Hey,
So moving on to a relatively advanced API based debugger detection or anti-debugging techniques, i am going to today discuss the implmentation of ZwSetInformationThread routine. Now this is an undocumented win32 API and we need to get a pointer to the function inside a library and then make a call to the function. The very first implementation is as follows (by the way I code on Code:Blocks 12.11): Continue Reading
Posts tagged with: Anti-debugging
CheckRemoteDebuggerPresent API
Hi,
I am currently working on anti-debugging techniques which will also be my project for this year in college.Though i know for a fact most basic anti-debug techniques are API based techniques, but i am still doing this post because firstly i did not find any working code and whatever non-working code was present was also implemented locally… By the way I am really impressed by the work compiled by Tyler Shields in 2009 and he has put up some of the best resources out there!
This post is basically about one of those standard API’s > CheckRemoteDebuggerPresent function. Continue Reading