Snippet List

Technique Language Author OS Creation Date
SIDT, Red Pill C++ Unprotect 2 years, 11 months
Geofencing C++ fr0gger 2 years, 11 months
Hiding Mechanisms C++ fr0gger 2 years, 11 months
XOR Operation C++ fr0gger 2 years, 11 months
Unloading Sysmon Driver C++ Unprotect 3 years
Parent Process Detection C++ Unprotect 3 years
Thwarting Stack-Frame Analysis C++ Unprotect 3 years
Misusing Structured Exception Handlers C++ Unprotect 3 years
Control Flow Graph Flattening C++ Unprotect 3 years
Obscuring Control Flow Using Pointers C++ Unprotect 3 years
Obscuring Control Flow C++ Unprotect 3 years
Jump With Same Target C++ Unprotect 3 years
Dynamically Computed Target Address C++ Unprotect 3 years
Disassembly Desynchronization C++ Unprotect 3 years
NOP Sled C++ Unprotect 3 years
Call Trick C++ Unprotect 3 years
Inserting Garbage Bytes C++ Unprotect 3 years
Code Transposition C++ Unprotect 3 years
Interrupts C++ Unprotect 3 years
Hook Injection C++ Unprotect 3 years
Tamper DLL Export Names & GetProcAddress Spoofing C++ Alex Schwarz 3 years, 3 months
Hijack Execution Flow: DLL Search Order Hijacking C++ Sh0ckFR 3 years, 4 months
DLL Proxying C++ Sh0ckFR 3 years, 4 months
Change Module Base Address at Runtime C++ Alex Schwarz 3 years, 4 months
Change Module Name at Runtime C++ Alex Schwarz 3 years, 4 months
Windows Event Log Evasion via Native APIs C++ External 3 years, 5 months
RDTSC C++ External 3 years, 5 months
NtQueryObject C++ External 3 years, 5 months
CsrGetProcessID C++ External 3 years, 5 months
CloseHandle, NtClose C++ External 3 years, 5 months
Filter
Clear