Automatic Detection of Anti‑Debugging with IDA/Ghidra and Debugging Process Efficiency via Support Features
summary
Using IDA and Ghidra, the talk presents methods to automatically detect anti-debugging techniques and provide tooling support to streamline the debugging workflow. It covers concrete integration with the IDA and Ghidra platforms to identify anti-debug checks and assist analysts during dynamic debugging.
AI-written summary · about
chapters (22)
- 0:00Introduction
- 1:09Anti-debugging seeker overview
- 2:55Tool purpose
- 4:22IDA demo
- 5:49Usage
- 7:59Detection results
- 10:32Patching results
- 11:14IDA config
- 16:00Customizing rules
- 17:28Rule file structure
- 20:56Detection rules count
- 21:38Ghidra intro
- 22:41Ghidra demo
- 23:46Ghidra results
- 25:09Results details
- 26:38Ghidra rules
- 28:32Detection verification
- 30:21Ghidra patching
- 31:50Ghidra config
- 32:49NET detection
- 33:32Impact and outlook
- 34:59GitHub repo
related talks
21mAbstract Debuggers: Exploring Program Behaviors Using Static Analysis Results
45mFinding Vulnerabilities through Static Analysis and Scripting
14mDebugging debuggers!!!
47mA Look at Jython-Enhanced Reverse Engineering with Ghidra
48mGhidra - Journey from Classified NSA Tool to Open Source
42mJava debugging tips & tricks
36mDAAS: Debugging as a skill!
31mBypassing Anti-Debugging: A Hybrid Real-Simulated Approach to Rootkit Analysis