| Name / Title |
Added |
Expires |
Hits |
Syntax |
|
 Generated Custom .LNK File |
Oct 13th, 16 |
Never |
938 |
VBScript |
- |
| UNC Path Bug |
Oct 10th, 16 |
Never |
148 |
PowerShell |
- |
| Bit9 Bug 0 |
Sep 26th, 16 |
Never |
234 |
C |
- |
| Middle Eastern Attacks |
May 18th, 15 |
Never |
263 |
None |
- |
| FindRefCLSIDs.py |
May 3rd, 15 |
Never |
234 |
Python |
- |
| DumpRTFObjects.py |
May 3rd, 15 |
Never |
259 |
Python |
- |
| CVE-2012-0158 Control Words |
May 3rd, 15 |
Never |
354 |
C |
- |
| MagedDecrypter |
May 3rd, 15 |
Never |
307 |
Python |
- |
| HexToFile.Py |
Apr 27th, 15 |
Never |
227 |
Python |
- |
| Decode_njRat_3DES |
Apr 25th, 15 |
Never |
301 |
Python |
- |
| Decoder For CyberGate XX-XX-XX-XX Resource |
Apr 24th, 15 |
Never |
262 |
Python |
- |
| RunPE Embedded Executable Extractor |
Apr 22nd, 15 |
Never |
312 |
Python |
- |
| Cyber Attack 6 njRat Source Code |
Apr 18th, 15 |
Never |
443 |
C# |
- |
| Decode_njRat_GZipVersion |
Apr 18th, 15 |
Never |
241 |
Python |
- |
| JS_Malicious_Invoice |
Apr 18th, 15 |
Never |
371 |
JavaScript |
- |
| cIR1R2_Analytics |
Apr 14th, 15 |
Never |
206 |
XML |
- |
| Flushupdate.com /etc/group |
Apr 8th, 15 |
Never |
258 |
C |
- |
| Flushupdate.com /etc/hosts |
Apr 8th, 15 |
Never |
324 |
C |
- |
| Flushupdate.com /etc/passwd |
Apr 8th, 15 |
Never |
363 |
C |
- |
| advtravel.info |
Apr 8th, 15 |
Never |
256 |
C |
- |
| WQL VirtualBox Detection |
Apr 4th, 15 |
Never |
1,554 |
VBScript |
- |
| GetWriteWatch Trick |
Jun 30th, 14 |
Never |
304 |
C |
- |
| PspOpenProcess |
Nov 8th, 13 |
Never |
476 |
C |
- |
| INT 2E / Anti-Tracing Trick |
Oct 24th, 13 |
Never |
424 |
C |
- |
| PspSetContext Nested Task EFlag Anti-Tracing Trick |
Oct 19th, 13 |
Never |
351 |
C |
- |
| NtSystemDebugControl + KdPitchDebugger |
Jul 3rd, 13 |
Never |
1,224 |
C |
- |
| KdUpdateTimeSlipEvent KernelDebugger Trick |
Jul 2nd, 13 |
Never |
228 |
C |
- |
| NtGlobalFlag As Anti-Debug Trick |
Jun 4th, 13 |
Never |
452 |
C |
- |
| PspSetContext Anti-Tracing Trick |
May 9th, 13 |
Never |
385 |
C |
- |
| InstrumentationCallback Anti-Debug+Redirection |
Apr 19th, 13 |
Never |
1,175 |
C |
- |
| Kernel VA Leak |
Apr 18th, 13 |
Never |
355 |
C |
- |
| Anti-Resource Editing |
Apr 3rd, 13 |
Never |
403 |
None |
- |
| Page_0x00000000 Anti-Tracing Trick |
Mar 12th, 13 |
Never |
336 |
C |
- |
| 64-Bit ZwQueryObject (Detect Debuggers) |
Feb 27th, 13 |
Never |
307 |
C |
- |
