Get the latest tech news

Implementing and Detecting Anti-Debugging with Fork()

How to write an anti-debugging mechanism and how to detect it!

As I continue my journey into reverse engineering macOS and iOS applications, I’m currently focusing on ARM assembly. Note: Generally speaking a disassembler will wrote comments to help you reading the ARM but for the sake of the tutorial I get rid of it. By applying this patch, we effectively skip the fork call and force the program to behave as if it is in the child process.

Get the Android app