skills.rest
wgpsec
wgpsecOFFICIAL
Explore all skills by this author →
Website𝕏@wgpsecGitHub

evasion-technique-integrate

Integrate multiple evasion techniques into existing Loader code with a change report.

1.6k|234|Updated Dec 7, 2019
Search Tags:#integration#obfuscation#loader#evasion#syscall#amsi#anti-analysis
One-click install
npx skills add https://github.com/wgpsec/AboutSecurity --skill evasion-technique-integrate
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: evasion-technique-integrate
Source: https://github.com/wgpsec/AboutSecurity/tree/main/skills/evasion/evasion-technique-integrate
Command: npx skills add https://github.com/wgpsec/AboutSecurity --skill evasion-technique-integrate

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Consolidates disparate evasion techniques into a cohesive integration workflow for existing Loader code, enabling systematic upgrades and component replacements with traceable changes.

Core Features & Use Cases

  • Guided integration: Coordinate multiple evasion techniques (API obfuscation, string obfuscation, Syscall, anti-analysis, AMSI/ETW bypass) into a unified Loader enhancement pipeline.
  • Compatibility governance: Validate loader compatibility, maintain stability, and generate a change report detailing modified APIs, strings, and configurations.
  • Use Case: When a Loader needs new evasion capabilities or component upgrades, this skill prescribes a step-by-step integration path and documentation.

Quick Start

Review references/evasion-techniques-db.json and apply integration patterns to embed new evasion techniques into the target Loader.

Frequently Asked Questions about evasion-technique-integrate

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I integrate multiple evasion techniques into an existing Loader?▼

Integrating evasion techniques into a Loader involves combining API obfuscation, Syscall, and anti-analysis methods into a cohesive workflow. This process maintains loader stability while systematically embedding new capabilities and producing a traceable change report.

What is the process for adding AMSI and ETW bypass capabilities to loader code?▼

Adding AMSI and ETW bypass capabilities requires reading the evasion techniques library, validating compatibility against the existing Loader, and applying integration patterns. This process ensures stability while producing a formal change report with risk assessment.

Can I replace specific evasion components in my Loader without breaking compatibility?▼

Replacing evasion components requires validating loader compatibility through the integration workflow. This governance step enforces stability checks and produces a change report detailing modified APIs, strings, and configurations to ensure no breakage occurs.

How does syscall integration affect loader stability and traceability?▼

Syscall integration impacts loader stability by requiring compatibility validation before component replacement. It enhances traceability by enforcing a formal change report that documents modified APIs, strings, and configurations alongside a comprehensive risk assessment.

When should I use a guided integration workflow for obfuscation techniques?▼

Use a guided integration workflow for obfuscation techniques when a Loader requires new evasion capabilities or component upgrades. It prescribes a step-by-step path to coordinate multiple techniques while maintaining traceable changes and compatibility.

Related Skills

Explore More Software Engineering Skills→
R2W1csR2W1cs
1

red-team-tactics

Simulate attacker tactics mapped to MITRE ATT&CK framework phases.

Community
Advanced
fpt-devteamfpt-devteam

gitnexus-impact-analysis

Map downstream dependents and blast radius from code changes.

Official
Intermediate
leonardoteodorooleonardoteodoroo

anti-reversing-techniques

Catalogues anti-debugging, VM detection and obfuscation techniques for authorized analysis workflows.

Community
Advanced
SnailSploitSnailSploit
2.9k

waf-bypass

Detect WAFs and apply encoding, header, and protocol bypass techniques.

Community
Advanced