Skip to content

Instantly share code, notes, and snippets.

@evernick
Created June 18, 2015 08:25
Show Gist options
  • Save evernick/bc7ed6f8cbaf735573c5 to your computer and use it in GitHub Desktop.
Save evernick/bc7ed6f8cbaf735573c5 to your computer and use it in GitHub Desktop.
#include <windows.h>
#include <stdio.h>
BOOL anti_debug()
{
BOOL result = FALSE;
HKEY hKey;
char lpData[256];
DWORD lpSize = sizeof(lpData);
RegOpenKeyEx(HKEY_LOCAL_MACHINE,
"SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AeDebug",
0, KEY_QUERY_VALUE, &hKey);
RegQueryValueEx(hKey, "Debugger", NULL, NULL, (LPBYTE)&lpData, &lpSize);
strlwr(lpData);
if(strstr(lpData, "ollydbg") || strstr(lpData, "windbg") ||
strstr(lpData, "ImmunityDebugger") || strstr(lpData, "ida"))
result = TRUE;
return result;
}
int main(int argc, char **argv)
{
if(anti_debug())
printf("Debugger Detected\n");
else
printf("No Debugger...\n");
return 0;
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment