ayoubfaouzi/al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

Language: C++ - Size: 2.49 MB - Last synced at: 3 days ago - Pushed at: 5 days ago - Stars: 6,281 - Forks: 1,200

x64dbg/ScyllaHide

Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide

Language: C++ - Size: 6.46 MB - Last synced at: 15 days ago - Pushed at: 11 months ago - Stars: 3,640 - Forks: 445

mrexodia/TitanHide

Hiding kernel-driver for x86/x64.

Language: C - Size: 842 KB - Last synced at: 14 days ago - Pushed at: about 2 months ago - Stars: 2,260 - Forks: 431

Air14/HyperHide

Hypervisor based anti anti debug plugin for x64dbg

Language: C++ - Size: 557 KB - Last synced at: over 1 year ago - Pushed at: over 1 year ago - Stars: 935 - Forks: 240

HackOvert/AntiDBG

A bunch of Windows anti-debugging tricks for x86 and x64.

Language: C++ - Size: 90.8 KB - Last synced at: 2 months ago - Pushed at: almost 4 years ago - Stars: 776 - Forks: 87

ThomasThelen/Anti-Debugging

A collection of c++ programs that demonstrate common ways to detect the presence of an attached debugger.

Language: C++ - Size: 74.4 MB - Last synced at: 16 days ago - Pushed at: over 3 years ago - Stars: 562 - Forks: 79

AlSch092/UltimateAntiCheat

UltimateAnticheat is an open source usermode anti-cheat system made to detect and prevent common attack vectors in game cheating (C++, Windows)

Language: C - Size: 10.3 MB - Last synced at: 9 days ago - Pushed at: 10 days ago - Stars: 451 - Forks: 58

revsic/AntiDebugging

AntiDebugging sample sources written in C++

Language: C++ - Size: 701 KB - Last synced at: 17 days ago - Pushed at: almost 7 years ago - Stars: 337 - Forks: 54

0xor0ne/debugoff

Linux anti-debugging and anti-analysis rust library

Language: Rust - Size: 823 KB - Last synced at: 22 days ago - Pushed at: over 2 years ago - Stars: 317 - Forks: 25

AdvDebug/AntiCrack-DotNet

.NET Project containing plenty of advanced techniques to detect various types of malicious actions on your software, with syscall support.

Language: C# - Size: 260 KB - Last synced at: 3 months ago - Pushed at: 3 months ago - Stars: 266 - Forks: 59

PELock/PELock-Software-Protection-and-Licensing-SDK

Software copy protection against cracking & reverse engineering with anti-cracking & anti-debugging techniques. Software license key system with time trial options.

Language: C - Size: 2.57 MB - Last synced at: 18 days ago - Pushed at: almost 2 years ago - Stars: 202 - Forks: 54

LAC-Japan/IDA_Plugin_AntiDebugSeeker

Automatically identify and extract potential anti-debugging techniques used by malware.

Language: Python - Size: 12.5 MB - Last synced at: 13 days ago - Pushed at: 5 months ago - Stars: 153 - Forks: 14

AdvDebug/NetShield_Protector 📦

Copy Protection Software and Obfuscator which make you securly implement a license for a user, supports licensing with: HWID, License, USB HWID, and it prevent debugging your application by applying anti-debugger attaching techniques.

Language: C# - Size: 974 KB - Last synced at: over 1 year ago - Pushed at: almost 2 years ago - Stars: 98 - Forks: 30

shellbombs/StrongOD

StrongOD(anti anti-debug plugin) driver source code.

Language: C - Size: 30.3 KB - Last synced at: about 2 years ago - Pushed at: over 7 years ago - Stars: 95 - Forks: 45

spyboy-productions/ObfuXtreme

Advanced Python Code Obfuscation Suite with Military-Grade Encryption and Anti-Reverse Engineering Features

Language: Python - Size: 390 KB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 80 - Forks: 5

orph3usLyre/muddy-waters

A literal string obfuscation library for rust projects

Language: Rust - Size: 64.5 KB - Last synced at: 12 days ago - Pushed at: about 2 months ago - Stars: 77 - Forks: 3

PELock/CrackMeZ3S-CTF-CrackMe-Tutorial

How to write a CrackMe for a CTF competition. Source code, technical explanation, anti-debugging and anti reverse-engineering tricks.

