Best X BuildsBrowse ↓
← Back to all builds

GhostDebug

x64 VEH Windows debugger that skips Win32 debug APIs so common anti-debug checks never see it.

Most Windows debuggers go through the official debug APIs, which is exactly what packed binaries look for. GhostDebug is VEH-based instead: it debugs x64 without those APIs, so the usual IsDebuggerPresent-class checks miss it. First-party from @vollragm, with a write-up and the repo.

by @vollragm

Related builds