Mitchell by going to this link 4 00:00:27,440 --> 00:00:35,230 and this is the download page for Kramer to describe me Has a. debugging features. 5 00:00:35,630 --> 00:00:42,430 If you open it with a debugger and then run it will detect a debugger and exit. 6 00:00:42,830 --> 00:00:50,990 Your task is to bypass the empty debugging feature so that the program will continue to run and show 7 00:00:51,170 --> 00:00:52,970 the window below. 8 00:00:53,330 --> 00:00:58,310 And this is what it looks like when you run it successfully. 9 00:00:58,310 --> 00:01:05,480 If you're running every time using any debugger you will see this window showing up. 10 00:01:06,590 --> 00:01:13,100 However if you do open it a debugger and run this window know when I show. 11 00:01:13,520 --> 00:01:21,860 Instead you will get a message in from you that debugger has been detected and the program will now 12 00:01:22,070 --> 00:01:23,480 terminate. 13 00:01:23,680 --> 00:01:30,650 So it is the link to download it and the password to unzip their families cracking lessons dot com. 14 00:01:31,010 --> 00:01:37,550 So click on this button is link ending click on this button download 15 00:01:44,230 --> 00:01:47,300 once download has completed. 16 00:01:47,380 --> 00:01:49,150 Just go to the downloads folder. 17 00:01:50,420 --> 00:01:56,030 Cut it and put it in your Craigslist folder. 18 00:02:00,930 --> 00:02:02,300 And then zip it 19 00:02:07,720 --> 00:02:09,700 and key in your password. 20 00:02:09,710 --> 00:02:14,880 The keys cracking license dot com 21 00:02:19,850 --> 00:02:21,330 delete a zip file. 22 00:02:23,000 --> 00:02:33,020 Says we have or the anxiety and then this issue of who the hell you get after unzipping yes renaming 23 00:02:35,670 --> 00:02:38,010 is a prefix to Dean as this is it. 24 00:02:38,020 --> 00:02:49,920 Dean creamy 13 dash followed by the rest of the folder name and then open the folder and you will see 25 00:02:50,040 --> 00:03:00,580 the correct me here if you were to run in now he will see this window debugger not detect it. 26 00:03:01,660 --> 00:03:06,780 In a saucer and about putting receiving please. 27 00:03:07,870 --> 00:03:11,610 However let's try to open it. 28 00:03:12,110 --> 00:03:13,640 Leave it the easy 29 00:03:23,180 --> 00:03:25,340 and you can see the compiler in linker. 30 00:03:25,880 --> 00:03:33,800 Yeah I know because I used so now let's try the opening we've SS already D.B. 31 00:03:40,190 --> 00:03:40,940 in rainy 32 00:03:45,510 --> 00:03:46,960 and yes a proper 33 00:03:50,830 --> 00:03:58,520 he says a debugger he's detected program with our key here when you click OK. 34 00:03:59,850 --> 00:04:09,260 You can see terminated devaluing sub so this is the behavior of the program when it is attached to a 35 00:04:09,260 --> 00:04:11,840 debugger you will see. 36 00:04:12,880 --> 00:04:23,930 So the challenge is to try to bypass the anti debugging feature so I will show you how to do that in 37 00:04:23,930 --> 00:04:25,700 the next lesson. 38 00:04:25,700 --> 00:04:27,140 Thank you for watching. 39 00:04:27,130 --> 00:04:27,810 See you then.