Software
Software is a generic term for custom or commercial code, operating system utilities, open-source software, or other tools used to conduct behavior modeled in ATT&CK. Some instances of software have multiple names associated with the same instance due to various organizations tracking the same set of software by different names. The team makes a best effort to track overlaps between names based on publicly reported associations, which are designated as “Associated Software” on each page (formerly labeled “Aliases”), because we believe these overlaps are useful for analyst awareness.
Software entries include publicly reported technique use or capability to use a technique and may be mapped to Groups who have been reported to use that Software. The information provided does not represent all possible technique use by a piece of Software, but rather a subset that is available solely through open source reporting.
- Tool - Commercial, open-source, built-in, or publicly available software that could be used by a defender, pen tester, red teamer, or an adversary. This category includes both software that generally is not found on an enterprise system as well as software generally available as part of an operating system that is already present in an environment. Examples include PsExec, Metasploit, Mimikatz, as well as Windows utilities such as Net, netstat, Tasklist, etc.
- Malware - Commercial, custom closed source, or open source software intended to be used for malicious purposes by adversaries. Examples include PlugX, CHOPSTICK, etc.
Software: 377
| Name | Associated Software | Description |
|---|---|---|
| 3PARA RAT | 3PARA RAT is a remote access tool (RAT) programmed in C++ that has been used by Putter Panda. | |
| 4H RAT | 4H RAT is malware that has been used by Putter Panda since at least 2007. | |
| adbupd | adbupd is a backdoor used by PLATINUM that is similar to Dipsind. | |
| Adups | Adups is software that was pre-installed onto Android devices, including those made by BLU Products. The software was reportedly designed to help a Chinese phone manufacturer monitor user behavior, transferring sensitive data to a Chinese server. | |
| ADVSTORESHELL | AZZY, EVILTOSS, NETUI, Sedreco | ADVSTORESHELL is a spying backdoor that has been used by APT28 from at least 2012 to 2016. It is generally used for long-term espionage and is deployed on targets deemed interesting after a reconnaissance phase. |
| Agent Tesla | Agent Tesla is a spyware Trojan written in visual basic. | |
| Agent.btz | Agent.btz is a worm that primarily spreads itself via removable devices such as USB drives. It reportedly infected U.S. military networks in 2008. | |
| Allwinner | Allwinner is a company that supplies processors used in Android tablets and other devices. A Linux kernel distributed by Allwinner for use on these devices reportedly contained a backdoor. | |
| Android Overlay Malware | Android Overlay Malware is malware that was used in a 2016 campaign targeting European countries. The malware attempted to trick users into providing banking credentials. | |
| Android/Chuli.A | Android/Chuli.A is Android malware that was delivered to activist groups via a spearphishing email with an attachment. | |
| ANDROIDOS_ANSERVER.A | ANDROIDOS_ANSERVER.A is Android malware that is unique because it uses encrypted content within a blog site for command and control. | |
| AndroRAT | AndroRAT is malware that allows a third party to control the device and collect information. | |
| Arp | arp.exe | Arp displays information about a system's Address Resolution Protocol (ARP) cache. |
| ASPXSpy | ASPXTool | ASPXSpy is a Web shell. It has been modified by Threat Group-3390 actors to create the ASPXTool version. |
| Astaroth | Astaroth is a Trojan and information stealer known to affect companies in Europe and Brazil. It has been known publicly since at least late 2017. | |
| at | at.exe | at is used to schedule tasks on a system to run at a specified date or time. |
| AuditCred | Roptimizer | AuditCred is a malicious DLL that has been used by Lazarus Group during their 2018 attacks. |
| AutoIt backdoor | AutoIt backdoor is malware that has been used by the actors responsible for the MONSOON campaign. The actors frequently used it in weaponized .pps files exploiting CVE-2014-6352. This malware makes use of the legitimate scripting language for Windows GUI automation with the same name. | |
| Azorult | Azorult is a commercial Trojan that is used to steal information from compromised hosts. Azorult has been observed in the wild as early as 2016. In July 2018, Azorult was seen used in a spearphishing campaign against targets in North America. Azorult has been seen used for cryptocurrency theft. | |
| Backdoor.Oldrea | Havex | Backdoor.Oldrea is a backdoor used by Dragonfly. It appears to be custom malware authored by the group or specifically for it. |
| BACKSPACE | Lecna | BACKSPACE is a backdoor used by APT30 that dates back to at least 2005. |
| BADCALL | BADCALL is a Trojan malware variant used by the group Lazarus Group. | |
| BADNEWS | BADNEWS is malware that has been used by the actors responsible for the Patchwork campaign. Its name was given due to its use of RSS feeds, forums, and blogs for command and control. | |
| BadPatch | BadPatch is a Windows Trojan that was used in a Gaza Hackers-linked campaign. | |
| Bandook | Bandook is a commercially available RAT, written in Delphi, which has been available since roughly 2007 . | |
| Bankshot | Trojan Manuscript | Bankshot is a remote access tool (RAT) that was first reported by the Department of Homeland Security in December of 2017. In 2018, Lazarus Group used the Bankshot implant in attacks against the Turkish financial sector. |
| BBSRAT | BBSRAT is malware with remote access tool functionality that has been used in targeted compromises. | |
| BISCUIT | BISCUIT is a backdoor that has been used by APT1 since as early as 2007. | |
| Bisonal | Bisonal is malware that has been used in attacks against targets in Russia, South Korea, and Japan. It has been observed in the wild since 2014. | |
| BITSAdmin | BITSAdmin is a command line tool used to create and manage BITS Jobs. | |
| BLACKCOFFEE | BLACKCOFFEE is malware that has been used by several Chinese groups since at least 2013. | |
| BlackEnergy | Black Energy | BlackEnergy is a malware toolkit that has been used by both criminal and APT actors. It dates back to at least 2007 and was originally designed to create botnets for use in conducting Distributed Denial of Service (DDoS) attacks, but its use has evolved to support various plug-ins. It is well known for being used during the confrontation between Georgia and Russia in 2008, as well as in targeting Ukrainian institutions. Variants include BlackEnergy 2 and BlackEnergy 3. |
| BONDUPDATER | BONDUPDATER is a PowerShell backdoor used by OilRig. It was first observed in November 2017 during targeting of a Middle Eastern government organization, and an updated version was observed in August 2018 being used to target a government organization with spearphishing emails. | |
| BOOTRASH | BOOTRASH is a Bootkit that targets Windows operating systems. It has been used by threat actors that target the financial sector. | |
| BrainTest | BrainTest is a family of Android malware. | |
| Brave Prince | Brave Prince is a Korean-language implant that was first observed in the wild in December 2017. It contains similar code and behavior to Gold Dragon, and was seen along with Gold Dragon and RunningRAT in operations surrounding the 2018 Pyeongchang Winter Olympics. | |
| Briba | Briba is a trojan used by Elderwood to open a backdoor and download files on to compromised hosts. | |
| BS2005 | BS2005 is malware that was used by Ke3chang in spearphishing campaigns since at least 2011. | |
| BUBBLEWRAP | Backdoor.APT.FakeWinHTTPHelper | BUBBLEWRAP is a full-featured, second-stage backdoor used by the admin@338 group. It is set to run when the system boots and includes functionality to check, upload, and register plug-ins that can further enhance its capabilities. |
| Cachedump | Cachedump is a publicly-available tool that program extracts cached password hashes from a system’s registry. | |
| CALENDAR | CALENDAR is malware used by APT1 that mimics legitimate Gmail Calendar traffic. | |
| Calisto | Calisto is a macOS Trojan that opens a backdoor on the compromised machine. Calisto is believed to have first been developed in 2016. | |
| CallMe | CallMe is a Trojan designed to run on Apple OSX. It is based on a publicly available tool called Tiny SHell. | |
| Cannon | Cannon is a Trojan with variants written in C# and Delphi. It was first observed in April 2018. | |
| Carbanak | Anunak | Carbanak is a full-featured, remote backdoor used by a group of the same name (Carbanak). It is intended for espionage, data exfiltration, and providing remote access to infected machines. |
| Carbon | Carbon is a sophisticated, second-stage backdoor and framework that can be used to steal sensitive information from victims. Carbon has been selectively used by Turla to target government and foreign affairs-related organizations in Central Asia. | |
| Cardinal RAT | Cardinal RAT is a potentially low volume remote access trojan (RAT) observed since December 2015. Cardinal RAT is notable for its unique utilization of uncompiled C# source code and the Microsoft Windows built-in csc.exe compiler. | |
| Catchamas | Catchamas is a Windows Trojan that steals information from compromised systems. | |
| CCBkdr | CCBkdr is malware that was injected into a signed version of CCleaner and distributed from CCleaner's distribution website. | |
| certutil | certutil.exe | certutil is a command-line utility that can be used to obtain certificate authority information and configure Certificate Services. |
| Chaos | Chaos is Linux malware that compromises systems by brute force attacks against SSH services. Once installed, it provides a reverse shell to its controllers, triggered by unsolicited packets. | |
| Charger | Charger is Android malware that steals steals contacts and SMS messages from the user's device. It can also lock the device and demand ransom payment if it receives admin permissions. | |
| ChChes | Scorpion, HAYMAKER | ChChes is a Trojan that appears to be used exclusively by menuPass. It was used to target Japanese organizations in 2016. Its lack of persistence methods suggests it may be intended as a first-stage tool. |
| Cherry Picker | Cherry Picker is a point of sale (PoS) memory scraper. | |
| China Chopper | China Chopper is a Web Shell hosted on Web servers to provide access back into an enterprise network that does not rely on an infected system calling back to a remote command and control server. It has been used by several threat groups. | |
| CHOPSTICK | Backdoor.SofacyX, SPLM, Xagent, X-Agent, webhp | CHOPSTICK is a malware family of modular backdoors used by APT28. It has been used since at least 2012 and is usually dropped on victims as second-stage malware, though it has been used as first-stage malware in several cases. It has both Windows and Linux variants. It is tracked separately from the X-Agent for Android. |
| CloudDuke | MiniDionis, CloudLook | |
| cmd | cmd.exe | cmd is the Windows command-line interpreter that can be used to interact with systems and execute other processes and utilities. Cmd.exe contains native functionality to perform many operations to interact with the system, including listing files in a directory (e.g., |
| Cobalt Strike | Cobalt Strike is a commercial, full-featured, penetration testing tool which bills itself as “adversary simulation software designed to execute targeted attacks and emulate the post-exploitation actions of advanced threat actors”. Cobalt Strike’s interactive post-exploit capabilities cover the full range of ATT&CK tactics, all executed within a single, integrated system. In addition to its own capabilities, Cobalt Strike leverages the capabilities of other well-known tools such as Metasploit and Mimikatz. | |
| Cobian RAT | Cobian RAT is a backdoor, remote access tool that has been observed since 2016. | |
| CoinTicker | CoinTicker is a malicious application that poses as a cryptocurrency price ticker and installs components of the open source backdoors EvilOSX and EggShell. | |
| Comnie | Comnie is a remote backdoor which has been used in attacks in East Asia. | |
| ComRAT | ComRAT is a remote access tool suspected of being a decedent of Agent.btz and used by Turla. | |
| CORALDECK | ||
| CORESHELL | Sofacy, SOURFACE | CORESHELL is a downloader used by APT28. The older versions of this malware are known as SOURFACE and newer versions as CORESHELL. |
| CosmicDuke | TinyBaron, BotgenStudios, NemesisGemina | CosmicDuke is malware that was used by APT29 from 2010 to 2015. |
| CozyCar | CozyDuke, CozyBear, Cozer, EuroAPT | CozyCar is malware that was used by APT29 from 2010 to 2015. It is a modular malware platform, and its backdoor component can be instructed to download and execute a variety of modules with different functionality. |
| Crimson | MSIL/Crimson | Crimson is malware used as part of a campaign known as Operation Transparent Tribe that targeted Indian diplomatic and military victims. |
| CrossRAT | CrossRAT is a cross platform RAT. | |
| DarkComet | DarkKomet, Fynloski, Krademok, FYNLOS | DarkComet is a Windows remote administration tool and backdoor. |
| Daserf | Muirim, Nioupale | Daserf is a backdoor that has been used to spy on and steal from Japanese, South Korean, Russian, Singaporean, and Chinese victims. Researchers have identified versions written in both Visual C and Delphi. |
| DDKONG | DDKONG is a malware sample that was part of a campaign by Rancor. DDKONG was first seen used in February 2017. | |
| DealersChoice | DealersChoice is a Flash exploitation framework used by APT28. | |
| Dendroid | Dendroid is an Android malware family. | |
| Denis | Denis is a Windows backdoor and Trojan. | |
| Derusbi | PHOTO | Derusbi is malware used by multiple Chinese APT groups. Both Windows and Linux variants have been observed. |
| Dipsind | Dipsind is a malware family of backdoors that appear to be used exclusively by PLATINUM. | |
| DOGCALL | DOGCALL is a backdoor used by APT37 that has been used to target South Korean government and military organizations in 2017. It is typically dropped using a Hangul Word Processor (HWP) exploit. | |
| Dok | Retefe | Dok steals banking information through man-in-the-middle . |
| Downdelph | Delphacy | Downdelph is a first-stage downloader written in Delphi that has been used by APT28 in rare instances between 2013 and 2015. |
| DownPaper | DownPaper is a backdoor Trojan; its main functionality is to download and run second stage malware. | |
| DressCode | DressCode is an Android malware family. | |
| DroidJack | DroidJack is an Android remote access tool that has been observed posing as legitimate applications including the Super Mario Run and Pokemon GO games. | |
| dsquery | dsquery.exe | dsquery is a command-line utility that can be used to query Active Directory for information from a system within a domain. It is typically installed only on Windows Server versions but can be installed on non-server variants through the Microsoft-provided Remote Server Administration Tools bundle. |
| DualToy | DualToy is Windows malware that installs malicious applications onto Android and iOS devices connected over USB. | |
| Duqu | Duqu is a malware platform that uses a modular approach to extend functionality after deployment within a target network. | |
| DustySky | NeD Worm | DustySky is multi-stage malware written in .NET that has been used by Molerats since May 2015. |
| Dyre | Dyre is a Trojan that has been used for financial gain. | |
| Ebury | Ebury is an SSH backdoor targeting Linux operating systems. Attackers require root-level access, which allows them to replace SSH binaries (ssh, sshd, ssh-add, etc) or modify a shared library used by OpenSSH (libkeyutils). | |