Language: C++ - Size: 13.7 KB - Last synced at: 21 days ago - Pushed at: about 2 years ago - Stars: 47 - Forks: 15

xtekky/Python-Anti-Debug

Anti-Debugger + SSL-Pinning, to defeat fiddlers (distinguish debug-proxied connection and secure ur programs)

Language: Python - Size: 59.6 KB - Last synced at: 22 days ago - Pushed at: over 1 year ago - Stars: 46 - Forks: 15

CYRUS-STUDIO/AndroidExample

Android 反调试、汇编开发、OLLVM、Frida、unidbg、Base64、CRC32、MD5、SHA1、SHA256、HMAC、AES、VMP 相关 Demo（Android Anti-Debugging, Assembly Development, Frida, unidbg, Base64, CRC32, MD5, SHA1, SHA256, HMAC, AES, VMP, and OLLVM-related Demo）

Language: C - Size: 1.09 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 39 - Forks: 21

Sec-ant/a2d2-firefox 📦

The Firefox build that evades JavaScript anti-debugging debugger mechanisms

Size: 36.1 KB - Last synced at: 7 days ago - Pushed at: 8 months ago - Stars: 37 - Forks: 8

tobyxdd/linux-anti-debugging

Language: C - Size: 6.84 KB - Last synced at: 22 days ago - Pushed at: over 2 years ago - Stars: 37 - Forks: 13

philippelyp/ProTecT

ProTecT is an MS-DOS packer. While this packer is outdated, it uses a number of interesting anti-analysis techniques that are still relevant today.

Language: Assembly - Size: 52.7 KB - Last synced at: almost 2 years ago - Pushed at: about 4 years ago - Stars: 33 - Forks: 3

0xheli0x/Helius_Crypter

An advanced encryption toolkit with AES-256 file encryption, decryption, and PDF exploit generation features.

Language: TypeScript - Size: 326 KB - Last synced at: 5 days ago - Pushed at: 5 days ago - Stars: 32 - Forks: 57

MrakDev/Anti-Debug-Collection

My anti debugging collection in csharp

Language: C# - Size: 47.9 KB - Last synced at: about 2 years ago - Pushed at: over 2 years ago - Stars: 21 - Forks: 4

jnastarot/ice9

ice9 - is anticheat based on usermode tricks and undocumented methods , builded as dll for loading trought the shibari framework

Language: C - Size: 18.6 KB - Last synced at: 3 months ago - Pushed at: 3 months ago - Stars: 19 - Forks: 9

AdvDebug/MinegamesAntiCheat 📦

MinegamesAntiCheat Are an Advanced C# Anti-Cheat Library which prevents debug attaching, dll-injection, etc..... and it can communicate with your server.

Language: C# - Size: 135 KB - Last synced at: almost 2 years ago - Pushed at: over 3 years ago - Stars: 18 - Forks: 6

zorggomat/DuckCpp

Multifunctional keylogger using WinAPI and libcurl

Language: C - Size: 3.06 MB - Last synced at: 7 days ago - Pushed at: over 3 years ago - Stars: 17 - Forks: 2

6nz/python-anti-debugger

Basic Protections

Language: Python - Size: 53.7 KB - Last synced at: about 2 years ago - Pushed at: about 2 years ago - Stars: 16 - Forks: 4

pikulet/anti-debugging

demo of common anti-analysis techniques used by malware

Language: C - Size: 9.77 KB - Last synced at: 27 days ago - Pushed at: over 3 years ago - Stars: 16 - Forks: 3

jaeyung1001/Anti-Debugging

Test for Anti-Debugging

Language: C++ - Size: 2.74 MB - Last synced at: about 2 years ago - Pushed at: over 6 years ago - Stars: 14 - Forks: 7

LAC-Japan/Ghidra_AntiDebugSeeker

Automatically identify and extract potential anti-debugging techniques used by malware.

Language: Java - Size: 28.6 MB - Last synced at: 5 months ago - Pushed at: 5 months ago - Stars: 13 - Forks: 1

wufhex/PyDelta-PythonObfuscator 📦

PyDelta is a Python script designed to obfuscate Python source code, making it more difficult to understand and reverse-engineer.

Language: Python - Size: 74.2 KB - Last synced at: 6 months ago - Pushed at: 10 months ago - Stars: 12 - Forks: 6

ntddk/blue

Some anti QEMU trick used by in-the-wild malware.

