/BE-Shellcode

Code for Battleyes shellcode

Primary LanguageC++

BE-Shellcode

Code for Battleyes shellcode

  • Exception handler that checks for return addresses that match report criteria
  • find hidden system threads by checking kernel time delta
  • detect hooks that want to catch exceptions (KiUserExceptionDispatcher)
  • detect blacklisted dlls (+checks for import etc) + backlisted drivers
  • check integrity of important functions
  • check all threads in local process and find RIPs that match report criteria
  • find blacklisted signatures