Snippet List

Technique Language Author OS Creation Date
Virtualization/Sandbox Evasion: User Activity Based Checks Python 1d8 2 weeks, 1 day
Default Windows Wallpaper Check Golang 1d8 2 weeks, 4 days
Abusing the Return Pointer Assembly 0x_ror 3 weeks, 3 days
Impossible Disassembly Rust Gelven 4 weeks, 1 day
Detecting Virtual Environment Process C++ 0x_ror 1 month
Process Argument Spoofing Python Wietze 1 month
Process Argument Spoofing C Wietze 1 month
Event Triggered Execution: Linux Inotify Python 1d8 1 month
API Hammering C++ 0x_ror 1 month
Replication Through Removable Media Python 1d8 2 months
QEMU CPU brand evasion C++ kernelwernel 3 months, 2 weeks
bochs CPU oversights evasion C++ kernelwernel 3 months, 3 weeks
Impair Defenses: Disable Windows Event Logging PowerShell 0x0d4y 4 months
Impair Defenses: Disable Windows Event Logging bash 0x0d4y 4 months
AppInit DLL Injection C 1d8 4 months
Hide Artifacts: Hidden Window C 1d8 4 months
VboxEnumShares C++ HoIIovv 4 months
Odd Thread Count C++ kernelwernel 4 months
Hyper-V Signature C++ kernelwernel 4 months
NtDelayExecution C d4rksystem 4 months
APC injection FASM32 DarkCoderSc 6 months, 4 weeks
Runtime Function Decryption Python irfan_eternal 8 months, 4 weeks
Retrieve HDD Information C++ HoIIovv 9 months
BuildCommDCBAndTimeoutA C Huntress Research Team 9 months
Reflective DLL injection Delphi DarkCoderSc 1 year
SMB / Named Pipes Delphi DarkCoderSc 1 year, 3 months
SMB / Named Pipes C# DarkCoderSc 1 year, 3 months
Right-to-Left Override (RLO) Extension Spoofing PowerShell DarkCoderSc 1 year, 4 months
Virtualization/Sandbox Evasion: Time Based Evasion Golang Edode 1 year, 5 months
DLL Unhooking C++ External 1 year, 5 months
Filter
Clear