| Elise | BKDR_ESILE, Page | Elise is a custom backdoor Trojan that appears to be used exclusively by Lotus Blossom. It is part of a larger group of tools referred to as LStudio, ST Group, and APT0LSTU. |
| ELMER | ELMER is a non-persistent, proxy-aware HTTP backdoor written in Delphi that has been used by APT16. | |
| Emissary | Emissary is a Trojan that has been used by Lotus Blossom. It shares code with Elise, with both Trojans being part of a malware group referred to as LStudio. | |
| Emotet | Geodo | Emotet is a modular malware variant which is primarily used as a downloader for other malware variants such as TrickBot and IcedID. Emotet first emerged in June 2014 and has been primarily used to target the banking sector. |
| Empire | EmPyre, PowerShell Empire | Empire is an open source, cross-platform remote administration and post-exploitation framework that is publicly available on GitHub. While the tool itself is primarily written in Python, the post-exploitation agents are written in pure PowerShell for Windows and Python for Linux/macOS. Empire was one of five tools singled out by a joint report on public hacking tools being widely used by adversaries. |
| Epic | Tavdig, Wipbot, WorldCupSec, TadjMakhal | |
| EvilGrab | EvilGrab is a malware family with common reconnaissance capabilities. It has been deployed by menuPass via malicious Microsoft Office documents as part of spearphishing campaigns. | |
| Exaramel | Exaramel is multi-platform backdoor for Linux and Windows systems. | |
| Expand | Expand is a Windows utility used to expand one or more compressed CAB files. It has been used by BBSRAT to decompress a CAB file into executable content. | |
| FakeM | FakeM is a shellcode-based Windows backdoor that has been used by Scarlet Mimic. | |
| FALLCHILL | FALLCHILL is a RAT that has been used by Lazarus Group since at least 2016 to target the aerospace, telecommunications, and finance industries. It is usually dropped by other Lazarus Group malware or delivered when a victim unknowingly visits a compromised website. | |
| Felismus | Felismus is a modular backdoor that has been used by Sowbug. | |
| FELIXROOT | GreyEnergy mini | FELIXROOT is a backdoor that has been used to target Ukrainian victims. |
| Fgdump | Fgdump is a Windows password hash dumper. | |
| Final1stspy | Final1stspy is a dropper family that has been used to deliver DOGCALL. | |
| FinFisher | FinSpy | FinFisher is a government-grade commercial surveillance spyware reportedly sold exclusively to government agencies for use in targeted and lawful criminal investigations. It is heavily obfuscated and uses multiple anti-analysis techniques. It has other variants including Wingbird. |
| Flame | Flamer, sKyWIper | Flame is a sophisticated toolkit that has been used to collect information since at least 2010, largely targeting Middle East countries. |
| FLASHFLOOD | FLASHFLOOD is malware developed by APT30 that allows propagation and exfiltration of data over removable devices. APT30 may use this capability to exfiltrate data across air-gaps. | |
| FLIPSIDE | FLIPSIDE is a simple tool similar to Plink that is used by FIN5 to maintain access to victims. | |
| Forfiles | Forfiles is a Windows utility commonly used in batch jobs to execute commands on one or more selected files or directories (ex: list all directories in a drive, read the first line of all files created yesterday, etc.). Forfiles can be executed from either the command line, Run window, or batch files/scripts. | |
| FruitFly | FruitFly is designed to spy on mac users . | |
| FTP | ftp.exe | FTP is a utility commonly available with operating systems to transfer information over the File Transfer Protocol (FTP). Adversaries can use it to transfer other tools onto a system or to exfiltrate data. |
| Gazer | WhiteBear | |
| GeminiDuke | GeminiDuke is malware that was used by APT29 from 2009 to 2012. | |
| gh0st RAT | gh0st RAT is a remote access tool (RAT). The source code is public and it has been used by multiple groups. | |
| GLOOXMAIL | Trojan.GTALK | GLOOXMAIL is malware used by APT1 that mimics legitimate Jabber/XMPP traffic. |
| Gold Dragon | Gold Dragon is a Korean-language, data gathering implant that was first observed in the wild in South Korea in July 2017. Gold Dragon was used along with Brave Prince and RunningRAT in operations targeting organizations associated with the 2018 Pyeongchang Winter Olympics. | |
| Gooligan | Ghost Push | Gooligan is a malware family that runs privilege escalation exploits on Android devices and then uses its escalated privileges to steal authentication tokens that can be used to access data from many Google applications. Gooligan has been described as part of the Ghost Push Android malware family. |
| GravityRAT | GravityRAT is a remote access tool (RAT) and has been in ongoing development since 2016. The actor behind the tool remains unknown, but two usernames have been recovered that link to the author, which are "TheMartian" and "The Invincible." According to the National Computer Emergency Response Team (CERT) of India, the malware has been identified in attacks against organization and entities in India. | |
| GreyEnergy | GreyEnergy is a backdoor written in C and compiled in Visual Studio. GreyEnergy shares similarities with the BlackEnergy malware and is thought to be the successor of it. | |
| gsecdump | gsecdump is a publicly-available credential dumper used to obtain password hashes and LSA secrets from Windows operating systems. | |
| H1N1 | H1N1 is a malware variant that has been distributed via a campaign using VBA macros to infect victims. Although it initially had only loader capabilities, it has evolved to include information-stealing functionality. | |
| Hacking Team UEFI Rootkit | Hacking Team UEFI Rootkit is a rootkit developed by the company Hacking Team as a method of persistence for remote access software. | |
| HALFBAKED | HALFBAKED is a malware family consisting of multiple components intended to establish persistence in victim networks. | |
| HAMMERTOSS | HammerDuke, NetDuke | HAMMERTOSS is a backdoor that was used by APT29 in 2015. |
| HAPPYWORK | HAPPYWORK is a downloader used by APT37 to target South Korean government and financial victims in November 2016. | |
| HARDRAIN | HARDRAIN is a Trojan malware variant reportedly used by the North Korean government. | |
| Havij | Havij is an automatic SQL Injection tool distributed by the Iranian ITSecTeam security company. Havij has been used by penetration testers and adversaries. | |
| hcdLoader | hcdLoader is a remote access tool (RAT) that has been used by APT18. | |
| HDoor | Custom HDoor | HDoor is malware that has been customized and used by the Naikon group. |
| Helminth | Helminth is a backdoor that has at least two variants - one written in VBScript and PowerShell that is delivered via a macros in Excel spreadsheets, and one that is a standalone Windows executable. | |
| Hi-Zor | Hi-Zor is a remote access tool (RAT) that has characteristics similar to Sakula. It was used in a campaign named INOCNATION. | |
| HIDEDRV | HIDEDRV is a rootkit used by APT28. It has been deployed along with Downdelph to execute and hide that malware. | |
| Hikit | Hikit is malware that has been used by Axiom for late-stage persistence and exfiltration after the initial compromise. | |
| HOMEFRY | HOMEFRY is a 64-bit Windows password dumper/cracker that has previously been used in conjunction with other Leviathan backdoors. | |
| HOPLIGHT | HOPLIGHT is a backdoor Trojan that has reportedly been used by the North Korean government. | |
| HTRAN | HUC Packet Transmit Tool | HTRAN is a tool that proxies connections through intermediate hops and aids users in disguising their true geographical location. It can be used by adversaries to hide their location when interacting with the victim networks. |
| HTTPBrowser | Token Control, HttpDump | HTTPBrowser is malware that has been used by several threat groups. It is believed to be of Chinese origin. |
| httpclient | httpclient is malware used by Putter Panda. It is a simple tool that provides a limited range of functionality, suggesting it is likely used as a second-stage or supplementary/backup tool. | |
| HummingBad | HummingBad is a family of Android malware that generates fraudulent advertising revenue and has the ability to obtain root access on older, vulnerable versions of Android. | |
| HummingWhale | HummingWhale is an Android malware family that performs ad fraud. | |
| Hydraq | Aurora, 9002 RAT | Hydraq is a data-theft trojan first used by Elderwood in the 2009 Google intrusion known as Operation Aurora, though variations of this trojan have been used in more recent campaigns by other Chinese actors, possibly including APT17. |
| ifconfig | ifconfig is a Unix-based utility used to gather information about and interact with the TCP/IP settings on a system. | |
| iKitten | OSX/MacDownloader | iKitten is a macOS exfiltration agent . |
| Impacket | Impacket is an open source collection of modules written in Python for programmatically constructing and manipulating network protocols. Impacket contains several tools for remote service execution, Kerberos manipulation, Windows credential dumping, packet sniffing, and relay attacks. | |
| InnaputRAT | InnaputRAT is a remote access tool that can exfiltrate files from a victim’s machine. InnaputRAT has been seen out in the wild since 2016. | |
| InvisiMole | InvisiMole is a modular spyware program that has been used by threat actors since at least 2013. InvisiMole has two backdoor modules called RC2FM and RC2CL that are used to perform post-exploitation activities. It has been discovered on compromised victims in the Ukraine and Russia. | |
| Invoke-PSImage | Invoke-PSImage takes a PowerShell script and embeds the bytes of the script into the pixels of a PNG image. It generates a one liner for executing either from a file of from the web. Example of usage is embedding the PowerShell code from the Invoke-Mimikatz module and embed it into an image file. By calling the image file from a macro for example, the macro will download the picture and execute the PowerShell code, which in this case will dump the passwords. | |
| ipconfig | ipconfig.exe | ipconfig is a Windows utility that can be used to find information about a system's TCP/IP, DNS, DHCP, and adapter configuration. |
| ISMInjector | ISMInjector is a Trojan used to install another OilRig backdoor, ISMAgent. | |
| Ixeshe | Ixeshe is a malware family that has been used since 2009 to attack targets in East Asia. | |
| Janicab | Janicab is an OS X trojan that relied on a valid developer ID and oblivious users to install it. | |
| JHUHUGIT | Trojan.Sofacy, Seduploader, JKEYSKW, Sednit, GAMEFISH, SofacyCarberp | JHUHUGIT is malware used by APT28. It is based on Carberp source code and serves as reconnaissance malware. |
| JPIN | JPIN is a custom-built backdoor family used by PLATINUM. Evidence suggests developers of JPIN and Dipsind code bases were related in some way. | |
| jRAT | JSocket, AlienSpy, Frutas, Sockrat, Unrecom, jFrutas, Adwind, jBiFrost, Trojan.Maljava | jRAT is a cross-platform, Java-based backdoor originally available for purchase in 2012. Variants of jRAT have been distributed via a software-as-a-service platform, similar to an online subscription model. |
| Judy | Judy is auto-clicking adware that was distributed through multiple apps in the Google Play Store. | |
| KARAE | KARAE is a backdoor typically used by APT37 as first-stage malware. | |
| Kasidet | Kasidet is a backdoor that has been dropped by using malicious VBA macros. | |
| Kazuar | Kazuar is a fully featured, multi-platform backdoor Trojan written using the Microsoft .NET framework. | |
| Keydnap | OSX/Keydnap | This piece of malware steals the content of the user's keychain while maintaining a permanent backdoor . |
| KEYMARBLE | KEYMARBLE is a Trojan that has reportedly been used by the North Korean government. | |
| KeyRaider | KeyRaider is malware that steals Apple account credentials and other data from jailbroken iOS devices. It also has ransomware functionality. | |
| Koadic | Koadic is a Windows post-exploitation framework and penetration testing tool. Koadic is publicly available on GitHub and the tool is executed via the command-line. Koadic has several options for staging payloads and creating implants. Koadic performs most of its operations using Windows Script Host. | |
| Komplex | Komplex is a backdoor that has been used by APT28 on OS X and appears to be developed in a similar manner to XAgentOSX . | |
| KOMPROGO | KOMPROGO is a signature backdoor used by APT32 that is capable of process, file, and registry management. | |
| KONNI | KONNI is a Windows remote administration too that has been seen in use since 2014 and evolved in its capabilities through at least 2017. KONNI has been linked to several campaigns involving North Korean themes. KONNI has significant code overlap with the NOKKI malware family. There is some evidence potentially linking KONNI to APT37. | |
| Kwampirs | Kwampirs is a backdoor Trojan used by Orangeworm. It has been found on machines which had software installed for the use and control of high-tech imaging devices such as X-Ray and MRI machines. | |
| LaZagne | LaZagne is a post-exploitation, open-source tool used to recover stored passwords on a system. It has modules for Windows, Linux, and OSX, but is mainly focused on Windows systems. LaZagne is publicly available on GitHub. | |
| Linfo | Linfo is a rootkit trojan used by Elderwood to open a backdoor on compromised hosts. | |
| Linux Rabbit | Linux Rabbit is malware that targeted Linux servers and IoT devices in a campaign lasting from August to October 2018. It shares code with another strain of malware known as Rabbot. The goal of the campaign was to install cryptocurrency miners onto the targeted servers and devices. | |
| LockerGoga | LockerGoga is ransomware that has been tied to various attacks on European companies. It was first reported upon in January 2019. | |
| LOWBALL | LOWBALL is malware used by admin@338. It was used in August 2015 in email messages targeting Hong Kong-based media organizations. | |
| Lslsass | Lslsass is a publicly-available tool that can dump active logon session password hashes from the lsass process. | |
| Lurid | Enfal | Lurid is a malware family that has been used by several groups, including PittyTiger, in targeted attacks as far back as 2006. |
| MacSpy | MacSpy is a malware-as-a-service offered on the darkweb . | |
| Marcher | Marcher is Android malware that is used for financial fraud. | |
| Matroyshka | Matroyshka is a malware framework used by CopyKittens that consists of a dropper, loader, and RAT. It has multiple versions; v1 was seen in the wild from July 2016 until January 2017. v2 has fewer commands and other minor differences. | |
| MazarBOT | MazarBOT is Android malware that was distributed via SMS in Denmark in 2016. | |
| meek | meek is an open-source Tor plugin that tunnels Tor traffic through HTTPS connections. | |
| Micropsia | Micropsia is a remote access tool written in Delphi. | |
| Mimikatz | Mimikatz is a credential dumper capable of obtaining plaintext Windows account logins and passwords, along with many other features that make it useful for testing the security of networks. | |
| MimiPenguin | MimiPenguin is a credential dumper, similar to Mimikatz, designed specifically for Linux platforms. | |
| Miner-C | Mal/Miner-C, PhotoMiner | Miner-C is malware that mines victims for the Monero cryptocurrency. It has targeted FTP servers and Network Attached Storage (NAS) devices to spread. |
| MiniDuke | MiniDuke is malware that was used by APT29 from 2010 to 2015. The MiniDuke toolset consists of multiple downloader and backdoor components. The loader has been used with other MiniDuke components as well as in conjunction with CosmicDuke and PinchDuke. | |
