Clean Indirect Syscalls with Syscall Tampering.
☆42Oct 19, 2026Updated this week
Alternatives and similar repositories for SyscallRevenant
Users that are interested in SyscallRevenant are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Mythic Peer to Peer (P2P) Communication Protocol via. LLDP☆23Aug 20, 2026Updated 2 months ago
- Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.☆64Sep 11, 2026Updated last month
- Silverseal is an open-source Linux bootkit and rootkit framework written in Rust, using UEFI and early kernel boot hooks to load a stealt…☆172Oct 8, 2026Updated 2 weeks ago
- PIC shellcode agent based on Stardust framework and Crystal Palace☆91Oct 4, 2026Updated 2 weeks ago
- Windows Kernel-Mode Shellcode Development Framework (WKMSDF)☆91Aug 1, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A poor man's attempt to replicate the shellcode execution technique demo'd by @3lk during STHACK 2026 (https://www.youtube.com/watch?v=al…☆25Oct 14, 2026Updated last week
- ☆49Oct 4, 2026Updated 2 weeks ago
- example use of defining your own injection technique for explicit injection and or spawn (fork & run)☆19Jan 3, 2026Updated 9 months ago
- EDR evasion uses stealth injection via SendMessage with WM_SETTEXT to effective bypass EDR (Endpoint Detection and Response)☆60Updated this week
- Process ID Mutator via BYOVD Kernel R/W☆20Sep 6, 2026Updated last month
- Advanced static Linux kernel local privilege escalation toolkit for discovery and analysis.☆39Jun 19, 2026Updated 4 months ago
- 渗透测试人员可以通过此BOF，将非托管 Windows可执行文件加载到Beacon内存中并执行它们，检索输出并将其呈现在 Beacon 控制台中☆13Mar 18, 2025Updated last year
- ☆18Oct 3, 2026Updated 2 weeks ago
- A concept of using a ROP chain paired with a WRMSR primitive to call kernel functions and map unsigned drivers through BYOVD (AmdTools64.…☆66Sep 21, 2026Updated last month
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Crypter developed in Rust, featuring the implementation of various injection and evasion techniques, and including a builder with an intu…☆22Jul 18, 2026Updated 3 months ago
- OneDrive as a covert C2 transport for Cobalt Strike☆76Sep 19, 2026Updated last month
- Research on a new PoC for a Windows Sandbox .wsb HostFolder UNC path primitive that causes the host to authenticate over SMB and leak Net…☆32Jun 21, 2026Updated 4 months ago
- Sample Rust Hooking Engine☆34Apr 5, 2024Updated 2 years ago
- Windows native ETW inspection suite for browsing providers, reading metadata, consuming live events, recording ETL traces, filtering resu …☆113Oct 2, 2026Updated 2 weeks ago
- Serverless C2 transport plugin for AdaptixC2 v1.2 using AWS Lambda + DynamoDB as the relay infrastructure.☆27Sep 30, 2026Updated 3 weeks ago
- ☆19Mar 19, 2026Updated 7 months ago
- Cobalt Strike BOF for extracting Firefox passwords and cookies. Decrypts saved credentials using NSS, supports key3.db/key4.db, logins.js…☆42Jul 5, 2026Updated 3 months ago
- Generate DLL proxy/sideload projects. Automatically parses PE export tables and generates ready-to-compile project for red team engagemen…☆170Sep 13, 2026Updated last month
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Debugger utilizing stealth hooks to hide from debugger detection☆25Aug 22, 2026Updated last month
- Windows BYOVD research on DCRCVDrv.sys and Alinubx.sys, reverse engineering their kernel primitives, IOCTL surfaces, and detection opport…☆37Oct 1, 2026Updated 3 weeks ago
- Custom Adaptix-compatible C2 agent - PIC beacon + Stardust UDRL + Go extender plugins☆146Oct 4, 2026Updated 2 weeks ago
- BOF exploiting the Visual Studio Installer Elevation Service for SYSTEM LPE and persistence via AppDomainManager hijacking, with native E…☆88Aug 5, 2026Updated 2 months ago
- Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscat…☆131Aug 22, 2026Updated last month
- EDRUnChoker - fileless WMI defense that removes EDRChoker QoS throttling policies☆49Jun 8, 2026Updated 4 months ago
- Self-hosted MDM for Linux fleets. Enrollment, profiles, disk encryption, lock and wipe, OS updates and remote assistance with each distri…☆20Updated this week
- A stealthy, fully syscalled C/C++ userland anti-debugging library for Windows, designed to protect software from reverse engineering☆345Sep 21, 2026Updated last month
- DynLoader A modular Windows loader focused on EDR evasion Built with indirect syscall (Tartarus Gate / Hell’s Gate), Manual PE parsing …☆82Jul 10, 2026Updated 3 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆10Sep 19, 2024Updated 2 years ago
- Proof of Concept for Process Code Injection Without Using WriteProcessMemory☆151Sep 27, 2026Updated 3 weeks ago
- Async port/ping scanner BOF. Supports IP/port ranges, CIDR notation and hostnames.☆17Jul 23, 2026Updated 2 months ago
- Malware traffic obfuscation library☆37Jul 24, 2025Updated last year
- Cloud dead-drop C2 framework — RSA-4096 + AES-256-GCM, 5 cloud providers, Rust-only agents, P2P mesh, persistence engine, credential harv…☆44Updated this week
- Some anti-sandbox codes, copy directly to strengthen your own ShellCode☆12Dec 26, 2022Updated 3 years ago
- ☆72Jul 12, 2026Updated 3 months ago