Linux Anti-Debugging Techniques (Fooling the Debugger)
By Silvio Cesare (January 1999)
| Notes |
|---|
| false disassembly |
| anti-debugger |
| anti-analysis |
| anti-forensics |
| Linux |
| debugging |
| virus |
| breakpoint |
| breakpoint detection |
| opcode |
| int3 |
| ptrace |
| man page |
| checking for breakpoints by checking for int3 instruction |
| gdb |
| false breakpoints |
| SIGTRAP |
| signal |
| signal.h |
| signal handler |
| debugger detection with ptrace PTRACE_TRACEME |
| ltrace |
| strace |