Skip to content

Anti Suspend and Detect Detaching from debuggers.

Notifications You must be signed in to change notification settings

byte2mov/Anti-Suspend

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

9 Commits
 
 
 
 
 
 

Repository files navigation

Anti-Suspend

Anti-Suspend is a tool designed to detect x64dbg detaching, thread suspension, and perform other related functions.

This project was inspired by this article.

How it Works

The tool creates a dummy thread that triggers when suspended or when the file is suspended. It utilizes DebugActiveProcessStop to stop debugging of a process previously attached to a debugger or utilized by a program for suspension. After that, it pushes the suspension limits to max. then at the end, it checks if the thread can be suspended. If the return does not equal (DWORD)-1, it shows either suspension or previous attachment of a debugger.

Usage

To integrate Anti-Suspend into your project, simply include the provided code snippets into your existing code.

Demo

2024-04-01.04-34-04.mp4

Installation

Clone the repository to your local machine:

git clone https://github.com/byte2mov/Anti-Suspend.git

About

Anti Suspend and Detect Detaching from debuggers.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages