GitHub topics: indirect-syscall
safedv/RustVEHSyscalls
A Rust port of LayeredSyscall — performs indirect syscalls while generating legitimate API call stack frames by abusing VEH.
Language: Rust - Size: 13.7 KB - Last synced at: 16 days ago - Pushed at: 6 months ago - Stars: 138 - Forks: 16

EvilBytecode/EByte-Shellcode-Loader
shellcode loader that uses indirect syscalls written in D Lang The loader bypasses user-mode hooks by resolving system calls manually from NTDLL using a hash-based method.
Language: D - Size: 142 KB - Last synced at: 6 days ago - Pushed at: 7 months ago - Stars: 9 - Forks: 1

notfell/pandore
A shellcode loader powered by a web panel.
Language: C++ - Size: 1.65 MB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 8 - Forks: 4

Cyb3rV1c/ShadowRust
A Rust Loader That Uses Indirect System Calls To Execute AES-Encrypted Payload From Given URL
Language: Rust - Size: 35.2 KB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 0 - Forks: 0

kaIIsyms/asb
in-memory patching of AmsiScanBuffer to bypass AMSI
Language: C - Size: 1.95 KB - Last synced at: about 2 months ago - Pushed at: about 2 months ago - Stars: 0 - Forks: 0

k3lpi3b4nsh33/Lamia-Syscall-Template
A generic x64 indirect syscall template for RED TEAM OPSEC
Language: C - Size: 1.68 MB - Last synced at: 3 months ago - Pushed at: 3 months ago - Stars: 5 - Forks: 2

Vasco0x4/ShellLoader_Hub
Shellcode Loader Library.
Size: 9.77 KB - Last synced at: 10 days ago - Pushed at: 3 months ago - Stars: 9 - Forks: 1

Cyb3rV1c/Rust-IndirectSysCalls
A Rust-based tool that facilitates indirect system calls in Windows to inject shellcode.
Language: Rust - Size: 16.6 KB - Last synced at: 11 days ago - Pushed at: 4 months ago - Stars: 0 - Forks: 0

x0reaxeax/SysCook64
Indirect Syscall invocation via thread hijacking
Language: C - Size: 12.7 KB - Last synced at: 6 days ago - Pushed at: almost 2 years ago - Stars: 14 - Forks: 3

x0reaxeax/SyscallHookBypass
NTAPI hook bypass with (semi) legit stack trace
Language: C - Size: 8.79 KB - Last synced at: 6 days ago - Pushed at: almost 2 years ago - Stars: 14 - Forks: 2

Vith0r/Indirect-Syscalls
Indirect Syscalls Loader
Language: C - Size: 14.6 KB - Last synced at: 4 months ago - Pushed at: 6 months ago - Stars: 0 - Forks: 0

Cipher7/ApexLdr
ApexLdr is a DLL Payload Loader written in C
Language: C - Size: 738 KB - Last synced at: 9 months ago - Pushed at: 9 months ago - Stars: 72 - Forks: 16

hiatus/NtGate
Transparently call NTAPI via Halo's Gate with indirect syscalls.
Language: C - Size: 44.9 KB - Last synced at: 12 months ago - Pushed at: 12 months ago - Stars: 5 - Forks: 2

pard0p/CallstackSpoofingPOC
C++ self-Injecting dropper based on various EDR evasion techniques.
Language: C - Size: 46.9 KB - Last synced at: about 1 year ago - Pushed at: about 1 year ago - Stars: 255 - Forks: 55

Krypteria/AtlasLdr
Reflective x64 PE/DLL Loader implemented using Dynamic Indirect Syscalls
Language: C++ - Size: 38.1 KB - Last synced at: over 1 year ago - Pushed at: over 1 year ago - Stars: 291 - Forks: 51
