/ColdHide

A simple anti-anti debug library for Windows

Primary LanguageCMIT LicenseMIT

ColdHide

ColdHook is a mini and simple open source anti-anti debug library x86/x64 for Windows. To inject this library try using ColdMDLoader.

Hooks

  • PEB hooking
  • NtQueryInformationProcess
  • NtClose
  • Drx hooking
  • NtQueryObject
  • NtQuerySystemInformation
  • NtSetInformationThread
  • NtSetInformationProcess
  • NtCreateThreadEx
  • NtYieldExecution
  • NtSetDebugFilterState
  • Process32FirstW
  • Process32NextW
  • Anti-Anti attach

Build requirements

  • MSVC 2013 build tools are required to compile this project.