| MirageFox | MirageFox is a remote access tool used against Windows systems. It appears to be an upgraded version of a tool known as Mirage, which is a RAT believed to originate in 2012. | |
| Mis-Type | Mis-Type is a backdoor hybrid that was used by Dust Storm in 2012. | |
| Misdat | Misdat is a backdoor that was used by Dust Storm from 2010 to 2011. | |
| Mivast | Mivast is a backdoor that has been used by Deep Panda. It was reportedly used in the Anthem breach. | |
| MobileOrder | MobileOrder is a Trojan intended to compromise Android mobile devices. It has been used by Scarlet Mimic. | |
| MoonWind | MoonWind is a remote access tool (RAT) that was used in 2016 to target organizations in Thailand. | |
| More_eggs | More_eggs is a JScript backdoor used by Cobalt Group. Its name was given based on the variable "More_eggs" being present in its code. There are at least two different versions of the backdoor being used, version 2.0 and version 4.4. | |
| Mosquito | Mosquito is a Win32 backdoor that has been used by Turla. Mosquito is made up of three parts: the installer, the launcher, and the backdoor. The main backdoor is called CommanderDLL and is launched by the loader program. | |
| MURKYTOP | ||
| Naid | Naid is a trojan used by Elderwood to open a backdoor on compromised hosts. | |
| NanHaiShu | NanHaiShu is a remote access tool and JScript backdoor used by Leviathan. NanHaiShu has been used to target government and private-sector organizations that have relations to the South China Sea dispute. | |
| NanoCore | NanoCore is a modular remote access tool developed in .NET that can be used to spy on victims and steal information. It has been used by threat actors since 2013. | |
| NavRAT | NavRAT is a remote access tool designed to upload, download, and execute files. It has been observed in attacks targeting South Korea. | |
| nbtstat | nbtstat.exe | nbtstat is a utility used to troubleshoot NetBIOS name resolution. |
| NDiskMonitor | NDiskMonitor is a custom backdoor written in .NET that appears to be unique to Patchwork. | |
| Nerex | Nerex is a Trojan used by Elderwood to open a backdoor on compromised hosts. | |
| Net | net.exe | The Net utility is a component of the Windows operating system. It is used in command-line operations for control of users, groups, services, and network connections. Net has a great deal of functionality, much of which is useful for an adversary, such as gathering system and network information for Discovery, moving laterally through Windows Admin Shares using |
| Net Crawler | NetC | Net Crawler is an intranet worm capable of extracting credentials using credential dumpers and spreading to systems on a network over SMB by brute forcing accounts with recovered passwords and using PsExec to execute a copy of Net Crawler. |
| NETEAGLE | NETEAGLE is a backdoor developed by APT30 with compile dates as early as 2008. It has two main variants known as “Scout” and “Norton.” | |
| netsh | netsh.exe | netsh is a scripting utility used to interact with networking components on local or remote systems. |
| netstat | netstat.exe | netstat is an operating system utility that displays active TCP connections, listening ports, and network statistics. |
| NetTraveler | NetTraveler is malware that has been used in multiple cyber espionage campaigns for basic surveillance of victims. The earliest known samples have timestamps back to 2005, and the largest number of observed samples were created between 2010 and 2013. | |
| NETWIRE | NETWIRE is a publicly available, multiplatform remote administration tool (RAT) that has been used by criminal and APT groups since at least 2012. | |
| Nidiran | Backdoor.Nidiran | Nidiran is a custom backdoor developed and used by Suckfly. It has been delivered via strategic web compromise. |
| Nltest | Nltest is a Windows command-line utility used to list domain controllers and enumerate domain trusts. | |
| NOKKI | NOKKI is a modular remote access tool. The earliest observed attack using NOKKI was in January 2018. NOKKI has significant code overlap with the KONNI malware family. There is some evidence potentially linking NOKKI to APT37. | |
| NotCompatible | NotCompatible is an Android malware family that was used between at least 2014 and 2016. It has multiple variants that have become more sophisticated over time. | |
| NotPetya | GoldenEye, Petrwrap, Nyetya | NotPetya is malware that was first seen in a worldwide attack starting on June 27, 2017. The main purpose of the malware appeared to be to effectively destroy data and disk structures on compromised systems. Though NotPetya presents itself as a form of ransomware, it appears likely that the attackers never intended to make the encrypted data recoverable. As such, NotPetya may be more appropriately thought of as a form of wiper malware. NotPetya contains worm-like features to spread itself across a computer network using the SMBv1 exploits EternalBlue and EternalRomance. |
| OBAD | OBAD is an Android malware family. | |
| OceanSalt | OceanSalt is a Trojan that was used in a campaign targeting victims in South Korea, United States, and Canada. OceanSalt shares code similarity with SpyNote RAT, which has been linked to APT1. | |
| Octopus | Octopus is a Windows Trojan. | |
| OLDBAIT | Sasfis | |
| OldBoot | OldBoot is an Android malware family. | |
| Olympic Destroyer | Olympic Destroyer is malware that was first seen infecting computer systems at the 2018 Winter Olympics, held in Pyeongchang, South Korea. The main purpose of the malware appears to be to cause destructive impact to the affected systems. The malware leverages various native Windows utilities and API calls to carry out its destructive tasks. The malware has worm-like features to spread itself across a computer network in order to maximize its destructive impact. | |
| OnionDuke | OnionDuke is malware that was used by APT29 from 2013 to 2015. | |
| OopsIE | OopsIE is a Trojan used by OilRig to remotely execute commands as well as upload/download files to/from victims. | |
| Orz | Orz | Orz is a custom JavaScript backdoor used by Leviathan. It was observed being used in 2014 as well as in August 2017 when it was dropped by Microsoft Publisher files. |
| OSInfo | OSInfo is a custom tool used by APT3 to do internal discovery on a victim's computer and network. | |
| OSX_OCEANLOTUS.D | OSX_OCEANLOTUS.D is a MacOS backdoor that has been used by APT32. | |
| OwaAuth | OwaAuth is a Web shell and credential stealer deployed to Microsoft Exchange servers that appears to be exclusively used by Threat Group-3390. | |
| P2P ZeuS | Peer-to-Peer ZeuS, Gameover ZeuS | P2P ZeuS is a closed-source fork of the leaked version of the ZeuS botnet. It presents improvements over the leaked version, including a peer-to-peer architecture. |
| Pasam | Pasam is a trojan used by Elderwood to open a backdoor on compromised hosts. | |
| Pass-The-Hash Toolkit | Pass-The-Hash Toolkit is a toolkit that allows an adversary to "pass" a password hash (without knowing the original password) to log in to systems. | |
| Pegasus for Android | Chrysaor | Pegasus for Android is the Android version of malware that has reportedly been linked to the NSO Group. The iOS version is tracked separately under Pegasus for iOS. |
| Pegasus for iOS | Pegasus for iOS is the iOS version of malware that has reportedly been linked to the NSO Group. It has been advertised and sold to target high-value victims. The Android version is tracked separately under Pegasus for Android. | |
| PHOREAL | ||
| PinchDuke | PinchDuke is malware that was used by APT29 from 2008 to 2010. | |
| Ping | Ping | Ping is an operating system utility commonly used to troubleshoot and verify network connections. |
| Pisloader | Pisloader is a malware family that is notable due to its use of DNS as a C2 protocol as well as its use of anti-analysis tactics. It has been used by APT18 and is similar to another malware family, HTTPBrowser, that has been used by the group. | |
| PJApps | PJApps is an Android malware family. | |
| PLAINTEE | PLAINTEE is a malware sample that has been used by Rancor in targeted attacks in Singapore and Cambodia. | |
| PlugX | DestroyRAT, Sogu, Kaba, Korplug | PlugX is a remote access tool (RAT) that uses modular plugins. It has been used by multiple threat groups. |
| pngdowner | pngdowner is malware used by Putter Panda. It is a simple tool with limited functionality and no persistence mechanism, suggesting it is used only as a simple "download-and- execute" utility. | |
| PoisonIvy | Poison Ivy, Darkmoon | PoisonIvy is a popular remote access tool (RAT) that has been used by many groups. |
| POORAIM | POORAIM is a backdoor used by APT37 in campaigns since at least 2014. | |
| PoshC2 | PoshC2 is an open source remote administration and post-exploitation framework that is publicly available on GitHub. The server-side components of the tool are primarily written in Python, while the implants are written in PowerShell. Although PoshC2 is primarily focused on Windows implantation, it does contain a basic Python dropper for Linux/macOS. | |
| POSHSPY | POSHSPY is a backdoor that has been used by APT29 since at least 2015. It appears to be used as a secondary backdoor used if the actors lost access to their primary backdoors. | |
| Power Loader | Win32/Agent.UAW | Power Loader is modular code sold in the cybercrime market used as a downloader in malware families such as Carberp, Redyms and Gapz. |
| PowerDuke | PowerDuke is a backdoor that was used by APT29 in 2016. It has primarily been delivered through Microsoft Word or Excel attachments containing malicious macros. | |
| POWERSOURCE | DNSMessenger | POWERSOURCE is a PowerShell backdoor that is a heavily obfuscated and modified version of the publicly available tool DNS_TXT_Pwnage. It was observed in February 2017 in spearphishing campaigns against personnel involved with United States Securities and Exchange Commission (SEC) filings at various organizations. The malware was delivered when macros were enabled by the victim and a VBS script was dropped. |
| PowerSploit | PowerSploit is an open source, offensive security framework comprised of PowerShell modules and scripts that perform a wide range of tasks related to penetration testing such as code execution, persistence, bypassing anti-virus, recon, and exfiltration. | |
| POWERSTATS | Powermud | POWERSTATS is a PowerShell-based first stage backdoor used by MuddyWater. |
| POWERTON | POWERTON is a custom PowerShell backdoor first observed in 2018. It has typically been deployed as a late-stage backdoor by APT33. At least two variants of the backdoor have been identified, with the later version containing improved functionality. | |
| POWRUNER | POWRUNER is a PowerShell script that sends and receives commands to and from the C2 server. | |
| Prikormka | Prikormka is a malware family used in a campaign known as Operation Groundbait. It has predominantly been observed in Ukraine and was used as early as 2008. | |
| Proton | Proton is a macOS backdoor focusing on data theft and credential access . | |
| Proxysvc | Proxysvc is a malicious DLL used by Lazarus Group in a campaign known as Operation GhostSecret. It has appeared to be operating undetected since 2017 and was mostly observed in higher education organizations. The goal of Proxysvc is to deliver additional payloads to the target and to maintain control for the attacker. It is in the form of a DLL that can also be executed as a standalone process. | |
| PsExec | PsExec is a free Microsoft tool that can be used to execute a program on another computer. It is used by IT administrators and attackers. | |
| Psylo | Psylo is a shellcode-based Trojan that has been used by Scarlet Mimic. It has similar characteristics as FakeM. | |
| Pteranodon | Pteranodon is a custom backdoor used by Gamaredon Group. | |
| PUNCHBUGGY | PUNCHBUGGY is a dynamic-link library (DLL) downloader utilized by FIN8. | |
| PUNCHTRACK | PSVC | PUNCHTRACK is non-persistent point of sale (POS) system malware utilized by FIN8 to scrape payment card data. |
| Pupy | Pupy is an open source, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool. It is written in Python and can be generated as a payload in several different ways (Windows exe, Python file, PowerShell oneliner/file, Linux elf, APK, Rubber Ducky, etc.). Pupy is publicly available on GitHub. | |
| pwdump | pwdump is a credential dumper. | |
| QUADAGENT | ||
| QuasarRAT | xRAT | QuasarRAT is an open-source, remote access tool that is publicly available on GitHub. QuasarRAT is developed in the C# language. |
| RARSTONE | RARSTONE is malware used by the Naikon group that has some characteristics similar to PlugX. | |
| RATANKBA | RATANKBA is a remote controller tool used by Lazarus Group. RATANKBA has been used in attacks targeting financial institutions in Poland, Mexico, Uruguay, the United Kingdom, and Chile. It was also seen used against organizations related to telecommunications, management consulting, information technology, insurance, aviation, and education. RATANKBA has a graphical user interface to allow the attacker to issue jobs to perform on the infected machines. | |
| RawDisk | RawDisk is a legitimate commercial driver from the EldoS Corporation that is used for interacting with files, disks, and partitions. The driver allows for direct modification of data on a local computer's hard drive. In some cases, the tool can enact these raw disk modifications from user-mode processes, circumventing Windows operating system security features. | |
| RawPOS | FIENDCRY, DUEBREW, DRIFTWOOD | RawPOS is a point-of-sale (POS) malware family that searches for cardholder data on victims. It has been in use since at least 2008. FireEye divides RawPOS into three components: FIENDCRY, DUEBREW, and DRIFTWOOD. |
| RCSAndroid | RCSAndroid is Android malware. | |
| Reaver | Reaver is a malware family that has been in the wild since at least late 2016. Reporting indicates victims have primarily been associated with the "Five Poisons," which are movements the Chinese government considers dangerous. The type of malware is rare due to its final payload being in the form of Control Panel Items. | |
| RedDrop | RedDrop is an Android malware family that exfiltrates sensitive data from devices. | |
| RedLeaves | BUGJUICE | RedLeaves is a malware family used by menuPass. The code overlaps with PlugX and may be based upon the open source tool Trochilus. |
| Reg | reg.exe | Reg is a Windows utility used to interact with the Windows Registry. It can be used at the command-line interface to query, add, modify, and remove information. Utilities such as Reg are known to be used by persistent threats. |
| Regin | Regin is a malware platform that has targeted victims in a range of industries, including telecom, government, and financial institutions. Some Regin timestamps date back to 2003. | |
| Remcos | Remcos is a closed-source tool that is marketed as a remote control and surveillance software by a company called Breaking Security. Remcos has been observed being used in malware campaigns. | |
| Remexi | Remexi is a Windows-based Trojan that was developed in the C programming language. | |
| RemoteCMD | RemoteCMD is a custom tool used by APT3 to execute commands on a remote system similar to SysInternal's PSEXEC functionality. | |
| Remsec | Backdoor.Remsec, ProjectSauron | Remsec is a modular backdoor that has been used by Strider and appears to have been designed primarily for espionage purposes. Many of its modules are written in Lua. |
| Responder | Responder is an open source tool used for LLMNR, NBT-NS and MDNS poisoning, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication. | |
| RGDoor | RGDoor is a malicious Internet Information Services (IIS) backdoor developed in the C++ language. RGDoor has been seen deployed on webservers belonging to the Middle East government organizations. RGDoor provides backdoor access to compromised IIS servers. | |
| RIPTIDE | ||
