Snippet List

Technique Language Author OS Creation Date
Indicator Removal: Timestomp C# DarkCoderSc 2 years, 10 months
Hijack Execution Flow: DLL Search Order Hijacking C++ Sh0ckFR 2 years, 11 months
DLL Proxying C++ Sh0ckFR 2 years, 11 months
DLL Proxying Python Sh0ckFR 2 years, 11 months
Change Module Base Address at Runtime C++ Alex Schwarz 2 years, 11 months
Change Module Name at Runtime C++ Alex Schwarz 2 years, 11 months
FLIRT Signatures Evasion Assembly Lexsek 3 years
Windows Event Log Evasion via Native APIs C++ External 3 years
Process Hollowing, RunPE Delphi DarkCoderSc 3 years
RDTSC C++ External 3 years
NtQueryObject C++ External 3 years
CsrGetProcessID C++ External 3 years
CloseHandle, NtClose C++ External 3 years
Heap Flag C++ External 3 years
GetTickCount C++ External 3 years
GetLocalTime, GetSystemTime, timeGetTime, NtQueryPerformanceCounter C++ External 3 years
Performing Code Checksum C++ External 3 years
Unhandled Exception Filter C++ External 3 years
Trap Flag C++ External 3 years
INT 0x2D C++ External 3 years
Trap Flag Assembly External 3 years
ICE 0xF1 Assembly External 3 years
INT 0x2D Assembly External 3 years
INT3 Instruction Scanning Assembly External 3 years
INT3 Instruction Scanning C++ External 3 years
Bad String Format MASM External 3 years
SuspendThread C++ External 3 years
NLS Code Injection Through Registry C++ Unprotect 3 years
Indicator Removal: Timestomp C Unprotect 3 years
Killing Windows Event Log C++ Unprotect 3 years
Filter
Clear