Simple project using syscalls (via Syswhispers2) to execute MessageBox shellcode.
☆76Nov 12, 2021Updated 4 years ago
Alternatives and similar repositories for SyscallsExample
Users that are interested in SyscallsExample are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- C# version of MDSec's ParallelSyscalls☆143Jan 9, 2022Updated 4 years ago
- Convert shellcode generated using pe_2_shellcode to cdb format.☆99Jan 18, 2022Updated 4 years ago
- C# porting of SysWhispers2. It uses SharpASM to find the code caves for executing the system call stub.☆112Apr 14, 2023Updated 3 years ago
- LdrLoadDll Unhooking☆131Jan 16, 2022Updated 4 years ago
- A collection of scripts used to support an OffSecOps pipeline.☆15Jan 31, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Cobalt Strike BOF that uses a custom ASM HalosGate & HellsGate syscaller to return a list of processes☆107Mar 8, 2023Updated 3 years ago
- x64 Assembly HalosGate direct System Caller to evade EDR UserLand hooks☆242Mar 8, 2023Updated 3 years ago
- C# Implementation of the Hell's Gate VX Technique☆215Jun 30, 2020Updated 6 years ago
- AV/EDR evasion via direct system calls.☆1,833Sep 3, 2022Updated 4 years ago
- ☆117Aug 7, 2022Updated 4 years ago
- Disable PPL via custom driver and dump lsass☆15Mar 13, 2021Updated 5 years ago
- .NET implementation of Cobalt Strike's External C2 Spec☆88Nov 12, 2021Updated 4 years ago
- Clone running process with ZwCreateProcess☆59Nov 8, 2020Updated 5 years ago
- A faithful transposition of the key features/functionality of @itm4n's PPLDump project as a BOF.☆142Sep 24, 2021Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A kernel mode Windows rootkit in development.☆46Dec 31, 2021Updated 4 years ago
- Module Stomping, No New Thread, HellsGate syscaller, UUID Shellcode Runner for x64 Windows 10!☆450Mar 8, 2023Updated 3 years ago
- This PoC uses two diferent technics for stealing the primary token from all running processes, showing that is possible to impersonate a…☆54Nov 4, 2021Updated 4 years ago
- A novel technique to communicate between threads using the standard ETHREAD structure☆116Feb 27, 2021Updated 5 years ago
- ☆51Sep 18, 2020Updated 6 years ago
- You shall pass☆271Jul 16, 2022Updated 4 years ago
- ☆45Oct 16, 2023Updated 3 years ago
- ☆12Sep 29, 2021Updated 5 years ago
- A tool for converting SysWhispers2 syscalls for use with Nim projects☆123Dec 22, 2021Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆24May 22, 2021Updated 5 years ago
- Rewrote HellsGate in C# for fun and learning☆85Feb 10, 2022Updated 4 years ago
- Yet another variant of Process Hollowing☆475Jul 31, 2025Updated last year
- A list of all the DLLs export in C:\windows\system32\☆221Dec 22, 2021Updated 4 years ago
- SharpASM is a C# project that aims to automate ASM (i.e. shellcode) execution in .NET programs by exploiting code caves in RWX sections a…☆62May 23, 2022Updated 4 years ago
- YouTube/Livestream project for obfuscating C# source code using Roslyn☆128May 9, 2021Updated 5 years ago
- Simple PoC demonstrating syscall execution in C#☆159Apr 30, 2020Updated 6 years ago
- Cobalt Strike UDRL for memory scanner evasion.☆1,033Jun 4, 2024Updated 2 years ago
- Remove API hooks from a Beacon process.☆283Sep 18, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Custom implementation of DbgHelp's MiniDumpWriteDump function. Uses static syscalls to replace low-level functions like NtReadVirtualMemo…☆128Jan 18, 2022Updated 4 years ago
- An advanced in-memory evasion technique fluctuating shellcode's memory protection between RW/NoAccess & RX and then encrypting/decrypting…☆1,135Jun 17, 2022Updated 4 years ago
- Inject shellcode to process using Windows NTAPI for bypassing EDRs and Antiviruses☆38Dec 9, 2020Updated 5 years ago
- Pseudorandom AES-256 encryption designed to protect shellcode and arbitrary strings. C# and C/C++ compatible.☆102Jan 7, 2022Updated 4 years ago
- An implementation and proof-of-concept of Process Forking.☆228Nov 29, 2021Updated 4 years ago
- A Combination LSASS Dumper and LSASS Parser. All Credit goes to @slyd0g and @cube0x0.☆148Nov 21, 2021Updated 4 years ago
- Dump Teams conversations☆18Jun 9, 2021Updated 5 years ago