# ShowStopper | Anti-Debug tricks exploration tool

**URL:** <https://onehack.st/t/showstopper-anti-debug-tricks-exploration-tool/163549>\
**Category:** Tools & Scripts\
**Tags:** tools, programming, streaming\
**Created:** [November 23, 2020, 11:36am UTC](https://onehack.st/t/showstopper-anti-debug-tricks-exploration-tool/163549 "2020-11-23T11:36:35Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Prometheus](https://onehack.st/user_avatar/onehack.st/prometheus/32/34950_2.png) [@Prometheus](https://onehack.st/u/Prometheus)\
**Post date:** [November 23, 2020, 11:36am UTC](https://onehack.st/t/showstopper-anti-debug-tricks-exploration-tool/163549/1 "2020-11-23T11:36:36Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/3/f/3f5d503933203b382acfc0e9a72893e962ea6771.png)

The **ShowStopper** project is a tool to help malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.  
With this tool, you can attach a debugger to its process and research the debugger’s behavior for the techniques you need (the virtual addresses of functions that apply to anti-debug techniques are printed to console) and compare them with their implementation. The tool includes a varied set of different techniques from multiple sources, including real-world malware and published documents and articles. The implemented techniques work for the latest Windows releases and for different modern debuggers.

**Documenattion**

How to install and use the tool, and contribute your findings in the [documentation](https://github.com/CheckPointSW/showstopper/blob/master/DOCS.md) for the project.

**System Requirements**

- Windows 7, 8, 8.1, 10 (x86/x86-64)
- 32-Bit debuggers (OllyDbg, x32dbg, WinDbg, etc.)

**References**

- [P. Ferrie. The “Ultimate”Anti-Debugging Reference](http://pferrie.epizy.com/papers/antidebug.pdf)
- [N. Falliere. Windows Anti-Debug Reference](https://www.symantec.com/connect/articles/windows-anti-debug-reference)
- [J. Jackson. An Anti-Reverse Engineering Guide](https://forum.tuts4you.com/files/file/1218-anti-reverse-engineering-guide/)
- [Anti](https://www.apriorit.com/dev-blog/367-anti-reverse-engineering-protection-techniques-to-use-before-releasing-software)Debugging Protection Techniques with Examples
- [simpliFiRE.AntiRE](https://bitbucket.org/fkie_cd_dare/simplifire.antire/src/master/)

_Contributed by_ Check Point Software Technologies LTD.  
_Programmed by_ Yaraslau Harakhavik

## GitHub

> **[GitHub - CheckPointSW/showstopper: ShowStopper is a tool for helping malware...](https://github.com/CheckPointSW/showstopper)**
>
> ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.