cesare1999

Linux Anti-Debugging Techniques (Fooling the Debugger)

By Silvio Cesare (January 1999)

https://github.com/RobertLarsen/ProsaWorkshop/blob/master/presentations/01-reversing/papers/linux-anti-debugging.txt

Notes
false disassembly
anti-debugger
anti-analysis
anti-forensics
Linux
debugging
virus
breakpoint
breakpoint detection
opcode
int3
ptrace
man page
checking for breakpoints by checking for int3 instruction
gdb
false breakpoints
SIGTRAP
signal
signal.h
signal handler
debugger detection with ptrace PTRACE_TRACEME
ltrace
strace

---