| ROCKBOOT | ROCKBOOT is a Bootkit that has been used by an unidentified, suspected China-based group. | |
| RogueRobin | RogueRobin is a payload used by DarkHydrus that has been developed in PowerShell and C#. | |
| ROKRAT | ROKRAT is a remote access tool (RAT) used by APT37. This software has been used to target victims in South Korea. APT37 used ROKRAT during several campaigns in 2016 through 2018. | |
| route | route.exe | route can be used to find or change information within the local system IP routing table. |
| Rover | Rover is malware suspected of being used for espionage purposes. It was used in 2015 in a targeted email sent to an Indian Ambassador to Afghanistan. | |
| RTM | RTM is custom malware written in Delphi. It is used by the group of the same name (RTM). | |
| Ruler | Ruler is a tool to abuse Microsoft Exchange services. It is publicly available on GitHub and the tool is executed via the command line. The creators of Ruler have also released a defensive tool, NotRuler, to detect its usage. | |
| RuMMS | RuMMS is an Android malware family. | |
| RunningRAT | RunningRAT is a remote access tool that appeared in operations surrounding the 2018 Pyeongchang Winter Olympics along with Gold Dragon and Brave Prince. | |
| S-Type | S-Type is a backdoor that was used by Dust Storm from 2013 to 2014. | |
| Sakula | Sakurel, VIPER | Sakula is a remote access tool (RAT) that first surfaced in 2012 and was used in intrusions throughout 2015. |
| SamSam | Samas | SamSam is ransomware that appeared in early 2016. Unlike some ransomware, its variants have required operators to manually interact with the malware to execute some of its core components. |
| schtasks | schtasks.exe | schtasks is used to schedule execution of programs or scripts on a Windows system to run at a specific date and time. |
| SDelete | SDelete is an application that securely deletes data in a way that makes it unrecoverable. It is part of the Microsoft Sysinternals suite of tools. | |
| SeaDuke | SeaDaddy, SeaDesk | SeaDuke is malware that was used by APT29 from 2014 to 2015. It was used primarily as a secondary backdoor for victims that were already compromised with CozyCar. |
| Seasalt | Seasalt is malware that has been linked to APT1's 2010 operations. It shares some code similarities with OceanSalt. | |
| SEASHARPEE | SEASHARPEE is a Web shell that has been used by APT34. | |
| Shamoon | Disttrack | Shamoon is wiper malware that was first used by an Iranian group known as the "Cutting Sword of Justice" in 2012. Other versions known as Shamoon 2 and Shamoon 3 were observed in 2016 and 2018. Shamoon has also been seen leveraging RawDisk to carry out data wiping tasks. The term Shamoon is sometimes used to refer to the group using the malware as well as the malware itself. |
| ShiftyBug | ShiftyBug is an auto-rooting adware family of malware for Android. The family is very similar to the other Android families known as Shedun, Shuanet, Kemoge, though it is not believed all the families were created by the same group. | |
| SHIPSHAPE | SHIPSHAPE is malware developed by APT30 that allows propagation and exfiltration of data over removable devices. APT30 may use this capability to exfiltrate data across air-gaps. | |
| SHOTPUT | Backdoor.APT.CookieCutter, Pirpi | |
| SHUTTERSPEED | SHUTTERSPEED is a backdoor used by APT37. | |
| Skeleton Key | Skeleton Key is malware used to inject false credentials into domain controllers with the intent of creating a backdoor password. Functionality similar to Skeleton Key is included as a module in Mimikatz. | |
| Skygofree | Skygofree is Android spyware that is believed to have been developed in 2014 and used through at least 2017. | |
| SLOWDRIFT | SLOWDRIFT is a backdoor used by APT37 against academic and strategic victims in South Korea. | |
| Smoke Loader | Dofoil | Smoke Loader is a malicious bot application that can be used to load other malware. Smoke Loader has been seen in the wild since at least 2011 and has included a number of different payloads. It is notorious for its use of deception and self-protection. It also comes with several plug-ins. |
| SNUGRIDE | SNUGRIDE is a backdoor that has been used by menuPass as first stage malware. | |
| Socksbot | Socksbot is a backdoor that abuses Socket Secure (SOCKS) proxies. | |
| SOUNDBITE | ||
| SPACESHIP | SPACESHIP is malware developed by APT30 that allows propagation and exfiltration of data over removable devices. APT30 may use this capability to exfiltrate data across air-gaps. | |
| SpeakUp | SpeakUp is a Trojan backdoor that targets both Linux and OSX devices. It was first observed in January 2019. | |
| spwebmember | spwebmember is a Microsoft SharePoint enumeration and data dumping tool written in .NET. | |
| SpyDealer | SpyDealer is Android malware that exfiltrates sensitive data from Android devices. | |
| SpyNote RAT | SpyNote RAT (Remote Access Trojan) is a family of malicious Android apps. The SpyNote RAT builder tool can be used to develop malicious apps with the malware's functionality. | |
| sqlmap | sqlmap is an open source penetration testing tool that can be used to automate the process of detecting and exploiting SQL injection flaws. | |
| SslMM | SslMM is a full-featured backdoor used by Naikon that has multiple variants. | |
| Starloader | Starloader is a loader component that has been observed loading Felismus and associated tools. | |
| Stealth Mango | Stealth Mango is Android malware that has reportedly been used to successfully compromise the mobile devices of government officials, members of the military, medical professionals, and civilians. The iOS malware known as Tangelo is believed to be from the same developer. | |
| StreamEx | StreamEx is a malware family that has been used by Deep Panda since at least 2015. In 2016, it was distributed via legitimate compromised Korean websites. | |
| Sykipot | Sykipot is malware that has been used in spearphishing campaigns since approximately 2007 against victims primarily in the US. One variant of Sykipot hijacks smart cards on victims. The group using this malware has also been referred to as Sykipot. | |
| SynAck | SynAck is variant of Trojan ransomware targeting mainly English-speaking users since at least fall 2017. | |
| Sys10 | Sys10 is a backdoor that was used throughout 2013 by Naikon. | |
| Systeminfo | Systeminfo | Systeminfo is a Windows utility that can be used to gather detailed information about a computer. |
| T9000 | T9000 is a backdoor that is a newer variant of the T5000 malware family, also known as Plat1. Its primary function is to gather information about the victim. It has been used in multiple targeted attacks against U.S.-based organizations. | |
| Taidoor | Taidoor is malware that has been used since at least 2010, primarily to target Taiwanese government organizations. | |
| Tangelo | Tangelo is iOS malware that is believed to be from the same developers as the Stealth Mango Android malware. It is not a mobile application, but rather a Debian package that can only run on jailbroken iOS devices. | |
| Tasklist | The Tasklist utility displays a list of applications and services with their Process IDs (PID) for all tasks running on either a local or a remote computer. It is packaged with Windows operating systems and can be executed from the command-line interface. | |
| TDTESS | TDTESS is a 64-bit .NET binary backdoor used by CopyKittens. | |
| TEXTMATE | DNSMessenger | TEXTMATE is a second-stage PowerShell backdoor that is memory-resident. It was observed being used along with POWERSOURCE in February 2017. |
| TINYTYPHON | TINYTYPHON is a backdoor that has been used by the actors responsible for the MONSOON campaign. The majority of its code was reportedly taken from the MyDoom worm. | |
| TinyZBot | TinyZBot is a bot written in C# that was developed by Cleaver. | |
| Tor | Tor is a software suite and network that provides increased anonymity on the Internet. It creates a multi-hop proxy network and utilizes multilayer encryption to protect both the message and routing information. Tor utilizes "Onion Routing," in which messages are encrypted with multiple layers of encryption; at each step in the proxy network, the topmost layer is decrypted and the contents forwarded on to the next node until it reaches its destination. | |
| TrickBot | Totbrick, TSPY_TRICKLOAD | TrickBot is a Trojan spyware program that has mainly been used for targeting banking sites in United States, Canada, UK, Germany, Australia, Austria, Ireland, London, Switzerland, and Scotland. TrickBot first emerged in the wild in September 2016 and appears to be a successor to Dyre. TrickBot is developed in the C++ programming language. |
| Trojan-SMS.AndroidOS.Agent.ao | Trojan-SMS.AndroidOS.Agent.ao is Android malware. | |
| Trojan-SMS.AndroidOS.FakeInst.a | Trojan-SMS.AndroidOS.FakeInst.a is Android malware. | |
| Trojan-SMS.AndroidOS.OpFake.a | Trojan-SMS.AndroidOS.OpFake.a is Android malware. | |
| Trojan.Karagany | Trojan.Karagany is a backdoor primarily used for recon. The source code for it was leaked in 2010 and it is sold on underground forums. | |
| Trojan.Mebromi | Trojan.Mebromi is BIOS-level malware that takes control of the victim before MBR. | |
| Truvasys | Truvasys is first-stage malware that has been used by PROMETHIUM. It is a collection of modules written in the Delphi programming language. | |
| TURNEDUP | TURNEDUP is a non-public backdoor. It has been dropped by APT33's DROPSHOT malware (also known as Stonedrill). | |
| Twitoor | Twitoor is an Android malware family that likely spreads by SMS or via malicious URLs. | |
| TYPEFRAME | TYPEFRAME is a remote access tool that has been used by Lazarus Group. | |
| UACMe | UACMe is an open source assessment tool that contains many methods for bypassing Windows User Account Control on multiple versions of the operating system. | |
| UBoatRAT | UBoatRAT is a remote access tool that was identified in May 2017. | |
| Umbreon | A Linux rootkit that provides backdoor access and hides from defenders. | |
| Unknown Logger | Unknown Logger is a publicly released, free backdoor. Version 1.5 of the backdoor has been used by the actors responsible for the MONSOON campaign. | |
| UPPERCUT | ANEL | |
| Uroburos | ||
| USBStealer | USB Stealer, Win32/USBStealer | USBStealer is malware that has used by APT28 since at least 2005 to extract information from air-gapped networks. It does not have the capability to communicate over the Internet and has been used in conjunction with ADVSTORESHELL. |
| Vasport | Vasport is a trojan used by Elderwood to open a backdoor on compromised hosts. | |
| VERMIN | VERMIN is a remote access tool written in the Microsoft .NET framework. It is mostly composed of original code, but also has some open source code. | |
| Volgmer | Volgmer is a backdoor Trojan designed to provide covert access to a compromised system. It has been used since at least 2013 to target the government, financial, automotive, and media industries. Its primary delivery mechanism is suspected to be spearphishing. | |
| WannaCry | WanaCry, WanaCrypt, WanaCrypt0r, WCry | WannaCry is ransomware that was first seen in a global attack during May 2017, which affected more than 150 countries. It contains worm-like features to spread itself across a computer network using the SMBv1 exploit EternalBlue. |
| WEBC2 | WEBC2 is a backdoor used by APT1 to retrieve a Web page from a predetermined C2 server. | |
| Wiarp | Wiarp is a trojan used by Elderwood to open a backdoor on compromised hosts. | |
| Windows Credential Editor | WCE | Windows Credential Editor is a password dumping tool. |
| WINDSHIELD | WINDSHIELD is a signature backdoor used by APT32. | |
| WINERACK | ||
| Winexe | Winexe is a lightweight, open source tool similar to PsExec designed to allow system administrators to execute commands on remote servers. Winexe is unique in that it is a GNU/Linux based client. | |
| Wingbird | Wingbird is a backdoor that appears to be a version of commercial software FinFisher. It is reportedly used to attack individual computers instead of networks. It was used by NEODYMIUM in a May 2016 campaign. | |
| WinMM | ||
| Winnti | Winnti is a Trojan that has been used by multiple groups to carry out intrusions in varied regions from at least 2010 to 2016. One of the groups using this malware is referred to by the same name, Winnti Group; however, reporting indicates a second distinct group, Axiom, also uses the malware. | |
| Wiper | Wiper is a family of destructive malware used in March 2013 during breaches of South Korean banks and media companies. | |
| WireLurker | WireLurker is a family of macOS malware that targets iOS devices connected over USB. | |
| X-Agent for Android | X-Agent for Android is Android malware that was placed in a repackaged version of a Ukrainian artillery targeting application. The malware reportedly retrieved general location data on where the victim device was used, and therefore could likely indicate the potential location of Ukrainian artillery. Is it tracked separately from the CHOPSTICK. | |
| XAgentOSX | OSX.Sofacy | XAgentOSX is a trojan that has been used by APT28 on OS X and appears to be a port of their standard CHOPSTICK or XAgent trojan. |
| Xbash | Xbash is a malware family that has targeted Linux and Microsoft Windows servers. The malware has been tied to the Iron Group, a threat actor group known for previous ransomware attacks. Xbash was developed in Python and then converted into a self-contained Linux ELF executable by using PyInstaller. | |
| Xbot | Xbot is an Android malware family that was observed in 2016 primarily targeting Android users in Russia and Australia. | |
| xCmd | xCmd is an open source tool that is similar to PsExec and allows the user to execute applications on remote systems. | |
| XcodeGhost | XcodeGhost is iOS malware that infected at least 39 iOS apps in 2015 and potentially affected millions of users. | |
| XLoader | XLoader is a malicious Android app that was observed targeting Japan, Korea, China, Taiwan, and Hong Kong in 2018. | |
| XTunnel | Trojan.Shunnael, X-Tunnel, XAPS | XTunnel a VPN-like network proxy tool that can relay traffic between a C2 server and a victim. It was first seen in May 2013 and reportedly used by APT28 during the compromise of the Democratic National Committee. |
| YiSpecter | YiSpecter iOS malware that affects both jailbroken and non-jailbroken iOS devices. It is also unique because it abuses private APIs in the iOS system to implement functionality. | |
| yty | yty is a modular, plugin-based malware framework. The components of the framework are written in a variety of programming languages. | |
| Zebrocy | Zebrocy is a Trojan that has been used by APT28 since at least November 2015. The malware comes in several programming language variants, including C++, Delphi, AutoIt, C#, and VB.NET. | |
| ZergHelper | ZergHelper is iOS riskware that was unique due to its apparent evasion of Apple's App Store review process. No malicious functionality was identified in the app, but it presents security risks. | |
| Zeroaccess | Trojan.Zeroaccess | Zeroaccess is a kernel-mode Rootkit that attempts to add victims to the ZeroAccess botnet, often for monetary gain. |
| ZeroT | ZeroT is a Trojan used by TA459, often in conjunction with PlugX. | |
| Zeus Panda | Zeus Panda is a Trojan designed to steal banking information and other sensitive credentials for exfiltration. Zeus Panda’s original source code was leaked in 2011, allowing threat actors to use its source code as a basis for new malware variants. It is mainly used to target Windows operating systems ranging from Windows XP through Windows 10. | |
| ZLib | ZLib is a full-featured backdoor that was used as a second-stage implant by Dust Storm from 2014 to 2015. It is malware and should not be confused with the compression library from which its name is derived. | |
| zwShell | zwShell is a remote access tool (RAT) written in Delphi that has been used by Night Dragon. |


