Attack Demos

Attack Demo Library

Hands-on attack demonstrations mapped to OPSWAT MetaDefender capabilities.

Published: 10 Categories: 9

Date	Title	Description	OS	Type	Capabilities
2026-06-10	Polyglot File Bypass	A single file passes as both a valid GIF image and a valid JavaScript file. MetaDefender File Type Verification identifies the true file type regardless of extension.	windowslinuxmacos	Polyglot 進階	File Type VerificationMetascan Engines
2026-06-09	Steganography Hidden Payload	Attack hides executable payload inside innocent-looking image files using LSB steganography. MetaDefender Deep CDR strips the hidden payload during content disarm and reconstruction.	windowslinuxmacos	Steganography 中級	Deep CDRMetascan Engines
2026-06-08	Embedded JavaScript in PDF	PDF contains embedded JavaScript that executes on open. MetaDefender Deep CDR strips embedded scripts while Adaptive Sandbox observes execution behaviour.	windowslinuxmacos	Script Injection 中級	Deep CDRAdaptive SandboxMetascan Engines
2026-06-07	ISO Container Bypass	Malware packaged inside ISO image files to bypass Mark-of-the-Web protections. MetaDefender Archive Extraction extracts ISO contents for scanning by Adaptive Sandbox.	windows	Container Bypass 中級	Archive ExtractionAdaptive SandboxMetascan Engines
2026-06-06	SVG XML Injection	SVG vector image contains embedded JavaScript that executes when rendered. MetaDefender Deep CDR sanitizes XML content and removes embedded scripts.	windowslinuxmacos	Script Injection 中級	Deep CDRMetascan Engines
2026-06-05	LNK Shortcut Command Injection	Windows shortcut file with crafted command-line executing malicious payloads. MetaDefender File Type Verification identifies LNK type while Deep CDR sanitizes the shortcut.	windows	LNK Abuse 中級	File Type VerificationDeep CDRMetascan Engines
2026-06-04	ZIP Archive Abuse	Malicious payloads embedded in nested ZIP archives to evade flat-file scanning. MetaDefender Archive Extraction recursively extracts and scans every layer.	windowslinuxmacos	Archive Abuse 初級	Archive ExtractionMetascan Engines
2026-06-03	PDF URI Abuse	PDF with malicious hyperlinks redirecting users to credential harvesting pages. MetaDefender Deep CDR sanitizes embedded URIs while Threat Intelligence Engine checks link reputations.	windowslinuxmacos	PDF Abuse 初級	Deep CDRThreat Intelligence EngineMetascan Engines
2026-06-02	File Extension Mismatch	Executable renamed to .txt or .pdf to trick users. MetaDefender File Type Verification identifies the true file type regardless of extension.	windowslinux	Extension Mismatch 初級	File Type VerificationMetascan Engines
2026-06-01	Malicious Office Macro	Word document with embedded VBA macro downloads and executes payload. MetaDefender Adaptive Sandbox detects malicious macro behavior before the file reaches the endpoint.	windows	Macro 初級	Adaptive SandboxMetascan Engines