Sign in to follow this  
Followers 0
BruceCopperField

Why Reading Memory Could be Detected

2 posts in this topic

I've read some old posts about memory reading in WoW and the risk of being caught by Warden. I am not writing a bot for Wow. Actually, I dont play this game at all. But I am interested in learning windows system programming. From what I understand, the UDFs for reading memory just make a Win32 call to Windows to dump the memory of another process. However, would a process know its memory is being read? Afterall, Windows should (pls correct me if not) shield this action from the process itself. In that case, how could Warden knows a bot is doing memory reading?

Share this post


Link to post
Share on other sites



Many anti-hack engines will watch calls to certain functions. It's possible by attaching to all open processes and modifying the stacks a bit. I don't know the technical details, but it's the same idea that gets applied to when a programmer gets the painting of a hidden window.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0