Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide

A bunch of Windows anti-debugging tricks for x86 and x64.

A collection of c++ programs that demonstrate common ways to detect the presence of an attached debugger.

AntiDebugging sample sources written in C++

Software copy protection against cracking & reverse engineering with anti-cracking & anti-debugging techniques. Software license key system with time trial options.

StrongOD(anti anti-debug plugin) driver source code.

ProTecT is an MS-DOS packer. While this packer is outdated, it uses a number of interesting anti-analysis techniques that are still relevant today.

How to write a CrackMe for a CTF competition. Source code, technical explanation, anti-debugging and anti reverse-engineering tricks.

ice9 - is anticheat based on usermode tricks and undocumented methods , builded as dll for loading trought the shibari framework

Test for Anti-Debugging

Some anti QEMU trick used by in-the-wild malware.

iOS app defender for anti-reverse!

new anti-reversing method, based on the self debugging anti reversing method.

demo of common anti-analysis techniques used by malware

Debugger written in Python implementing bypasses of some anti-debug mechanisms.

MinegamesAdministration is an open source AdministrationTool that includes many things such as enabling or disabling task manager or cmd or regedit,UAC,etc.... and it's included task manager and rsa and aes and tripledes encryption and file encryption and have chatting and it have a keylogger (not in the AdministrationTool itself) that will only log your pc keys to make sure that it will not be use for malicious purposes and the AdministrationTool have other features and it have simple user interface.

#seccamp 2014 CTF softsec (Reverse 400pt)

A sample WPF application designed to demonstrate use cases and patterns for Dotfuscator's anti-debug protections.

Windows Reverse engineering challenge implementing several obfuscation and anti-debugging techniques

Anti-Debugging Samples

break into the debugger programmatically

Toolkit to detect/crash/attack GNU debugging-related tools

Triton is a Dynamic Binary Analysis (DBA) framework. It provides internal components like a Dynamic Symbolic Execution (DSE) engine, a Taint Engine, AST representations of the x86 and the x86-64 instructions set semantics, SMT simplification passes, an SMT Solver Interface and, the last but not least, Python bindings.

x86 anti-debugging suite