Open mrexodia opened 4 years ago
The article says:
That’s all it takes to thwart debuggers on Windows x64. Now it’s time to warm up the engine of the real obfuscators >:)
But it's an old technique (https://leons.im/posts/anti-debug-with-trap-flag-register/ post from 2011 but it has been in use since at least 2008) and it definitely doesn't work on x64dbg
For anyone in the future who is interested in how to trigger this anti debug technique while debugging in x64dbg:
Set "exception handled by" to "Debugger" in x64dbg -> Options -> Preferences -> Exceptions
The article says:
But it's an old technique (https://leons.im/posts/anti-debug-with-trap-flag-register/ post from 2011 but it has been in use since at least 2008) and it definitely doesn't work on x64dbg