Warden

An extremely vauge overview of Warden, dated WoW 2.4.3 01/9/08.

Current methods of attack

  • Hashing module names
  • Hashing regions of memory
  • Hashing relative offsets in modules/sections
  • Hashing driver names
    • IPSect
    • Afde32u
    • Afde32uu
    • HideEx
  • Determining if certain LUA strings are loaded
Examples are “OoOoOoooo0oOO” and “BG_DESERTER”.