domains / families / security / anti-debugging-techniques

anti-debugging-techniques

separate

Anti-debugging detection and bypass playbook. Use when reversing protected binaries that detect debuggers via ptrace, PEB flags, timing checks, or signal/exception handlers on Linux and Windows.

When to use

• reversing protected binaries
• bypassing ptrace detection
• bypassing PEB flags
• bypassing timing checks
• bypassing signal/exception handlers
• Linux anti-debug techniques
• Windows anti-debug techniques

When not to use

• code obfuscation deobfuscation
• VM and bytecode reverse engineering
• symbolic execution

Skill page

Source