Quickstart:
Visit yourweb.com/dashq
Monitoring Queue with database driver queue, no more using Redis.
Retry failed jobs based on selection and ability to retry all.
Delete jobs in few clicks.
Delete any jobs in few clicks.
Search queue, payload and exceptions.
Enjoy the view at any screen sizes


--- layout: post date: 2011-03-09 time: "10:00:00" authors: ["Greg Wilson"] title: High Tech That Looks Low Tech tags: ["Noticed"] ---
These videos about climate change are great: they look low tech, with hand-drawn diagrams and low-fi narration, but I imagine a lot more work went into their animation than into our slideshows.


Select Project to BID
Project 1
Project Name :
TOTAL OVERHAULING REPAIR OF MINI BUS
Project Description :
OverHaul of DCM TOYOTO DYNA CLIPPER MINI BUS including Body Painting, Installing Governer, Replacement of Engine,Crank,Gear Oil, Replaacement of Air cleaner,Oil seal,filter,gasket, Replacement of Fan belt,clamp,bracket joint,Servicing etc
Deadline :
22/3/2018 (5 days to end)
Project 2
Project Name :
MAN POWER FOR ASSISTING IN OFFICE WORKS
Project Description :
TO ASSIST HC/UDC IN OFFICE WORK INCLUDING TYPING,ENTRY OF DESPATCH,DIARY, DATA ENTRIES TO COMPUTERS, TAKING PHOTOSTAT SCAN ETC.
Deadline :
2/4/2018 (15 days to end)
Bid Now


