oorlykk / ColdHide

A simple anti-anti debug library for Windows

ColdHide

ColdHook is a mini and simple open source anti-anti debug library x86/x64 for Windows. To inject this library try using ColdMDLoader.

Hooks

• PEB hooking
• NtQueryInformationProcess
• NtClose
• Drx hooking
• NtQueryObject
• NtQuerySystemInformation
• NtSetInformationThread
• NtSetInformationProcess
• NtCreateThreadEx
• NtYieldExecution
• NtSetDebugFilterState
• Process32FirstW
• Process32NextW
• Anti-Anti attach

Build requirements

• MSVC 2013 build tools are required to compile this project.