Anti-Debugging for Noobs, Part 1: How a Program Notices the Debugger
First principles of anti-debugging on Linux: the one-tracer rule, ptrace self-trace, TracerPid in /proc, parent checks, timing gaps and 0xCC breakpoint scanning, plus how analysts answer each check.
First principles of anti-debugging on Linux: the one-tracer rule, ptrace self-trace, TracerPid in /proc, parent checks, timing gaps and 0xCC breakpoint scanning, plus how analysts answer each check.
15 min read
2,838 words
İS
ibrahimsql
Cybersecurity Engineer