{% extends 'material/frontend/views/list.html' %}
{% load material_frontend viewflow viewflow_frontend %}
{% block breadcrumbs_items %}
{% include 'viewflow/includes/breadcrumb_category.html' %}
{{ view.flow_class.process_title }}
{% endblock %}
{% block action_btn %}{% include 'viewflow/includes/flow_start_actions.html' %}{% endblock %}


Currently Special Reader: Astro 270
Past Classes
Astro 117: Spring 2016
Astro 4: Fall 2015
Astro 3: Spring 2015
Astro 127: Winter 2015
Jan 13, 2015 Lecture Notes
Jan 20, 2015 Lecture Notes
Homework 2 Solutions
Homework 3 Solutions
Supplementary Homework Solutions


Welcome to the game! To play, memorize the pattern and press the corresponding buttons. You can use color and/or sound to memorize the pattern easier!


Tags
- All tags now allow for multiple selections. Use responsibly.
Pose Maker
- Split animations now allow separate easing/interpolation modes.
- Added a tutorial for object parenting.
Bug Fixes
- Changing the Base Height for a pose will now immediately be reflected in the preview.
- It's now possible to unlink a parented sprite in a pose.


Volker Putt
Hello This is Post
This phrase originally appeared as a typing drill, and dates all the way back to 1889. If you’re looking for a short phrase to use as you work on typography and layout, this one has vintage appeal.
120 Comment
37 Visitor
1 min ago


{% extends "base.html" %} {% block title %}Survey Builder | Instant Census{% endblock %} {% block head %} {% endblock %} {% block javascript %} {% endblock %} {% block actions %} {% if not COHORT_COMPLETED %}
Click "Add Schedule" in the above "Actions" dropdown menu to create a new schedule.
Do you really wish to delete this item and its dependencies?
WARNING! This action will manually send out this schedule to all active users on this cohort, potentially interrupting users who are in the middle of other schedule/survey flows. This schedule will still run at its originally scheduled time(s) regardless of this action.
Are you sure you would like to send this schedule out now?
{% endcall %} {% call generate_modal("test-schedule", "Test Schedule", "_none", "", "Test Schedule", "_none" ) %}WARNING! This action will manually send out this schedule to the designated test users, potentially interrupting users who are in the middle of other schedule/survey flows. This schedule will still run at its originally scheduled time(s) regardless of this action.
{% endcall %} {% call generate_modal("add-attribute", "Add User Attribute", "_none", "addUserAttribute()", "Add User Attribute", "_none" ) %}Note: The default value is the attribute value assigned to a user at creation. It is strongly encouraged that a non-blank default value is assigned. This is especially important when this attribute is used in a text message as a custom merge field.
For example, consider the following message:
Depending on your needs, giving careful thought to the custom attribute default value can vastly improve your users' experiences.
Select a cohort to copy this schedule into:
Select a cohort to copy these schedules into:
Click "Add User Attribute" in the "Actions" dropdown to enable setting conditionals.
Click the blue plus sign above to add items.


In the past year, I have used the following modes of transportation to travel to work or school:
You use the following methods of transportation to travel to work or school:
Enter a number to find the primes less than or equal to it.
The prime numbers less than or equal to the number: are:


The Risperidone wasn't taken as an attempt to get high or trip. It was primarily taken as a suicide attempt and the medication was part of my prescription for suspected bi-polar disorder and paranoia. Fortunately/unfortunately it failed and the experience was horrific.
T:00:00 Wednesday
After the vodka had been drunk over about 2hrs previously and sat outside under a tree I decided to swallow all of the pills I'd brought with me [20~30g]. At that time - although having drunk - I had a reasonable level of coordination and my memory of up to that point is fine.
T:00:25 Wednesday (Approx) [Beginning]
Things begin to go wrong. At first I'd decided to lie down and let the drugs take hold with the firm idea that I'd simply slip out of conciousness and die. However, my heart began beating so hard and palapatating it actually knocked some sense into me. My head was pounding and the feeling!! The feeling is difficult to describe. It was like depression but different in some way. It wasn't a sadness but a complete removal of thought and emotion. Like the soul had been torn out. I began losing conscious control - and for some reason had got up and was walking towards home...
[Memory goes blank for the entire journey home which is about 1-2miles on foot]
T:01:30 Wednesday (Guess) [Felt like Death]
My whole body is struggling to stay conscious. I keep falling over and collapsing at the knees. It feels like I'm literally fighting an anasthetic or sedative not an antipsychotic - if seen from the outside I probably would have looked like I was drunk but in pain and 'compressed' from the outside. It felt as if my body was being crushed and weighed down. Again there's the dark soul-less feeling all over. My body ached and I went to the toilet as if I wanted to vomit but didnt. It was almost like an instinctive reaction to feel better in some way and maybe vomiting was the way. When I went back to my room I passed out and collapsed to the floor banging my head badly on the drawers next to my bed. There was a bad cut and blood but I was later to find no fracture. I crawl onto my bed and pass out.
T:08:30 Wednesday (Approx) [Hell]
I wake feeling more horrendous than I have ever felt in all my life. I can't put do justice to how bad it felt. What was an empty feeling before now became an intense and very real depression, dark, evil compressed. The room seemed bright yet dark, my body ached. There was a lot of confusion. Voices phased in and out as I heard my house mate in the next room packing to go home. I was trying to get up to go for help but couldn't move. My heart rate and blood pressure were so high it seemed to paralyse me. The hammering in my throat, lungs heart and head was unbearable. My throat was so dry it felt as if I was going to suffocate but I couldn't move to get the water from my side.
[A further 16 hours of this experience with little change in the symptoms - wishing to pass out but unable due to the intensity of the 'feelings']
T:00:00 Thursday [Paramedic called]
I was finally able to get out of bed but movement was immensely difficult, however the mind had returned to a state of deadness.  She called the emergency services. I didn't want the remaining housemates to know I'd attempted this so I crawled downstairs and lay outside on the front path. I was taken to the hospital immediately because my heart rate and BP were dangerously high.
T:00:45 Thursday [Hospital]
In the hospital a strange symptom began to occur - especially considering this was 24hrs after the dose. An all over body spasm that completely locked me up into a horribly contorted shape on the hospital trolley. The doctor seemed to take an age before treating it as I was obviously in intense pain and was crying heavily - without tears as I was still dry. My back feels as if its about to snap and my arms are screwed up and I was completely unable to move. I probably looked like someone with a serious brain disorder. Eventually I am administered a sedative which doesn't work. They then give me another 2 shots and after about 10 mins I begin to relax.
 I would never EVER wish this even on my worst enemy. The experience has left a significant emotional scar and also a physical shock feeling in the nerves through my back and shoulders. The soul-less, dark feeling was horrendous. It was the closest thing to REAL death I have ever experienced - a lack of life.
I feel bad just typing this.
Experience Reports are the writings and opinions of the individual authors who submit them.
Some of the activities described are dangerous and/or illegal and none are recommended by Erowid.


