Skip to content

proof of concept of user-mode anti-breakpoint technique

License

Notifications You must be signed in to change notification settings

hotline1337/jobject

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

8 Commits
 
 
 
 
 
 

Repository files navigation

JObject

JObject is a library integrating undocumented ntdll functions in order to prevent anti-debugging. By setting a limit for process memory usage that is less or equal to current memory usage, we can prevent the creation of threads and modification of executable memory.

appveyor-ci appveyor-ci



Usage

#include "jobject.hpp"

auto main(void)
{
  jobject::init();
  /* ... */
}

Contributing

Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.

Please make sure to update tests as appropriate.

License

GPLv3

💵 Want to buy me a Coffee?

 - Donate BTC at `bc1q07aq4n66mz3f3z56lm72sug6rvfm6qp3cydcs7`
 - Donate ETH at `0x4c9e8710b931f580B5d776c7989CE6e323ed1b34`
 - Donate LTC at `LgtxE9ybYhtm7NTrMBjUNQYoJs9tGGrEyC`