| Bypass Non-Killable Process |
Feb 12th, 13 |
Never |
402 |
C |
- |
| ZwClose As Anti-Debug Trick |
Feb 9th, 13 |
Never |
667 |
C |
- |
| ProcessIoPriority Bug (BSOD/Non-Killable Process) |
Feb 6th, 13 |
Never |
1,821 |
C |
- |
| ThreadWow64Context |
Feb 2nd, 13 |
Never |
125 |
C |
- |
| RaiseException(0x4000001f) Anti-Olly Trick |
Jan 30th, 13 |
Never |
344 |
C |
- |
| Template Wow64Log.dll |
Jan 25th, 13 |
Never |
322 |
C |
- |
| Injecting 64Bit Dll Into 32Bit Process |
Jan 25th, 13 |
Never |
723 |
C |
- |
| Some Anti-Attaching Candidate Functions |
Jan 25th, 13 |
Never |
243 |
C |
- |
| Kernel Bug #0 ThreadIOPriority |
Jan 23rd, 13 |
Never |
463 |
C |
- |
| ProcessBasicInformation vs. New Flags |
Jan 22nd, 13 |
Never |
457 |
C |
- |
| ProcessExecuteFlags |
Jan 21st, 13 |
Never |
215 |
None |
- |
| LdrpIsImageSEHValidationCompatible |
Jan 21st, 13 |
Never |
223 |
None |
- |
| ProcessInstrumentationCallback |
Jan 20th, 13 |
Never |
256 |
C |
- |
| Wow64SharedInformation vs. Shellcode |
Jan 19th, 13 |
Never |
403 |
C |
- |
| Enumerate Loaded Modules (64-bit) |
Jan 19th, 13 |
Never |
104 |
C |
- |
| Get Main ThreadId Of A Process |
Jan 19th, 13 |
Never |
125 |
C |
- |
| VmTopDown |
Jan 19th, 13 |
Never |
295 |
C |
- |
| SystemFunction0035 |
Jan 14th, 13 |
Never |
164 |
C |
- |
| Call64, Issue 64-bit System Calls |
Jan 12th, 13 |
Never |
542 |
C |
- |
| Redirect Execution |
Jan 6th, 13 |
Never |
308 |
C |
- |
| "Prefix+PUSHFD" Anti-Tracing Trick |
Jan 4th, 13 |
Never |
140 |
C |
- |
| "REP: PUSHFD" Anti-Tracing Trick |
Jan 4th, 13 |
Never |
279 |
C |
- |
| KERNEL: Creation of Thread Environment Block (TEB) |
Dec 31st, 12 |
Never |
1,048 |
None |
- |
| Wow64-Specific Anti-Debug Trick |
Dec 26th, 12 |
Never |
627 |
C |
- |
| Anti-ChildDebugging |
Dec 16th, 12 |
Never |
317 |
C |
- |
| ZwQueryInformationThread(ThreadAmILastThread) |
Dec 14th, 12 |
Never |
214 |
C |
- |
| ZwQueryInformationThread(ThreadLastSystemCall) |
Dec 14th, 12 |
Never |
357 |
C |
- |
| ZwQueryInformationThread(ThreadTebInformation) |
Dec 14th, 12 |
Never |
300 |
C |
- |
| SystemComPlusPackage |
Dec 8th, 12 |
Never |
415 |
C |
- |
| SuppressDllMains --> SkipThreadAttach |
Dec 7th, 12 |
Never |
320 |
C |
- |
| DebugActiveProcess(ParentProcessPid) Trick |
Dec 2nd, 12 |
Never |
136 |
C |
- |
| DebuggerIs32Bit |
Dec 1st, 12 |
Never |
248 |
None |
- |
| TEB.SuppressDebugMsg |
Nov 22nd, 12 |
Never |
399 |
C |
- |
| OllyDbg v1.10 LoadDll.hFile Trick |
