Skip to content

Snippets

A curated, community-driven library of malware development techniques — injection, evasion, persistence, and more — for authorized research and red-team education.

A textbook anti-analysis check that reads the PEB via the IsDebuggerPresent API to detect whether a user-mode debugger is attached to the current process.