Awesome
Anti Debug Collection
This repository contains a collection of anti-debugging tricks that I have collected in C#.
Methods
Flags
- IsDebuggerPresent
- IsRemoteDebugPresent
- ProcessDebugPortFlag
- ProcessDebugObjectHandleFlag
Manual Flags
- PEB
- NtGlobalFlag
Misc
- ParentProcess
- RaiseException
- HideThreadsFromDebugger
- Timer
Hooks
- HeavenGate (detect ScyllaHide)
- IsBadHookNumberObject (detect ScyllaHide)
Syscall
- NtQueryInformationProcess (detect ScyllaHide)
Object Handles
- CloseHandle