indirect-syscall · GitHub Topics

pard0p / CallstackSpoofingPOC

C++ self-Injecting dropper based on various EDR evasion techniques.

av-evasion dropper edr-evasion indirect-syscall

C 381

1 年前

Krypteria / AtlasLdr

Reflective x64 PE/DLL Loader implemented using Dynamic Indirect Syscalls

C++indirect-syscall loader manualmapping redteam

C++ 370

8 个月前

safedv / RustVEHSyscalls

A Rust port of LayeredSyscall — performs indirect syscalls while generating legitimate API call stack frames by abusing VEH.

indirect-syscall red-team Rust

Rust 145

8 个月前

Cipher7 / ApexLdr

ApexLdr is a DLL Payload Loader written in C

av-bypass av-evasion indirect-syscall loader Malware red-teaming shellcode-loader threadpool

C 110

1 年前

x0reaxeax / SysCook64

Indirect Syscall invocation via thread hijacking

edr-bypass edr-evasion indirect-syscall redteam

C 17

2 年前

Vith0r / Indirect-Syscalls

Indirect Syscalls Loader

av-evasion indirect-syscall shellcode-loader

C 16

8 个月前

x0reaxeax / SyscallHookBypass

NTAPI hook bypass with (semi) legit stack trace

av-bypass av-evasion edr-bypass Windows x86 indirect-syscall redteam

C 15

2 年前

hiatus / NtGate

Transparently call NTAPI via Halo's Gate with indirect syscalls.

edr edr-evasion indirect-syscall Malware malware-research

C 11

1 年前

Vasco0x4 / ShellLoader_Hub

Shellcode Loader Library.

av-bypass av-evasion dll-hijacking dll-hooking dll-injection indirect-syscall loader Malware red-teaming redteam shellcode-loader

5 个月前

notfell / pandore

A shellcode loader powered by a web panel.

fud indirect-syscall Malware panel shellcode-injection shellcode-loader syscalls

C++ 10

3 个月前

EvilBytecode / EByte-Shellcode-Loader

shellcode loader that uses indirect syscalls written in D Lang The loader bypasses user-mode hooks by resolving system calls manually from NTDLL using a hash-based method.

av-evasion evasion fud indirect-syscall indirect-syscalls Shell

D 9

9 个月前

k3lpi3b4nsh33 / Lamia-Syscall-Template

A generic x64 indirect syscall template for RED TEAM OPSEC

indirect-syscall Malware opsec syscalls Windows

C 9

4 个月前

Cyb3rV1c / ShadowRust

A Rust Loader That Uses Indirect System Calls To Execute AES-Encrypted Payload From Given URL

aes-encryption Assembly edr-evasion indirect-syscall loader

Rust 1

3 个月前

Cyb3rV1c / Rust-IndirectSysCalls

A Rust-based tool that facilitates indirect system calls in Windows to inject shellcode.

Assembly edr-evasion indirect-syscall

Rust 0

6 个月前