discovered 03 Aug 2026
HyperHide
→ View on GitHubHyperHide is an open-source anti-anti-debugging plugin designed for the x64dbg/x32dbg debuggers, employing Intel Extended Page Tables (EPT) to obscure debugging indicators from the operating system. It features a comprehensive suite of syscall hooks that manipulate various aspects of the process environment, including the Process Environment Block (PEB) and thread flags, to effectively conceal the presence of debugging tools from anti-debugging protections in applications. This tool is primarily intended for reverse engineers and security researchers analyzing software behavior in a controlled debugging environment while aiming to evade detection by anti-debugging mechanisms.