Anti-Debug-Collection icon indicating copy to clipboard operation
Anti-Debug-Collection copied to clipboard

My anti debugging collection in csharp

Anti Debug Collection

This repository contains a collection of anti-debugging tricks that I have collected in C#.

Methods

Flags

  • IsDebuggerPresent
  • IsRemoteDebugPresent
  • ProcessDebugPortFlag
  • ProcessDebugObjectHandleFlag

Manual Flags

  • PEB
  • NtGlobalFlag

Misc

  • ParentProcess
  • RaiseException
  • HideThreadsFromDebugger
  • Timer

Hooks

  • HeavenGate (detect ScyllaHide)
  • IsBadHookNumberObject (detect ScyllaHide)

Syscall

  • NtQueryInformationProcess (detect ScyllaHide)

Object Handles

  • CloseHandle

Reference and Credits