Anti-Anti_debugging WinDbg Scripts
 

Hi

Here are some WinDbg's Anti-Anti-debugging scripts. These scripts work with WinDbg (not local) Kernel Debugging.

1)Anti-rdtsc-trick script

2)Script for renaming running process
3)Script for renaming kernel objects


Their complete explanation can be read here-:

Cheerz :)

The explanations for setting up kernel debugging before the above scripts can be used, can be found here :

VirtualKD – Installation

Starting with Windows Kernel Exploitation – part 1 – setting up the lab

Setting Up Kernel-Mode Debugging of a Virtual Machine Manually

As noted above, these are useful only if you are into KERNEL DEBUGGING , not for user-mode debugging :D