Anti Debugging Techniques

Comprehensive playbook for detecting and bypassing anti-debug protections in native binaries. Covers the full spectrum: Linux ptrace tricks, /proc parsing, signal hijacking, Windows PEB flags, NtQueryInformationProcess calls, TLS callbacks, hardware breakpoint detection, and timing checks via rdtsc. Each technique includes a quick reference table showing first-choice and backup bypass methods, from LD_PRELOAD shims to ScyllaHide automation. The cross-reference matrix rates reliability and tool compatibility across GDB, x64dbg, WinDbg, and Frida. Indispensable when you're staring at a protected binary that kills itself the moment you attach a debugger. Routes cleanly to obfuscation and VM reversing skills when protections are layered.

skills.sh installs: 3.9K
GitHub stars: 2.6K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add yaklang/hack-skills --skill anti-debugging-techniques --agent claude-code

Installs into .claude/skills of the current project.

Files

SKILL: Anti-Debugging Techniques — Detection & Bypass Playbook

AI LOAD INSTRUCTION: Expert anti-debug techniques across Linux and Windows. Covers ptrace, PEB flags, NtQueryInformationProcess, timing attacks, signal-based detection, TLS callbacks, VEH tricks, and all corresponding bypass methods. Base models often miss the distinction between user-mode and kernel-mode detection and the correct patching strategy for each.

0. RELATED ROUTING

code-obfuscation-deobfuscation when the binary also uses control flow flattening, VM protection, or string encryption
vm-and-bytecode-reverse when the anti-debug sits inside a custom VM dispatcher
symbolic-execution-tools when you want to symbolically skip anti-debug checks entirely

Advanced Reference

Also load ANTI_DEBUG_MATRIX.md when you need:

Complete cross-reference matrix of technique × OS × detection method × bypass method
Per-technique reliability ratings and false-positive notes
Tool compatibility chart (GDB, x64dbg, WinDbg, Frida, ScyllaHide)

SKILL.md on GitHub