search

yck1509 / ConfuserEx

An open-source, free protector for .NET applications
http://yck1509.github.io/ConfuserEx/
Other
3.57k stars 1.63k forks source link

Does AntiDebug detect remote debugging? #588

Open jzajac2 opened 7 years ago

jzajac2 commented 7 years ago

Does AntiDebug detect remote debugging? I didn't see any use of win32 CheckRemoteDebuggerPresent() and it isn't clear whether there is an detection in place which covers remote debuggers attaching.

Symbai commented 7 years ago

Why should it? CheckRemoteDebuggerPresent is used to check if a target process is debugged but not referring to the caller, see MSDN. Regarding AntiDebug protection try using DnSpy and attach to your obfuscated assembly. But beware that managed and unmanaged debuggers are two completely different things and need to be checked separately.