NTAPI_Anti-Debugging_Checker_and_Patcher

NTAPI Anti-Debugging Checker and Patcher Disclaimer This tool is intended for educational purposes only. It demonstrates how to check and modify the BeingDebugged flag in the Process Environment Block (PEB) of a target process using NTAPI functions. The tool is meant to help users understand anti-debugging techniques in a legal and controlled environment. Do not use this tool for any malicious or unauthorized activities. The author is not responsible for any misuse of this tool. Always obtain proper authorization before using this tool on any system. Overview The NTAPI Anti-Debugging Checker and Patcher allows you to check if a process is being debugged and modify the BeingDebugged flag in the PEB to bypass basic anti-debugging mechanisms. This project is useful for security researchers ,Malware developers and Analysts interested in understanding how anti-debugging techniques work at a low level. Features Check Debugging Status: Determine if a process is being debugged by reading the BeingDebugged flag from the PEB. Modify Debugging Flag: Patch the BeingDebugged flag to prevent the target process from detecting that it is being debugged.