Beyond good ol’ Run key, Part 126

August 16, 2020 in Anti-Forensics, Autostart (Persistence)

This is another quick post — this time about QT framework plugins; in fact, there is not much to write about it as it’s already fairly well documented on QT page.

The basic idea is that you can load additional plugins to programs written in QT by using either an environment path QT_DEBUG_PLUGINS or by editing a qt.conf file (creating if it doesn’t exist). If you are using IDA you might have noticed that qt.conf can be found a program’s main directory.

Luckily, plugin development has a lot of constraints and they will fail if these constraints are not met (read the article I linked to).

There is a growing number of QT-based applications hence this could be useful one day.

Comments are closed.