c++ - Terminate DebugActiveProcess or other debugging routines -


i kinda want leave more thought experiment (i asked in chat directed here). can provide code if helpful. here scenario!

process 1 running , debugging process 2, have injected dll process 2 , detoured 1 of windows functions relies on can execute own code. there way within process 2 can prevent process 1 continuing debug process 2?

i dont know excatly mean "preventing debug".

you avoid debbuger recive event related process, using ntsetinformationthread

push 0 push 0 push 11h ;threadhidefromdebugger push -2 ;getcurrentthread() // can use on every thread call ntsetinformationthread 

reference: peter ferrie anti debug tricks http://pferrie.host22.com/papers/antidebug.pdf


Comments

Popular posts from this blog

ios - UICollectionView Self Sizing Cells with Auto Layout -

node.js - ldapjs - write after end error -

DOM Manipulation in Wordpress (and elsewhere) using php -