https://github.com/x64dbg/ScyllaHide

Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide
https://github.com/x64dbg/ScyllaHide

anti-debug anti-debugging debug debugger debugging hacktoberfest ollydbg x64dbg x64dbg-plugin

Last synced: 3 months ago
JSON representation

Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide

• Host: GitHub
• URL: https://github.com/x64dbg/ScyllaHide
• Owner: x64dbg
• License: gpl-3.0
• Created: 2016-01-27T05:26:30.000Z (over 8 years ago)
• Default Branch: master
• Last Pushed: 2023-11-15T22:55:19.000Z (8 months ago)
• Last Synced: 2024-01-22T16:42:48.189Z (5 months ago)
• Topics: anti-debug, anti-debugging, debug, debugger, debugging, hacktoberfest, ollydbg, x64dbg, x64dbg-plugin
• Language: C++
• Homepage:
• Size: 6.4 MB
• Stars: 3,104
• Watchers: 84
• Forks: 400
• Open Issues: 43
• Metadata Files:
  • Readme: README.md
  • Changelog: changelog.txt
  • License: LICENSE

Lists

• awesome-ida-x64-olly-plugin - ScyllaHide
• awesome-malware-analysis - ScyllaHide - An Anti-Anti-Debug library (Debugging and Reverse Engineering / Other Resources)
• awesome-stars - x64dbg/ScyllaHide - Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide (C++)
• awesome-stars - x64dbg/ScyllaHide - Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide (C++)
• awesome-ida-x64-olly-plugin - ScyllaHide
• awesome-rainmana - x64dbg/ScyllaHide - Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide (C++)
• awesome-hacking-lists - x64dbg/ScyllaHide - Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide (C++)
• fucking-awesome-malware-analysis - ScyllaHide - An Anti-Anti-Debug library (Debugging and Reverse Engineering / Other Resources)

README

        
# ScyllaHide

ScyllaHide is an advanced open-source x64/x86 user mode Anti-Anti-Debug library. It hooks various functions to hide debugging. This tool is intended to stay in user mode (ring 3). If you need kernel mode (ring 0) Anti-Anti-Debug, please see [TitanHide](https://github.com/mrexodia/titanhide). Forked from [NtQuery/ScyllaHide](https://bitbucket.org/NtQuery/scyllahide).

ScyllaHide supports various debuggers through plugins:

- OllyDbg [v1](http://www.ollydbg.de) and [v2](http://www.ollydbg.de/version2.html)

- [x64dbg](https://x64dbg.com)

- [Hex-Rays IDA](https://www.hex-rays.com/products/ida/) v6 (not supported)

- TitanEngine v2 ([original](http://www.reversinglabs.com/open-source/titanengine.html) and [updated](https://github.com/x64dbg/TitanEngine/) versions)

PE x64 debugging is fully supported with plugins for x64dbg and IDA.

Please note that ScyllaHide is not limited to these debuggers. You can use the standalone command line version of ScyllaHide. You can inject ScyllaHide into any process debugged by any debugger.

More information is available in the [documentation](https://github.com/x64dbg/ScyllaHide/releases/download/docs-2019-05-17/ScyllaHide.pdf) (PDF).

## License

ScyllaHide is licensed under the [GNU General Public License v3](https://www.gnu.org/licenses/gpl-3.0.en.html).

## Special thanks to

- What for his [POISON Assembler source code](https://tuts4you.com/download.php?view.2281)

- waliedassar for his [blog posts](http://waleedassar.blogspot.de)

- Peter Ferrie for his [PDFs](http://pferrie.host22.com)

- MaRKuS-DJM for [Olly Advanced](http://www.openrce.org/downloads/details/241/Olly_Advanced)

- Lim Bio Liong for [MS Spy++ style Window Finder](http://www.codeproject.com/Articles/1698/MS-Spy-style-Window-Finder)