Snippet List

Technique Language Author OS Creation Date
WMI Event Subscriptions PowerShell 1d8 1 month, 4 weeks
Adding antivirus exception Python Malfav.Win32 3 months, 1 week
System Binary Proxy Execution: Rundll32 Delphi DarkCoderSc 4 months
Removing Commands from SELinux Audit Logs bash Unprotect 4 months, 2 weeks
Deleting Troubleshoot Information and Core Dumps bash Unprotect 4 months, 2 weeks
Manipulating Debug Logs bash Unprotect 4 months, 2 weeks
XProtect Encryption Abuse Python 4 months, 2 weeks
kernel flag inspection via sysctl Python fr0gger 4 months, 2 weeks
Exfiltration via SMTP C# Tasdir 4 months, 3 weeks
XBEL Recently Opened Files Check Python 1d8 4 months, 3 weeks
Virtualization/Sandbox Evasion: User Activity Based Checks Python 1d8 5 months, 3 weeks
Default Windows Wallpaper Check Golang 1d8 5 months, 3 weeks
Abusing the Return Pointer Assembly 0x_ror 6 months
Impossible Disassembly Rust Gelven 6 months, 1 week
Detecting Virtual Environment Process C++ 0x_ror 6 months, 1 week
Process Argument Spoofing Python Wietze 6 months, 1 week
Process Argument Spoofing C Wietze 6 months, 1 week
Event Triggered Execution: Linux Inotify Python 1d8 6 months, 1 week
API Hammering C++ 0x_ror 6 months, 1 week
Replication Through Removable Media Python 1d8 7 months, 1 week
QEMU CPU brand evasion C++ kernelwernel 8 months, 4 weeks
bochs CPU oversights evasion C++ kernelwernel 9 months
Impair Defenses: Disable Windows Event Logging PowerShell 0x0d4y 9 months, 1 week
Impair Defenses: Disable Windows Event Logging bash 0x0d4y 9 months, 1 week
AppInit DLL Injection C 1d8 9 months, 1 week
Hide Artifacts: Hidden Window C 1d8 9 months, 1 week
VboxEnumShares C++ HoIIovv 9 months, 1 week
Odd Thread Count C++ kernelwernel 9 months, 1 week
Hyper-V Signature C++ kernelwernel 9 months, 1 week
NtDelayExecution C d4rksystem 9 months, 1 week
Filter
Clear