Skip to content

A simple anti-anti debug library for Windows

License

Notifications You must be signed in to change notification settings

jackwolail/ColdHide

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

9 Commits
 
 
 
 
 
 
 
 

Repository files navigation

ColdHide

ColdHide is a mini and simple open source user mode anti-anti debug library x86/x64 for Windows. To inject this library try using ColdMDLoader.

Hooks

  • PEB hooking
  • NtQueryInformationProcess
  • NtClose
  • Drx hooking
  • NtQueryObject
  • NtQuerySystemInformation
  • NtSetInformationThread
  • NtSetInformationProcess
  • NtCreateThreadEx
  • NtYieldExecution
  • NtSetDebugFilterState
  • Process32FirstW
  • Process32NextW
  • GetTickCount
  • GetTickCount64
  • Anti-Anti attach

Build requirements

  • MSVC 2013 build tools are required to compile this project.

About

A simple anti-anti debug library for Windows

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages

  • C 98.7%
  • C++ 1.3%