Accessibility |
Contact us |
Complaints |
Copyright |
Disclaimer / privacy statement
Feedback |
News |
Translations |
Website statistics
Advice and benefits | Business | Community and living | Council and democracy | Education and learning | Environment and planning | Health and social care | Housing | Jobs and careers | Leisure and culture | Transport and streets Libraries


Overview ↑ | ↓ Commands
Some tasks in MMM are best performed using the basic command language. Although commands can be input one by one via the command line, it may sometimes be more convenient and reliable to write commented command scripts.
In particular, definition of secondary structure elements and of synonyms for the structure name and for particular chains is most conveniently performed directly after reading a PDB file using an initialization script.
The same command syntaxapplies as for the command line. In addition, comments can be added after a command or as separate lines. A comment is introduced by the %
character. In pure comment lines the %
character must be the first character, except for spaces.
Nonexisting commands or commands with wrong arguments are simply ignored and the remaining script is further executed. The corresponding error messages are shown in the message board.
Initialization scripts are useful when a structure is read from a PDB file. For instance, secondary structure information in PDB files is often nonsensical and therefore is not used by most protein visualization programs. MMM uses the assignments of secondary structure types in a PDB file (but not the lists of helices and sheets, which are often not self-consistent), but it is still better to redefine secondary structure elements, using the nomenclature and residue ranges given in an accompanying paper.
Furthermore, the common names of a protein complex or of its constituents (peptide chains) cannot be reliably extracted from PDB files. These names can be defined as synonyms. Otherwise, the structure can be addressed only by the PDB identifier and the chains by uppercase characters.
Finally, default display behavior (ribbon plot for peptide chains, no display of cofactors) may not be intended. If an initialization script is performed, MMM suppresses default display. If the script does not contain show commands, nothing is displayed, although the structure is still loaded.
An initialization script may contain any command that could be executed from the command line, except for the undo
and redo
commands. It must have the same file name as the PDB file (except for the extension), must have the extension .mmm
and must be stored in the same directory as the PDB file.
After reading a PDB file, MMM checks if a corresponding initialization script exists. If so, the user is asked whether it should be run. If the user answers 'No', secondary structure definitions from the PDB file are locked and default graphics is displayed (ribbon plot without cofactors). If the user answers 'Yes', secondary structure definitions are unlocked and the script is executed. Default graphics display is skipped. The script defines which graphics, if any, is to be displayed.
If you want to redefine secondary structure, do it in an initialization script. Every other way is bound to create a mess. And you want to redefine it, as the secondary structure information in a PDB file often is a mess, too.
This is an initialization script for PDB file 1ZCD.
synonym [*] NhaA % assigns the synonym 'NhaA' to the current structure
undefine % undefines any existing secondary structure elements (defined during PDB read)
% the following lines define transmembrane helices and the strands mentioned in the accompanying paper
loop [NhaA] l1 9 11
helix [NhaA] I 12 30
loop [NhaA] l2 31 43
sheet [NhaA] a 44 50
loop [NhaA] l3 51 52
sheet [NhaA] b 53 58
helix [NhaA] II 59 85
loop [NhaA] l4 86 94
helix [NhaA] II 95 116
loop [NhaA] l5 117 120
helix [NhaA] IVp 121 131
loop [NhaA] lIV 132 133
helix [NhaA] IVc 134 143
loop [NhaA] l6 144 149
helix [NhaA] V 150 175
loop [NhaA] l7 176 181
helix [NhaA] VI 182 200
loop [NhaA] l8 201 204
helix [NhaA] VII 205 218
loop [NhaA] l9 219 222
helix [NhaA] VIII 223 236
loop [NhaA] l10 237 246
helix [NhaA] IX 247 271
loop [NhaA] l11 272 289
helix [NhaA] X 290 311
loop [NhaA] l12 312 326
helix [NhaA] XIc 327 336
loop [NhaA] lIX 337 339
helix [NhaA] XIp 340 350
loop [NhaA] l13 351 356
helix [NhaA] XII 357 382
loop [NhaA] l14 383 384
show [NhaA] ribbon % display a ribbon plot
% and show the residues in the strands also as stick plots
show [NhaA](A)<E.a> stick
show [NhaA](A)<E.b> stick
detach % detaches the model panel into a separate model window
The undo and redo commands cannot be executed in scripts.
In scripts, commands that cannot be undone are performed without previous query.


I have had several experiences w/ salvia in the past, all of which were mind-boggling & led me to question everything I take for granted about my Self. However, the experience in which I am about to share w/ you is unlike any other.
I was alone in my house. I put on some Miles Davis & rolled a joint of some fair cannabis. This helped to get me relaxed & give me time to contemplate my 'mission', what it is I wish to accomplish. I remind myself to meditate only on that which is eternal. I placed a fairly large hit of the salvia on top of a sliver of cannabis inside my glass water-pipe. 'Here goes nuthin'' crossed my mind, & I flamed the bowl. I took in all of the smoke rather easily. I replaced the bong to the table, sat back, closed my eyes, & blew out the smoke when I could'nt hold it any longer. As the familiar taste/aroma of the leaf flooded my being, I exclaimed 'I remember you!' & what exactly happened after this is not clear to me.
I lost all connection w/ reality & the Self. I 'woke up' in another place. I was seeing thousands & thousands of people running from all directions toward a bright white light in the center. Everyone was laughing hysterically & waving their right arms in the air, as if signaling to the light that 'I am here' or 'don't forget me.' Once I took notice the the people & what they were doing, I heard a familiar voice laughing w/ immense joy & repeating over & over 'They're all running & waving! They're all running & waving!' The voice was my own. I was laughing & saying this, but it was not of my will. My voice seemed to come from a far-off land.
Before long, the objective statement of 'They're all running & waving' turned into the subjective 'We're all running & waving,' & instantly I was caught up in the action of running & waving along w/ everyone else, trying desperately to make it to the light.
At that point, I again heard my own voice in the distance.  Don't go to the light.'
This invoked an inner sense of panic, & I tried w/ no results to cease my running & save my life. I just kept on 'running & waving' & laughing all of the time, but inside I was manic & unsure of what was going on. I got the sensation that what I was doing was'nt right, that I was'nt supposed to be there yet, & at that moment, I began to feel a vibration along my back & my butt. 'The couch!' All of my senses flooded w/ information from the room I was in. I was back & intact, except the visual aspect of it persisted. Again, I paniced. I knew that I had hit the salvia, & I knew where I was, but my eyes were still watching the other world. 'When will this stop!?' Immediately following this inquisition, my eyes popped open to reveal my living room. I did'nt think to open my eyes, because in my mind, they were already open.
Following the experience, I was extremely energetic in communicating to everyone that I know the importance of what had just been revealed to me. As clueless as I am about what actually occured that day, I know that 'something' happened, & in my mind, it changes everything.
Experience Reports are the writings and opinions of the individual authors who submit them.
Some of the activities described are dangerous and/or illegal and none are recommended by Erowid.


New user
Username
Name Error
E-Mail
E-Mail Error
Password
Password Error
Password (repeated)
Repeated Password Error
Goal in kg
Goal Error


{% extends "skeleton.html" %} {% block styles %} {% endblock styles %} {% block content %}
Synchronize the speed of Gifs to music on Spotify in real time
What is GifSync?
GifSync started out as a simple question: "How do I get
Hat Kid to dance to my music
while I stream?" The answer to this question quickly turned into a long and convoluted dive into APIs, gif
frame-times, and web servers. However, through THE POWER OF THE INTERNET!! (and a ton of
duck-duck-go'ing) I was able to pull it off with as best of accuracy as I could.
Best of all, it works
with any gif! I wanted to share this with others so that no matter what your experience level is in
programming, you too can experience gifs that dance to your music in real time.
If you're interested in
reading the source code, or want to contribute to the development of GifSync, see the
GitHub Repository.
How does it work?
GifSync utilizes the
Spotify API
to retrieve your currently playing song and modifies your gif to loop to the beat.
In more detail,
GifSync uses an OAuth2 token provided by Spotify which is then used to periodically request your currently
playing song. Then, the song’s BPM is requested from Spotify. Using the BPM, the Beats/Second is calculated,
which in turn finds the Milliseconds/Beat. The Milliseconds/Beat is multiplied by the Beats/Loop (of the gif
you’ve specified) to find the Milliseconds/Loop, and finally the frame times in the gif are adjusted to match
as accurately as possible. This results in a gif that will loop every X beats of the currently playing song.
How do I get started?
Easy! You must allow GifSync to access your currently playing songs by clicking the “Connect Spotify” button at
the top of this page. From there, upload the gif you want to sync, specify the number of Beats per loop of the
gif, and PRESTO! A synced version of your gif will be displayed and will continuously update with your
music until you leave the page or select a new gif.
If at any time you wish to revoke this site’s
permission to see your currently playing song, visit your
Spotify Account
page and remove GifSync’s access. If you wish to only have this site forget your Authorization token and synced
Gifs, click on “Forget me” on the top of the page.


PyPlotter - A Python/Jython Graph Plotting Package. Manual |
| Contents |
| 1 Introduction |
| 2 License |
| 3 Screenshots |
| 4 Quick Tutorial |
| 5 Reference |
| 6 Implementing a new device driver for PyPlotter |
Adapting PyPlotter to a new GUI enviroment or to a new output device is very easy. You only have to implement a class for the driver itself that is derived from Gfx.Driver and, optionally, also another very simple standardized window class to open an output window (or context) on your GUI or device. The latter class must be derived from class Gfx.Window.
The driver class must implement the following methods from its parent class Gfx.Drivers: __init__, resizedGfx, getSize, getResolution, setColor, setColor, setLineWidth, setLinePattern, setFillPattern, setFont, getTextSize, drawLine, fillPoly, writeStr. Overriding the other methods or adding further methods is optional and may lead to increased performance.
The window class must implement all methods of class Gfx.Window, that is: __init__, refresh, quit, waitUntilClosed.
The already implemented drivers in modules awtGfx, wxGfx, tkGfx, gtkGfx, qtGfx and psGfx may serve as examples for implementing new drivers.