Language: C++ - Size: 141 KB - Last synced at: about 1 year ago - Pushed at: over 9 years ago - Stars: 12 - Forks: 9

v-lavrentikov/obfuscator

Binary obfuscation, anti-reversing, anti-debugging and av-bypass framework for Windows

Language: Go - Size: 41 KB - Last synced at: 13 days ago - Pushed at: 13 days ago - Stars: 10 - Forks: 1

chenxiancai/STCDefender

iOS app defender for anti-reverse!

Language: Objective-C - Size: 72.3 KB - Last synced at: 7 days ago - Pushed at: over 7 years ago - Stars: 10 - Forks: 3

colinsenner/KWorld

KWorld is a kernel driver for removing the anti-debugging technique ThreadHideFromDebugger from processes.

Language: C# - Size: 25 MB - Last synced at: 13 days ago - Pushed at: 13 days ago - Stars: 9 - Forks: 0

Giannis101/Hades-AntiDebug

An advanced and low-level c++ x64 Windows usermode debugging detector, able to bypass any usermode debugger-hide tool

Language: C++ - Size: 75.2 KB - Last synced at: 11 months ago - Pushed at: 11 months ago - Stars: 9 - Forks: 1

m1r3x/Native-Anti-Tamper

An android project implementing magisk, frida and debugger detection using native library

Language: Java - Size: 104 KB - Last synced at: about 1 year ago - Pushed at: about 1 year ago - Stars: 9 - Forks: 1

vim951/apate

Apate performs anti-debugging, anti-VM and anti-sandbox tests, to see if your linux system is able to stay under the radar.

Language: C - Size: 91.8 KB - Last synced at: 2 months ago - Pushed at: almost 3 years ago - Stars: 9 - Forks: 1

Synthbit/vm-detection

This is a little project to detect if the programm is running in a virtual machine (coded in batch,go,js,ruby,ps1,vbs) (creds: baum1810 for idea)

Language: Go - Size: 14.6 KB - Last synced at: over 1 year ago - Pushed at: over 1 year ago - Stars: 8 - Forks: 0

BarakAharoni/LADD

Linux Anti-Debugging Detection tool

Language: C - Size: 28.3 KB - Last synced at: 6 months ago - Pushed at: 6 months ago - Stars: 7 - Forks: 1

minioreos/anti-attach

manipulates your files process information to prevent debuggers from attaching

Language: C++ - Size: 6.84 KB - Last synced at: 4 months ago - Pushed at: 7 months ago - Stars: 7 - Forks: 1

MinegamesAdministrationTool-zz/MinegamesAdministrationTool 📦

MinegamesAdministration is an open source AdministrationTool that includes many things such as enabling or disabling task manager or cmd or regedit,UAC,etc.... and it's included task manager and rsa and aes and tripledes encryption and file encryption and have chatting and it have a keylogger (not in the AdministrationTool itself) that will only log your pc keys to make sure that it will not be use for malicious purposes and the AdministrationTool have other features and it have simple user interface.

Language: C# - Size: 5.82 MB - Last synced at: almost 2 years ago - Pushed at: almost 4 years ago - Stars: 7 - Forks: 1

zorggomat/DuckSharp

Multifunctional .NET keylogger

Language: C# - Size: 16.6 KB - Last synced at: 27 days ago - Pushed at: almost 4 years ago - Stars: 6 - Forks: 1

hiatus/adbg

Linux anti-debugging techniques.

Language: C - Size: 6.84 KB - Last synced at: 6 days ago - Pushed at: almost 2 years ago - Stars: 5 - Forks: 1

icecr4ck/debugger

Debugger written in Python implementing bypasses of some anti-debug mechanisms.

Language: Python - Size: 16.6 KB - Last synced at: over 1 year ago - Pushed at: over 7 years ago - Stars: 4 - Forks: 3

onlyredz/CSharpProtectCode

CSharpProtectCode is an open source collection of code to protect your C# apps from injections, cracks, and cheating tools. It helps keep your software secure and harder to modify.

Language: C# - Size: 12.7 KB - Last synced at: 22 days ago - Pushed at: 4 months ago - Stars: 3 - Forks: 0

preemptive/dot-check-sample

A sample WPF application designed to demonstrate use cases and patterns for Dotfuscator's anti-debug protections.

