Resolve syscall numbers at runtime for all Windows versions.
☆60Nov 21, 2024Updated last year
Alternatives and similar repositories for universal-syscall-64
Users that are interested in universal-syscall-64 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- YouTube/Livestream project for obfuscating C# source code using Roslyn☆128May 9, 2021Updated 5 years ago
- Managed code hooking template.☆108Feb 15, 2021Updated 5 years ago
- Script to use SysWhispers2 direct system calls from Cobalt Strike BOFs☆126May 24, 2022Updated 4 years ago
- C# implementation of the token privilege removal flaw discovered by @GabrielLandau/Elastic☆144Feb 23, 2022Updated 4 years ago
- ☆187Jan 5, 2021Updated 5 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- ☆155Jan 6, 2023Updated 3 years ago
- PoC to demonstrate how CLR ETW events can be tampered.☆187Mar 26, 2020Updated 6 years ago
- Running .NET from VBA☆147Feb 11, 2023Updated 3 years ago
- ☆19Aug 19, 2021Updated 5 years ago
- Nim version of MDSec's Parallel Syscall PoC☆124Apr 4, 2026Updated 6 months ago
- C# version of MDSec's ParallelSyscalls☆143Jan 9, 2022Updated 4 years ago
- LiquidSnake is a tool that allows operators to perform fileless lateral movement using WMI Event Subscriptions and GadgetToJScript☆351Sep 1, 2021Updated 5 years ago
- Inject .NET assemblies into an existing process☆508Jan 19, 2022Updated 4 years ago
- A faithful transposition of the key features/functionality of @itm4n's PPLDump project as a BOF.☆142Sep 24, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Multithreaded C# .NET Assembly to enumerate accessible network shares in a domain☆387Sep 20, 2025Updated last year
- C# Reflective loader for unmanaged binaries.☆446Jan 25, 2023Updated 3 years ago
- Evasive shellcode loader for bypassing event-based injection detection (PoC)☆834Aug 23, 2021Updated 5 years ago
- Upsilon execute shellcode with syscalls - no API like NtProtectVirtualMemory is used☆90Aug 26, 2021Updated 5 years ago
- A *very* imperfect attempt to correlate Kernel32 function calls to native API (Nt/Zw) counterparts/execution flow.☆28Dec 16, 2021Updated 4 years ago
- NimicStack is the pure Nim implementation of Call Stack Spoofing technique to mimic legitimate programs☆97Apr 4, 2026Updated 6 months ago
- C# implementation of the research by @jonaslyk and the drafted PoC from @LloydLabs☆150Oct 25, 2021Updated 5 years ago
- C# Based Universal API Unhooker☆407Feb 18, 2022Updated 4 years ago
- A quick example of the Hells Gate technique in Nim☆92Aug 11, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Python interpreter for Cobalt Strike Malleable C2 Profiles. Allows you to parse, build and modify them programmatically.☆290Jun 8, 2026Updated 4 months ago
- JXA script for Mythic that prints the TCC.db☆15Apr 18, 2021Updated 5 years ago
- Koppeling x Metatwin x LazySign☆216Aug 26, 2021Updated 5 years ago
- PoC for UUID shellcode execution using DInvoke☆156Mar 8, 2021Updated 5 years ago
- BOF implementation of Adopt. Spawns a process from a process. Can sometimes be used to run a session > 0 process from session 0.☆16Jul 22, 2022Updated 4 years ago
- Userland API Unhooker Project☆111Apr 4, 2026Updated 6 months ago
- A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.☆296Aug 18, 2023Updated 3 years ago
- Companion PoC for the "Adventures in Dynamic Evasion" blog post☆127May 25, 2021Updated 5 years ago
- PE File Blessing - To continue or not to continue☆86Nov 23, 2019Updated 6 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Project to check which Nt/Zw functions your local EDR is hooking☆200Mar 21, 2021Updated 5 years ago
- OffensivePH - use old Process Hacker driver to bypass several user-mode access controls☆330Oct 9, 2021Updated 5 years ago
- D/Invoke port of UrbanBishop☆109Jul 19, 2020Updated 6 years ago
- ☆47Jun 21, 2023Updated 3 years ago
- D/Invoke port of UrbanBishop☆30Dec 13, 2020Updated 5 years ago
- Hardened Proof of Concept of D/Invoke Process Injection malware☆41Jul 23, 2020Updated 6 years ago
- Tool for interacting with outlook interop during red team engagements☆145Jun 29, 2021Updated 5 years ago