Add: outflanknl/TamperETW to Defense Evasion section

This commit is contained in:
pe3zx 2021-09-01 19:40:58 +07:00
parent e40639b5da
commit 3deb5271ee

View File

@ -1256,6 +1256,10 @@ Some tools can be categorized in more than one category. But because the current
<td><a href="https://github.com/OsandaMalith/PE2HTML">OsandaMalith/PE2HTML</a></td>
<td>Injects HTML/PHP/ASP to the PE</td>
</tr>
<tr>
<td><a href="https://github.com/outflanknl/TamperETW">outflanknl/TamperETW</a></td>
<td>PoC to demonstrate how CLR ETW events can be tampered.</td>
</tr>
<tr>
<td><a href="https://github.com/peewpw/Invoke-PSImage">peewpw/Invoke-PSImage</a></td>
<td>Embeds a PowerShell script in the pixels of a PNG file and generates a oneliner to execute</td>