anti-debugging-techniques

What problem does it solve?

This Skill provides a structured playbook to find and neutralize anti-debugging checks that cause binaries to detect and evade debuggers, allowing analysts to continue dynamic analysis without premature termination or altered control flow.

Core Features & Use Cases

• Comprehensive Technique Matrix: Maps anti-debug techniques across Linux and Windows, showing detection methods, reliability ratings, false-positive notes, and recommended bypasses.
• Tool-Compatible Bypasses: Pragmatic steps for common tools and shims such as LD_PRELOAD, ScyllaHide, Frida, GDB scripts, and kernel-level drivers, plus emulation options with Qiling.
• Operational Methodology: An ordered verification checklist, decision tree for triage, and scenario-driven examples for CTFs, reverse engineering, malware analysis, and penetration testing.

Quick Start

Analyze the attached binary for ptrace, PEB/NtQueryInformationProcess, timing, signal/VEH, TLS callback, and multi-process anti-debug checks and produce a prioritized detection-and-bypass plan.