Language: C# - Size: 28.3 KB - Last synced at: 11 months ago - Pushed at: about 8 years ago - Stars: 3 - Forks: 1

ntddk/AntiqueRev

#seccamp 2014 CTF softsec (Reverse 400pt)

Language: C - Size: 9.04 MB - Last synced at: about 1 year ago - Pushed at: over 10 years ago - Stars: 3 - Forks: 3

Cyb3rV1c/Phantom

XOR-encrypted shellcode injector for memory-based execution in remote processes, with integrated anti-analysis techniques.

Language: C++ - Size: 64.5 KB - Last synced at: 18 days ago - Pushed at: 7 months ago - Stars: 2 - Forks: 2

ch4daev/ScyllaHide-Detector

Language: C++ - Size: 18.6 KB - Last synced at: about 1 year ago - Pushed at: about 1 year ago - Stars: 2 - Forks: 0

Paopun20/VirtualPyDetector

Language: Python - Size: 49.8 KB - Last synced at: about 2 months ago - Pushed at: about 2 months ago - Stars: 1 - Forks: 0

therealOri/PyDelta-PythonObfuscator Fork of WolfHex/PyDelta-PythonObfuscator

PyDelta is a Python script designed to obfuscate Python source code, making it more difficult to understand and reverse-engineer.

Language: Python - Size: 71.3 KB - Last synced at: 8 months ago - Pushed at: 8 months ago - Stars: 1 - Forks: 0

6nz/Anti-Debug-Methods

Anti-Debug methods written in Python.

Language: Python - Size: 29.3 KB - Last synced at: 8 months ago - Pushed at: 8 months ago - Stars: 1 - Forks: 0

6nz/RtlSetProcessIsCritical

Set critical flag for programs

Language: Python - Size: 6.84 KB - Last synced at: 9 months ago - Pushed at: 9 months ago - Stars: 1 - Forks: 0

mathias-mrsn/pestilence

An obfuscated ELF virus for Linux

Language: Assembly - Size: 5.06 MB - Last synced at: about 1 year ago - Pushed at: about 1 year ago - Stars: 1 - Forks: 0

9dl/SecureX

SecureX: Golang anti-debugging solution to protect against reverse engineering and unauthorized debugging programs.

Language: Go - Size: 27.3 KB - Last synced at: 24 days ago - Pushed at: over 1 year ago - Stars: 1 - Forks: 1

dmtai/anti_debug

Simple .cpp file to protect the program from a debugger

Language: C++ - Size: 7.81 KB - Last synced at: about 1 month ago - Pushed at: over 1 year ago - Stars: 1 - Forks: 0

qqzero0/python-anti-debugging

python anti debugging techniques

Language: Python - Size: 17.6 KB - Last synced at: 4 days ago - Pushed at: almost 2 years ago - Stars: 1 - Forks: 0

julupu/jchallenge

Windows Reverse engineering challenge implementing several obfuscation and anti-debugging techniques

Language: C++ - Size: 22.5 KB - Last synced at: about 2 years ago - Pushed at: about 7 years ago - Stars: 1 - Forks: 2

Joelone/debugbreak Fork of scottt/debugbreak

break into the debugger programmatically

Language: C - Size: 28.3 KB - Last synced at: about 2 years ago - Pushed at: over 8 years ago - Stars: 1 - Forks: 0

jacq-ue/Helius_Crypter

An advanced encryption toolkit with AES-256 file encryption, decryption, and PDF exploit generation features.

Language: TypeScript - Size: 124 KB - Last synced at: 16 days ago - Pushed at: 16 days ago - Stars: 0 - Forks: 0

zero2504/Anti-Debugging

Anti-Debugging (Self-Debugging)

Language: C++ - Size: 153 KB - Last synced at: 24 days ago - Pushed at: 24 days ago - Stars: 0 - Forks: 0

0xvpr/anti-debugging-mingw-x64 Fork of guidedhacking/anti-debugging

x64 rewrite of GuidedHacking's Anti-debugging techniques on a (bad looking) Win32 application.

