Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide

Hypervisor based anti anti debug plugin for x64dbg

Anti-debugging techniques on a (bad looking) Win32 application.

ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.

Using ReadDirectoryChangesW to detect CheatEngine

Do integer arithmetic with fsub.

Python Obfuscator

POC about how to prevent windbg break

Old 32 bit PE executable protector / crypter

Catching debuggers using ResumeThread

blocks debuggers from suspending your programs threads

manipulates your files process information to prevent debuggers from attaching

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

Anti-debugging techniques on a (bad looking) Win32 application.

SecLib is a simple header-only library that checks all running processes for certain identifiers.

WinRasp is a RASP(Runtime Application Slef Protection) solution for Windows. It can help customer to detect and remove the threats while the target application is at runtime. It can be used to protect registry, file, and process object.

Kernel Anit Anit Debug Plugins 内核反反调试插件

A bunch of Windows anti-debugging tricks for x86 and x64.

Simple .cpp file to protect the program from a debugger