Nov 21st, 12 |
Never |
225 |
C |
- |
| ZwCreateThreadEx/HiddenFromDebugger |
Nov 21st, 12 |
Never |
1,286 |
C |
- |
| OllyDbg RaiseException Anti-Debug Trick |
Nov 7th, 12 |
Never |
591 |
C |
- |
| VirtualBox HardDiskInfo Trick |
Nov 5th, 12 |
Never |
118 |
C |
- |
| Reversed "BaseCreateStack" |
Nov 5th, 12 |
Never |
225 |
C |
- |
| VirtualBox CPUID-SEP Trick |
Nov 5th, 12 |
Never |
563 |
C |
- |
| Virtual PC 2007 DR7 Trick |
Oct 29th, 12 |
Never |
227 |
C |
- |
| 32_Bit --> 64_bit PE Header |
Oct 24th, 12 |
Never |
138 |
C |
- |
| SizeOfStackReserve As Anti-Attach Trick |
Oct 24th, 12 |
Never |
628 |
C |
- |
| Trigger STATUS_GUARD_VIOLATION |
Oct 22nd, 12 |
Never |
131 |
C |
- |
| Detect XP In VirtualPC 2007 (Resume Flag Trick) |
Oct 21st, 12 |
Never |
1,069 |
C |
- |
| VirtualBox VS. Hardware Breakpoints |
Oct 21st, 12 |
Never |
199 |
C |
- |
| TEB As Anti-Memory Breakpoints |
Oct 20th, 12 |
Never |
568 |
C |
- |
| Extract EntryPoint, ImageBase, And SizeOfImage |
Oct 18th, 12 |
Never |
178 |
C |
- |
| VBoxSharedFolderFS |
Oct 18th, 12 |
Never |
565 |
C |
- |
| ReadProcessMemory As Anti-Memory Breakpoints |
Oct 18th, 12 |
Never |
746 |
C |
- |
| DebugActiveProcess(-1) |
Oct 15th, 12 |
Never |
220 |
C |
- |
| Processors' Strings |
Oct 14th, 12 |
Never |
90 |
C |
- |
| Resume Flag Support |
Oct 14th, 12 |
Never |
94 |
C |
- |
| lpMinimumApplicationAddress & lpMaximumApplica... |
Oct 13th, 12 |
Never |
258 |
C |
- |
| VirtualPC CPUID TRICK |
Oct 8th, 12 |
Never |
1,758 |
C |
- |
| Detect Hypervisor |
Oct 8th, 12 |
Never |
2,594 |
C |
- |
| VirtualPC Reset Trick |
Oct 8th, 12 |
Never |
1,204 |
C |
- |
| VirtualPC 0x0F 0x3F Combinations |
Oct 8th, 12 |
Never |
710 |
C |
- |
| Detect VirtualPC (The "x0Fx3F" TRICK) |
Oct 8th, 12 |
Never |
832 |
C |
- |
| Detect VirtualBox (Cadmus Mac Address TRICK) |
Oct 7th, 12 |
Never |
2,032 |
C |
- |
| Detect VirtualBox (TYPE 0x7E TRICK) |
Oct 7th, 12 |
Never |
627 |
C |
- |
| Detect VirtualBox (Bios Brand & Bios Version) ... |
Oct 5th, 12 |
Never |
689 |
C |
- |
| Detect VirtualBox (Bios Brand & Bios Version T... |
Oct 5th, 12 |
Never |
1,258 |
C |
- |
| Detect VirtualBox (innotek trick) |
Oct 4th, 12 |
Never |
1,129 |
C++ |
- |
| KdDebuggerEnabled |
Oct 2nd, 12 |
Never |
102 |
C |
- |
| OllyDbg v1.10 INT3/POPFD TRICK + PAGE_EXECUTE_WRIT... |
Oct 1st, 12 |
Never |
123 |
C |
- |
| PAGE_EXECUTE_WRITECOPY TRICK |
Sep 26th, 12 |
Never |
859 |
C |
- |
