From Collaborative RCE Tool Library

Jump to: navigation, search

IDA Stealth

Tool name: IDA Stealth
Rating: 5.0 (1 vote)
Author: Jan Newger                        
Website: http://newgre.net/idastealth
Current version: 1.3.3
Last updated: June 28, 2011
Direct D/L link: http://newgre.net/idastealth
License type: Free / Open Source
Description: IDAStealth is a plugin which aims to hide the IDA debugger from most common anti-debugging techniques. The plugin is composed of two files, the plugin itself and a dll which is injected into the debuggee as soon as the debugger attaches to the process. The injected dll is actually responsible for implementing most of the stealth techniques either by hooking syscalls or by patching some flags in the remote process.
Related URLs:
Forum:
http://newgre.net/forum/2


Screenshot:
Screenshot of IDA Stealth


RSS feed Feed containing all updates for this tool.

You are welcome to add your own useful notes about this tool, for others to see!



If you find that any information for the tool above is missing, outdated or incorrect, please edit it!
(please also edit it if you think it fits well in some additional category, since this can also be controlled)


Views
Category Navigation Tree
   Code Coverage Tools  (13)
   Code Ripping Tools  (2)
   Helper Tools  (3)
   Hex Editors  (13)
   Memory Patchers  (7)
   Packers  (19)
   Profiler Tools  (11)
   String Finders  (10)
   Tool Hiding Tools  (7)
   Tracers  (20)
   Needs New Category  (3)