blob: 2e9814abfe99aec57a7ed8867b7c28c5b4e3a5fe (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
|
# spp-stuff
Collection of random stuff
## Debugging """Guide"""
- Put machine into testsigning (`bcdedit /set testsigning on`)
- Install drivers under `drivers/` by running `install.cmd` in each folder
- Install `sppdebug.reg` to have SPPSvc auto-suspend on startup
- Use PPLcontrol to set debugger to `PP Windows` protection level
- Use [ScyllaHide](https://github.com/x64dbg/ScyllaHide/releases/tag/v1.4) with VMProtect profile for debugging
- Take care to avoid having debugger attached at the end of a [heap execute](https://github.com/WitherOrNot/warbird-docs/blob/main/WarbirdModern.md#heap-executes), or sppsvc will crash with Fast Fail Exception
|
