!hide (enable transparent-mode)
Description of the '!hide' command in HyperDbg.
Last updated
Description of the '!hide' command in HyperDbg.
Last updated
!hide
!hide
Enables the of HyperDbg for anti-debugging and anti-hypervisor methods.
None
If you want to hide HyperDbg and enter the .
To enable the transparent mode, you need to use the following function in libhyperdbg:
This command will not guarantee to provide 100% transparency, especially in nested-virtualization environments.
Due to the transparent mode, some commands may not work as expected or may result in undefined behavior.
HyperDbg will protect you from some anti-hypervisor methods; however, there are other traces for anti-VMware, anti-VirtualBox, etc. methods and these methods are still problematic because, HyperDbg tries to hide itself from anti-debugging and anti-hypervisor methods and it won't hide VMware, VirtualBox, etc. thus, you need to run this command in a physical-machine (not in a nested-virtualization environment); otherwise you should find other traces for virtual machine software and solve those traces by yourself (e.g., hooking anti-VMware APIs and Queries).
This command is frequently updated and new methods will be mitigated in the transparent mode.
This command will continue the debuggee for some time (in Debugger Mode). This means that you lose the current context (registers & memory) after executing this command.
None