From Collaborative RCE Knowledge Library

Jump to: navigation, search

Anti-debugging trick: ZwSetInformationThread with ThreadHideFromDebugger

Item name: Anti-debugging trick: ZwSetInformationThread with ThreadHideFromDebugger
Rating: 0.0 (0 votes)
Author: jstorme                        
Home URL: http://www.woodmann.com/forum/showthread.php?t=13438
Last updated: February 23, 2010
Version (if appl.):
Direct D/L link: N/A
Description: The function ZwSetInformationThread can be used with the ThreadHideFromDebugger parameter to prevent any attached debuggers of a thread to receive any exceptions from it.
Related URLs: No related URLs have been submitted for this item yet


RSS feed Feed containing all updates for this item.

You are welcome to add your own useful notes about this tool, for others to see!



If you find that any information for the item above is missing, outdated or incorrect, please edit it!
(please also edit it if you think it fits well in some additional category, since this can also be controlled)


Views
Category Navigation Tree
   Tools