{% extends 'core/base.html' %} {% load i18n %} {% load static %} {% block style %} {{ block.super }} {% endblock %} {% block main %}
Access to this dataset is restricted. Please contact support if you need this version of the dataset.
This dataset is archived and currently not available for download. Please contact support if you need this version of the dataset.
{% if public_version %} A newer version of this dataset is available here. {% endif %}


Class DecoratorTarget
Represents the action of implementing a common DecoratedType by decorating one instance (produced by DecoratedTarget) with another (InnerTarget).
NOTE - You shouldn't register or otherwise create instances of this target unless you absolutely know what you're doing. Rather, decorators should be registered using the extension method RegisterDecorator<TDecorator, TDecorated>(IRootTargetContainer) or its non-generic alternative because the target needs a DecoratingTargetContainer to work properly (the creation of which is automatically handled by these extension methods).
Implements
Inherited Members
Namespace: Rezolver.Targets
Assembly: Rezolver.dll
Syntax
public class DecoratorTarget : TargetBase, ITarget
Constructors
| Improve this Doc View SourceDecoratorTarget(ITarget, ITarget, Type)
Constructs a new instance of the DecoratorTarget type when the target that create the decorator is already known.
Declaration
public DecoratorTarget(ITarget decoratorTarget, ITarget decoratedTarget, Type decoratedType)
Parameters
| Type | Name | Description |
|---|---|---|
| ITarget | decoratorTarget | |
| ITarget | decoratedTarget | |
| Type | decoratedType |
Properties
| Improve this Doc View SourceDeclaredType
The type of object returned by the decorator target
Declaration
public override Type DeclaredType { get; }
Property Value
| Type | Description |
|---|---|
| Type |
Overrides
| Improve this Doc View SourceDecoratedTarget
Gets the target whose instance will be wrapped (decorated) by the one produced by InnerTarget.
Declaration
public ITarget DecoratedTarget { get; }
Property Value
| Type | Description |
|---|---|
| ITarget |
DecoratedType
Gets the underlying type (e.g. a common service interface or base) that is being implemented by decoration.
Declaration
public Type DecoratedType { get; }
Property Value
| Type | Description |
|---|---|
| Type |
InnerTarget
Gets the target which will create an instance of the decorator
Declaration
public ITarget InnerTarget { get; }
Property Value
| Type | Description |
|---|---|
| ITarget |
Methods
| Improve this Doc View SourceSupportsType(Type)
Overrides SupportsType(Type) to forward the call to InnerTarget.
Declaration
public override bool SupportsType(Type type)
Parameters
| Type | Name | Description |
|---|---|---|
| Type | type | The type which is to be checked. |
Returns
| Type | Description |
|---|---|
| Boolean |
|


OpenSSH 8.0 Will release with tons of new features, one of the most notable among them being Quantum Computing resistant keys.
This is a biggie
Markus30-Mar-19 12:24 AM
btc is mad
PHBA206130-Mar-19 12:31 AM
same for eth
Markus30-Mar-19 12:32 AM
so we broke 4.1k as of now...lets see if it reaches 4.2k and pushes through it(edited)
Alexfrog30-Mar-19 12:54 AM
4.1k vs 4k is nothing, the btc price is meaninglessly low if its in the 4 digits
literally the only thing its movements do is fuck alts, if it moves either up OR down
blubbi30-Mar-19 01:53 AM
let's hope not today, kmd should close month above 26,8k
ComputerGenie 👴👴👴30-Mar-19 01:54 AM
the btc price is meaninglessly low if its in the 4 digits
said every delusional fanboy ever
@ $4100, 10+% of the price is based on nothing but unicorn farts and rainbows
blubbi30-Mar-19 02:02 AM
may i got something wrong, but why should i sell my alt against btc if i see btc rising? it only make sense if i doubt BTC high
ComputerGenie 👴👴👴30-Mar-19 02:04 AM
thinks BTC is the "alt", so he doesn't have an answer as to why you'd sell a good coin for a shit coin, "rising" or not
blubbi30-Mar-19 02:05 AM
i expected something like that from u
ComputerGenie 👴👴👴30-Mar-19 02:06 AM
sell after the start of the rise and buy back when opposing pair half starts to slide
no matter what your pair
remember, you're not "selling CoinX for BTC", you're "buying BTC with CoinX"
so your faith has to be in BTC, not CoinX
you buy and sell the base
blubbi30-Mar-19 02:11 AM
as long as most alt only got btc pair, alt "value" will rise aswell, only if i think btc will go back down it make sense, to sell alt vs btc so sell btc vs "stable coin"
to buy back btc cheaper
ComputerGenie 👴👴👴30-Mar-19 02:11 AM
and that's not to mention that there's 3 sides to KMD/BTC and not 2
as long as most alt ...
As long as you use the term "alt", you're doomed to worship god-BTC
alt "value" will rise aswell,
and that's not always true either, many of us made a killing when BTC slid like the rock it is and better coins rose(edited)
blubbi30-Mar-19 02:14 AM
im not in philosophic mood right now, just using the "common" used headlines
alts...
ComputerGenie 👴👴👴30-Mar-19 02:16 AM
yes, the headlines written by BTC maximalists do tend to use that pejorative; either you break the cycle or you follow like a lemming (in the latter case I suggest USD and municipal bonds)(edited)
blubbi30-Mar-19 02:18 AM
if one alt only got btc pair, "value" will rise with btc, "value" of that coin only will decrease if someone selling that coin vs btc and that to me only make sense if i believe i can buy back btc cheaper after
ComputerGenie 👴👴👴30-Mar-19 02:19 AM
that only makes sense if you don't want that coin and you want BTC to be the value leader
blubbi30-Mar-19 02:20 AM
thats the point, but i only hold that coin cous im promising more revenue "fiat" as from btc
ComputerGenie 👴👴👴30-Mar-19 02:21 AM
im promising more revenue "fiat"
fek fiat, this is crypto
blubbi30-Mar-19 02:22 AM
non philosophic theme
ComputerGenie 👴👴👴30-Mar-19 02:22 AM
here's a novel idea: use cryptocurrency as currency...
blubbi30-Mar-19 02:22 AM
tell that my lessor
as long as i cant pay my food, flat, taxes its an philosophical argue
ComputerGenie 👴👴👴30-Mar-19 02:24 AM
what are these "taxes" thing?
blubbi30-Mar-19 02:26 AM
im not paying one, so i cant tell u
Caglio30-Mar-19 02:26 AM
We shall not pay taxes
blubbi30-Mar-19 02:26 AM
just thought of basic needs
jspook1630-Mar-19 02:27 AM
Can you tax a tax?
ComputerGenie 👴👴👴30-Mar-19 02:29 AM
Can you tax a tax?
In the US they can and do
blubbi30-Mar-19 02:29 AM
unbelievable marcet dynamics fucks my brain more than quantendynamic
im back in mine world xD
ComputerGenie 👴👴👴30-Mar-19 02:30 AM
market dynamics is simple:
unicorn farts and rainbows = BTC rise
a good dose of reality = BTC fall
blubbi30-Mar-19 02:31 AM
sure half is psychology not a rational thing
ComputerGenie 👴👴👴30-Mar-19 02:34 AM
and if you think that feks your brain, just chew on the fact that nearly all maximalists want to be in a constant state of having BTC both regulated and free from regulations
The Lightning Network has been touted as the scaling solution for the BTC network. However, the solution is heavily criticized for many reasons.
" the problems associated with the trust issue and micropayments are well known. At the time of writing, the dust threshold is less than 600 satoshis which means if fees were to spike considerably again, the Lightning Network wouldn’t be a feasible option"
so demand for LN is when BTC fees are expensive, but if that is the case LN becomes a trusted service, not trustless. Why the maximalists are relying on LN, it is a mystery.


The following two matching (except the checkerboard at both ends to show where the rows are) rows of colors should change gradually from red at the left to green at the right (through yellow in the middle).
The following two matching (except the checkerboard at both ends to show where the rows are) rows of colors should change gradually from green at the left to blue at the right (through aqua in the middle).
The following two matching (except the checkerboard at both ends to show where the rows are) rows of colors should change gradually from blue at the left to red at the right (through fuchsia in the middle).
The following two matching (except the checkerboard at both ends to show where the rows are) rows of colors should change in two steps from nearly gray at the left to red at the right.
The following two matching (except the checkerboard at both ends to show where the rows are) rows of colors should change in two steps from nearly gray at the left to yellow at the right.
The following two matching (except the checkerboard at both ends to show where the rows are) rows of colors should change in two steps from nearly gray at the left to green at the right.
The following two matching (except the checkerboard at both ends to show where the rows are) rows of colors should change in two steps from nearly gray at the left to aqua at the right.
The following two matching (except the checkerboard at both ends to show where the rows are) rows of colors should change in two steps from nearly gray at the left to blue at the right.
The following two matching (except the checkerboard at both ends to show where the rows are) rows of colors should change in two steps from nearly gray at the left to fuchsia at the right.
The following two matching (except the checkerboard at both ends to show where the rows are) rows of colors should change in ten steps from black at the left to white at the right with red at the middle.
The following two matching (except the checkerboard at both ends to show where the rows are) rows of colors should change in ten steps from black at the left to white at the right with yellow at the middle.
The following two matching (except the checkerboard at both ends to show where the rows are) rows of colors should change in ten steps from black at the left to white at the right with green at the middle.
The following two matching (except the checkerboard at both ends to show where the rows are) rows of colors should change in ten steps from black at the left to white at the right with aqua at the middle.
The following two matching (except the checkerboard at both ends to show where the rows are) rows of colors should change in ten steps from black at the left to white at the right with blue at the middle.
The following two matching (except the checkerboard at both ends to show where the rows are) rows of colors should change in ten steps from black at the left to white at the right with fuchsia at the middle.


Learn More
Help Workers Around
Join
Help at local environmentally focused organizations
Mentor local youth
Help make a difference at local politcally focused organizations
Help at local religious organizations


November 23 2015
This Is My First Article
Bacon ipsum dolor amet capicola strip steak landjaeger, biltong spare ribs rump cow ground round andouille sirloin pork.  Flank turducken turkey rump, leberkas shoulder bresaola ham hock tail drumstick corned beef. Venison pork chop beef jowl short ribs.
Bresaola short ribs pastrami, beef ribs spare ribs kielbasa ham tongue kevin landjaeger chicken ball tip.  Leberkas ham ham hock pork loin. Filet mignon bacon pancetta leberkas turducken fatback tongue frankfurter jowl. Shoulder tenderloin chicken shank bacon shankle sirloin.
 Pork belly salami shank pork chop turducken ribeye swine shoulder tri-tip fatback cupim short loin chuck strip steak. Rump pork chop t-bone.
December 11 2015
This Is Another Article
Bacon ipsum dolor amet capicola strip steak landjaeger, biltong spare ribs rump cow ground round andouille sirloin pork.  Flank turducken turkey rump, leberkas shoulder bresaola ham hock tail drumstick corned beef. Venison pork chop beef jowl short ribs.
Shankle beef ribs tongue strip steak flank landjaeger capicola hamburger chuck pancetta kevin. Sirloin landjaeger chicken, bresaola brisket swine short ribs turkey short loin ball tip porchetta ham hock. Capicola frankfurter jowl short loin. Kevin flank hamburger, beef venison shankle short loin bresaola frankfurter
Bresaola short ribs pastrami, beef ribs spare ribs kielbasa ham tongue kevin landjaeger chicken ball tip.  Leberkas ham ham hock pork loin. Filet mignon bacon pancetta leberkas turducken fatback tongue frankfurter jowl. Shoulder tenderloin chicken shank bacon shankle sirloin.