Language: C++ - Size: 128 KB - Last synced at: about 2 months ago - Pushed at: about 2 months ago - Stars: 0 - Forks: 0

viettaliii/Anti-debug

Dự án nhằm phân tích các kỹ thuật anti-debug

Size: 1000 Bytes - Last synced at: about 2 months ago - Pushed at: about 2 months ago - Stars: 0 - Forks: 0

aarandomhacker/Heisenbugger

Changes behavior once observed

Size: 11.7 KB - Last synced at: 3 months ago - Pushed at: 3 months ago - Stars: 0 - Forks: 0

zero2504/Shadow-Rebirth

Shadow Rebirth - An Aggressive Outbreak Anti-Debugging Technique

Language: C++ - Size: 30.3 KB - Last synced at: 5 months ago - Pushed at: 5 months ago - Stars: 0 - Forks: 0

zero2504/Memory-Mirage-Anti-Debugging-

Use of in-memory string scans to outsmart reverse engineers

Language: C++ - Size: 20.5 KB - Last synced at: 5 months ago - Pushed at: 5 months ago - Stars: 0 - Forks: 0

MasonGroup/MasonGuard

Python Obfuscator

Language: C++ - Size: 17 MB - Last synced at: 9 months ago - Pushed at: 9 months ago - Stars: 0 - Forks: 0

zjuvee/triage-vm-bypass

triage virtual machine bypass

Language: C++ - Size: 2.31 MB - Last synced at: 10 months ago - Pushed at: 10 months ago - Stars: 0 - Forks: 0

Offensive-Panda/Persistence_AND_Anti_Sandbox

This repository contains the c# code which is using latest persistence technique and multiple anti-vm, anti-sandboxes techniques. Creating persistence by using WindowsApps folder, schtasks, powershell cmdlet (Get-Variable).

Language: C# - Size: 23.4 KB - Last synced at: 11 months ago - Pushed at: 11 months ago - Stars: 0 - Forks: 0

hsheric0210/AntiDebug.NET

Various .NET Anti-Debug and Anti-VM techniques

Language: C# - Size: 574 KB - Last synced at: about 1 year ago - Pushed at: about 1 year ago - Stars: 0 - Forks: 0

efibootkit/zero-entrypoint

POC of Flink/Blink swap with base entry point, CLEARS PEB-TEB-LDR-MODULE Flags and deletes cache

Language: C++ - Size: 12.7 KB - Last synced at: about 1 year ago - Pushed at: about 1 year ago - Stars: 0 - Forks: 0

niklasent/JSADD

Detects the presence of common anti-debugging techniques implemented in a website.

Language: JavaScript - Size: 151 KB - Last synced at: almost 2 years ago - Pushed at: almost 2 years ago - Stars: 0 - Forks: 0

lewisclark/retaddr

Return address checking library; used to catch foreign calls into protected code

Language: Rust - Size: 2.93 KB - Last synced at: over 1 year ago - Pushed at: almost 3 years ago - Stars: 0 - Forks: 0

martencassel/salwrap-antidebug

salwrap-antidebug

Language: C++ - Size: 11.6 MB - Last synced at: 1 day ago - Pushed at: almost 3 years ago - Stars: 0 - Forks: 0

BrilliantProduction/Obscuro

An open source obfuscation framework

Language: C# - Size: 22.5 KB - Last synced at: almost 2 years ago - Pushed at: over 3 years ago - Stars: 0 - Forks: 0

garciaadrian/x86obfs

x86 anti-debugging suite

Language: C++ - Size: 1000 Bytes - Last synced at: about 2 years ago - Pushed at: almost 5 years ago - Stars: 0 - Forks: 0

owlinux1000/anti-debugging-sample

Anti-Debugging Samples

Language: C - Size: 0 Bytes - Last synced at: about 2 months ago - Pushed at: over 5 years ago - Stars: 0 - Forks: 0

Joelone/Triton Fork of JonathanSalwan/Triton

Triton is a Dynamic Binary Analysis (DBA) framework. It provides internal components like a Dynamic Symbolic Execution (DSE) engine, a Taint Engine, AST representations of the x86 and the x86-64 instructions set semantics, SMT simplification passes, an SMT Solver Interface and, the last but not least, Python bindings.

Language: C++ - Size: 17.5 MB - Last synced at: about 2 years ago - Pushed at: about 8 years ago - Stars: 0 - Forks: 0

Joelone/pangu Fork of jvoisin/pangu

Toolkit to detect/crash/attack GNU debugging-related tools

Language: C - Size: 57.6 KB - Last synced at: about 2 years ago - Pushed at: about 9 years ago - Stars: 0 - Forks: 0

Joelone/FileFormatFuzzing Fork of IOActive/FileFormatFuzzing

Language: C - Size: 125 KB - Last synced at: about 2 years ago - Pushed at: over 12 years ago - Stars: 0 - Forks: 0