Results for “sandbox-evasion”

Imported skill sandbox from langchain

Execute advanced evasion by injecting malicious code into the memory space of a legitimate, suspended process (Process Hollowing). This skill details techniques to bypass static and dynamic analysis by masking malicious activity behind trusted processes like svchost.exe or explorer.exe.

Generates minimal macOS Seatbelt sandbox configurations to isolate and restrict applications with allowlist-based profiles.

Imported skill modal from langchain

Detect container escape attempts using runtime security tools like Falco, Sysdig, and custom seccomp/audit rules.

Imported skill daytona from langchain

Extract cached credentials, password hashes, Kerberos tickets, and authentication tokens from memory dumps using Volatility and Mimikatz for forensic investigation.

Proactively hunt for adversary abuse of legitimate system binaries (LOLBins) to execute malicious payloads while evading detection.

Run a sandboxed shell command with timeout and allowlist

琦玉（少年漫）认知与表达框架（压缩蒸馏）：无敌无聊、一拳解构热血、超市券日常 触发：一拳超人 等。虚构

熊二（子供向）认知与表达框架（压缩蒸馏）：贪吃憨厚、跟班喜剧、意外破局… 触发：熊出没 等。安全喜剧

Builds a structured SOC incident response playbook for ransomware attacks covering detection, containment, eradication, and recovery phases with specific SIEM queries, isolation procedures, and decision trees.

Detect NTFS timestamp manipulation (MITRE T1070.006) by comparing $STANDARD_INFORMATION vs $FILE_NAME timestamps in the MFT using analyzeMFT and Python.

Performs advanced network reconnaissance using Nmap's scripting engine, timing controls, evasion techniques, and output parsing to discover hosts, enumerate services, detect vulnerabilities, and fingerprint operating systems across authorized target networks.

AI safety and responsible AI practices

唐晶（都市剧虚构）认知与表达框架（压缩蒸馏）：闺蜜边界、职场精英冷感、理性分手 触发：我的前半生 等。虚构