Snippet List

Technique Language Author OS Creation Date
Adding antivirus exception Python Malfav.Win32 22 hours, 58 minutes
System Binary Proxy Execution: Rundll32 Delphi DarkCoderSc 3 weeks, 1 day
Removing Commands from SELinux Audit Logs bash Unprotect 1 month
Deleting Troubleshoot Information and Core Dumps bash Unprotect 1 month
Manipulating Debug Logs bash Unprotect 1 month
XProtect Encryption Abuse Python 1 month, 1 week
kernel flag inspection via sysctl Python fr0gger 1 month, 1 week
Exfiltration via SMTP C# Tasdir 1 month, 1 week
XBEL Recently Opened Files Check Python 1d8 1 month, 2 weeks
Virtualization/Sandbox Evasion: User Activity Based Checks Python 1d8 2 months, 2 weeks
Default Windows Wallpaper Check Golang 1d8 2 months, 2 weeks
Abusing the Return Pointer Assembly 0x_ror 2 months, 3 weeks
Impossible Disassembly Rust Gelven 3 months
Detecting Virtual Environment Process C++ 0x_ror 3 months
Process Argument Spoofing Python Wietze 3 months
Process Argument Spoofing C Wietze 3 months
Event Triggered Execution: Linux Inotify Python 1d8 3 months
API Hammering C++ 0x_ror 3 months
Replication Through Removable Media Python 1d8 4 months
QEMU CPU brand evasion C++ kernelwernel 5 months, 2 weeks
bochs CPU oversights evasion C++ kernelwernel 5 months, 3 weeks
Impair Defenses: Disable Windows Event Logging PowerShell 0x0d4y 6 months
Impair Defenses: Disable Windows Event Logging bash 0x0d4y 6 months
AppInit DLL Injection C 1d8 6 months
Hide Artifacts: Hidden Window C 1d8 6 months
VboxEnumShares C++ HoIIovv 6 months
Odd Thread Count C++ kernelwernel 6 months
Hyper-V Signature C++ kernelwernel 6 months
NtDelayExecution C d4rksystem 6 months
APC injection FASM32 DarkCoderSc 8 months, 4 weeks
Filter
Clear