dlsym_hook icon indicating copy to clipboard operation
dlsym_hook copied to clipboard

Instrumenting a binary without source code to bypass anti-debug checks

trafficstars

dlsym_hook

Example project created for my blog post "Instrumenting binaries using revng and LLVM" using revng and LLVM.

What does it do?

It dumps the strings passed to dlsym by lifting and instrumenting the binary. We then finally recompile it back to a working executable bypassing anti debug checks.