Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.
☆64Sep 11, 2026Updated last month
Alternatives and similar repositories for voidsyscall
Users that are interested in voidsyscall are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Mythic C2 MSTeams Communication Channel☆38Sep 13, 2026Updated last month
- Cloud dead-drop C2 framework — RSA-4096 + AES-256-GCM, 5 cloud providers, Rust-only agents, P2P mesh, persistence engine, credential harv…☆44Updated this week
- Clean Indirect Syscalls with Syscall Tampering.☆42Updated this week
- Windows BYOVD research on DCRCVDrv.sys and Alinubx.sys, reverse engineering their kernel primitives, IOCTL surfaces, and detection opport…☆37Oct 1, 2026Updated 3 weeks ago
- EDR evasion uses stealth injection via SendMessage with WM_SETTEXT to effective bypass EDR (Endpoint Detection and Response)☆61Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.☆107Oct 1, 2026Updated 3 weeks ago
- OneDrive as a covert C2 transport for Cobalt Strike☆76Sep 19, 2026Updated last month
- A Position Independent Code (PIC) implementation of the execute-assembly command, using Crysta Palace linker.☆22Oct 4, 2026Updated 2 weeks ago
- shell script protector (obfuscation, embedded interpreter, DRM) - invisible to kernel tracing☆70Sep 23, 2026Updated last month
- Proof of Concept for Process Code Injection Without Using WriteProcessMemory☆151Sep 27, 2026Updated 3 weeks ago
- A foundational C library for building operationally credible offensive capabilities☆94Sep 21, 2026Updated last month
- ☆72Jul 12, 2026Updated 3 months ago
- Detection-aware BloodHound attack-path scoring - the quietest route to your objective, calibrated across five detection tiers (audit/EDR/…☆67Aug 22, 2026Updated 2 months ago
- PoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation.☆41Sep 20, 2026Updated last month
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Build guide for Red Teaming home lab. GOAD lab setup in Proxmox and pfSense, Operator/C2 and Redirectors.☆50Sep 26, 2026Updated 3 weeks ago
- Windows network scanner that finds AI/ML services and MCP servers on your network (shadow AI discovery). Signed, self-updating detection …☆39Updated this week
- A PoC of User-Defined Reflective Loader for Havoc Framework built with Cystal Palace☆44Updated this week
- Nim-based encryption tool for obfuscating shellcode and payloads for evading Windows Defender.☆28Jul 14, 2026Updated 3 months ago
- Silverseal is an open-source Linux bootkit and rootkit framework written in Rust, using UEFI and early kernel boot hooks to load a stealt…☆172Oct 8, 2026Updated 2 weeks ago
- Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal☆56Sep 15, 2026Updated last month
- One-pass anonymous Active Directory enumeration over SAMR and LSARPC — null session, no credentials, with structured reusable output.☆68Sep 17, 2026Updated last month
- Mythic Peer to Peer (P2P) Communication Protocol via. LLDP☆23Aug 20, 2026Updated 2 months ago
- another PrivEsc potato...☆120Sep 5, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- PIC shellcode agent based on Stardust framework and Crystal Palace☆91Oct 4, 2026Updated 2 weeks ago
- Linux Kernel LPE☆16Sep 28, 2026Updated 3 weeks ago
- A command line process execution monitor for Windows.☆17Sep 2, 2026Updated last month
- ☆107Sep 18, 2026Updated last month
- BOF exploiting the Visual Studio Installer Elevation Service for SYSTEM LPE and persistence via AppDomainManager hijacking, with native E…☆88Aug 5, 2026Updated 2 months ago
- EDRUnChoker - fileless WMI defense that removes EDRChoker QoS throttling policies☆49Jun 8, 2026Updated 4 months ago
- Tailscale/Headscale C2 profile and agent for Mythic☆34Mar 14, 2026Updated 7 months ago
- open-source pentest management built to be operated by an AI agent☆28Sep 1, 2026Updated last month
- Technical documentation, reverse engineering research, and tools for the Windows Endpoint Security Platform (WESP).☆80Sep 18, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Silent;Call — Pre-authentication remote root on Cisco CUCM 15.x (CVSS 10.0)☆29Aug 4, 2026Updated 2 months ago
- Authenticode signature manipulation toolkit for Red Team operations and security research. Covers signature stealing, metadata cloning, S…☆140Aug 13, 2026Updated 2 months ago
- Usermode detector that catches indirect syscalls. Traps Hell's Hall, Tartarus' Gate, RecycledGate, and VEH syscalls & Many more.☆91Jun 15, 2026Updated 4 months ago
- Ported from [LACUNA Chain](https://github.com/MazX0p/LACUNA-Chain) by Mohamed Alzhrani (0xmaz). lacuna-rs is a reusable Rust crate that …☆21Oct 2, 2026Updated 3 weeks ago
- Modular post-exploitation framework for authorised red-team work. Interactive reverse/bind shells over TCP/TLS/mTLS, plus a pull-based Go…☆38Oct 7, 2026Updated 2 weeks ago
- ☆37May 19, 2026Updated 5 months ago
- ☆22Jun 28, 2026Updated 3 months ago