Blue DeviL // SCTTaking Apart iOS Apps: Anti-Debugging and Anti-Tampering in the Wild
https://blog.calif.io/p/taking-apart-ios-apps-anti-debugging
Andreas KlopschIn 2021, I wrote about section hashing, a popular anti debugging technique to detect software breakpoints.
https://malwareandstuff.com/catching-debuggers-with-section-hashing/
#malware #reverseengineering #cybersecurity #infosec #antidebug
Mimirokay, this is my favorite goofy linux antidebug trick so far. catches gdb and lldb, and especially with a bit more obfuscation (e.g. mmap a *file* RW there, move the stack up a bunch so that it overlaps w/ the mmapped file, write to that file to corrupt your own stack, 😸 ) it can be, i think, pretty annoying to figure out
link *statically*
#antidebug #antidebugging
Ken BalintCame across a reference called "The 'Ultimate' Anti-Debugging Reference" by Peter Ferrie from 2011 yesterday.
Although dated, it contains some of the easiest to understand explanations to many anti-debugging techniques that I've seen so far.
The original link is down, but thankfully it's been archived and I'm a sucker for preservation, so I thought I'd share it here.
https://web.archive.org/web/20190608123534/http://pferrie.host22.com/papers/antidebug.pdf
buheratorIs there a debugger I can "attach" by sideloading a DLL to the target? #antidebug #antiantidebug
x0rzRewriting ntdll functions to bypass simple user-mode hooks (antidebug) https://secrary.com/Random/BypassUserHooks/ #windows #reverseengineering #antidebug https://t.co/8Tvz8KlFm5
Anti-debug with VirtualAlloc's write watch https://github.com/gsuberland/al-khaser/blob/write-watch/al-khaser/Anti%20Debug/WriteWatch.cpp #windows #antidebug #reverseengineering