Anti-Anti_debugging WinDbg Scripts

abhi93696 · #1 07-20-2017, 02:55

Hi

Here are some WinDbg's Anti-Anti-debugging scripts. These scripts work with WinDbg (not local) Kernel Debugging.

1)Anti-rdtsc-trick script

Quote:

2)Script for renaming running process

Quote:

3)Script for renaming kernel objects

Quote:

Their complete explanation can be read here-:

Quote:

Cheerz

TechLord · #2 07-20-2017, 09:34

The explanations for setting up kernel debugging before the above scripts can be used, can be found here :

VirtualKD – Installation

Starting with Windows Kernel Exploitation – part 1 – setting up the lab

Setting Up Kernel-Mode Debugging of a Virtual Machine Manually

As noted above, these are useful only if you are into KERNEL DEBUGGING , not for user-mode debugging

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Beginners Guide to Basic Linux Anti Anti Debugging Techniques	taos	General Discussion	10	07-09-2005 05:55

The Following 2 Users Say Thank You to abhi93696 For This Useful Post:
Hypnz (07-20-2017), niculaita (07-20-2017)

The Following 2 Users Say Thank You to TechLord For This Useful Post:
chants (07-20-2017), nimaarek (09-20-2017)