Development 47
- EarlyBird-IndirectSyscall
- EarlyBird-DirectSyscall
- Ghost-Process-Ldr
- Early-Bird-HashedAPIs
- Basic-Dynamic-API-Resolution
- Shellcode-Placement-ResourceSection
- Shellcode-Placement-ResourceSection-Manual
- Shellcode-Placement-TextSection
- Remote-Thread-Injection-Callback-Trampoline
- Hardware-Breakpoints-For-Hooking
- Advanced-Keylogging
- N0xshell-Ldr
- N0xshell-Encryptor
- Harpadering Process Injection
- Basic-Keylogger
- Process-Hollowing
- Ghost-Process-Injection
- Threadless-Injection
- PE-Fluctuation
- Module-Stomping
- Local-PE-Injection
- Domain-KillSwitch
- Peristence-Windows-Registry
- MetaData-Modification
- DRM-Equipped-Malware
- NTDLL-Unhooking-SuspendedProcess
- MalDevEdr
- ApcInjection
- Anti-Analysis Techniques
- EarlyBird-Injection
- Shellcode Placement
- Process-Injection (Local)
- Process-Enumeration
- APC-Injection
- Unhooking NTDLL - Knowndlls
- IAT-Camoflage
- Syscalls-Syswhisphers
- Syscalls-ProcessInjection
- StaticAPI-Hashing
- ProcessArgumentSpoofing
- Process Injection - Shellcode Injection
- Local Mapping Injection
- IAT Hiding - Custom GetProcAddress
- AntiDebugging
- AntiDebugging-SelfDeletion
- Anti-Virtual-Techniques
- Anti-Virtual-APIHammering