Topic: "syscall"
rdbo/libmem
Advanced Game Hacking Library for C, Modern C++, Rust and Python (Windows/Linux/FreeBSD) (Process/Memory Hacking) (Hooking/Detouring) (Cross Platform) (x86/x64) (DLL/SO Injection) (Internal/External) (Assembler/Disassembler)
Language: C - Size: 2.37 MB - Last synced at: 4 days ago - Pushed at: 5 days ago - Stars: 972 - Forks: 114

redox-os/kernel
Mirror of https://gitlab.redox-os.org/redox-os/kernel
Language: Rust - Size: 3.84 MB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 731 - Forks: 94

JustasMasiulis/inline_syscall
Inline syscalls made easy for windows on clang
Language: C++ - Size: 35.2 KB - Last synced at: about 1 month ago - Pushed at: about 1 year ago - Stars: 706 - Forks: 86

yasukata/zpoline
system call hook for Linux
Language: C - Size: 230 KB - Last synced at: 3 months ago - Pushed at: 6 months ago - Stars: 550 - Forks: 40

JustasMasiulis/nt_wrapper
A wrapper library around native windows sytem APIs
Language: C++ - Size: 535 KB - Last synced at: about 1 month ago - Pushed at: over 4 years ago - Stars: 432 - Forks: 84

ixty/mandibule
linux elf injector for x86 x86_64 arm arm64
Language: C - Size: 24.4 KB - Last synced at: 3 months ago - Pushed at: about 7 years ago - Stars: 332 - Forks: 72

Kudaes/LOLBITS
** DISCONTINUED ** C2 framework that uses Background Intelligent Transfer Service (BITS) as communication protocol and Direct Syscalls + Dinvoke for EDR user-mode hooking evasion.
Language: C# - Size: 21.3 MB - Last synced at: 4 days ago - Pushed at: over 2 years ago - Stars: 216 - Forks: 41

mebeim/systrack
📡🐧 Linux kernel syscall implementation tracker
Language: Python - Size: 2.66 MB - Last synced at: about 1 month ago - Pushed at: 3 months ago - Stars: 214 - Forks: 13

annihilatorq/shadow_syscall
windows syscalls with a single line and a high level of abstraction. has modern cpp20 wrappers and utilities, range-based DLL and export enumeration, wrapper around KUSER_SHARED_DATA. supported compilers: clang, gcc and msvc
Language: C++ - Size: 251 KB - Last synced at: 19 days ago - Pushed at: 19 days ago - Stars: 182 - Forks: 22

cinit/LibcoreSyscall
A library for loading ELF from memory and/or making Linux syscalls on Android written in pure Java.
Language: Java - Size: 264 KB - Last synced at: 2 days ago - Pushed at: 3 months ago - Stars: 173 - Forks: 33

Sh0ckFR/InlineWhispers2
Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF) via Syswhispers2
Language: Assembly - Size: 131 KB - Last synced at: about 1 year ago - Pushed at: almost 3 years ago - Stars: 172 - Forks: 30

polaris64/syswall
Work in progress firewall for Linux syscalls, written in Rust
Language: Rust - Size: 203 KB - Last synced at: 17 days ago - Pushed at: over 1 year ago - Stars: 126 - Forks: 6

YoSTEALTH/Liburing
Liburing is Python + Cython wrapper around C Liburing, which is a helper to setup and tear-down io_uring instances.
Language: Cython - Size: 581 KB - Last synced at: 16 days ago - Pushed at: 4 months ago - Stars: 109 - Forks: 5

falcosecurity/event-generator
Generate a variety of suspect actions that are detected by Falco rulesets
Language: Go - Size: 917 KB - Last synced at: about 1 month ago - Pushed at: 3 months ago - Stars: 105 - Forks: 42

Dewera/Pluto
A manual system call library that supports functions from both ntdll.dll and win32u.dll
Language: C# - Size: 70.3 KB - Last synced at: over 1 year ago - Pushed at: about 2 years ago - Stars: 105 - Forks: 13

earthly/setup-ucacher
Installs ucacher (Earthly Universal Caching) in a GHA job
Size: 26.6 MB - Last synced at: 9 days ago - Pushed at: 7 months ago - Stars: 99 - Forks: 3

pmem/vltrace 📦
Tool tracing syscalls in a fast way using eBPF linux kernel feature
Language: C - Size: 1.14 MB - Last synced at: 5 months ago - Pushed at: over 2 years ago - Stars: 98 - Forks: 20

nullswan/bpfsnitch 📦
Real-time network & syscall monitoring tool for Linux systems and Kubernetes clusters
Language: Go - Size: 779 KB - Last synced at: about 1 month ago - Pushed at: 4 months ago - Stars: 94 - Forks: 3

wizardengineer/krakensvm-mg
A simple x86_64 AMD-v hypervisor type-2 Programmed with C++, with soon to be added syscall hooks. [W.I.P]
Language: C++ - Size: 952 KB - Last synced at: 2 months ago - Pushed at: almost 2 years ago - Stars: 94 - Forks: 17

wookietreiber/strace-analyzer
analyzes strace output
Language: Rust - Size: 262 KB - Last synced at: 14 days ago - Pushed at: about 1 year ago - Stars: 83 - Forks: 6

ScriptIdiot/BOF-patchit
An all-in-one Cobalt Strike BOF to patch, check and revert AMSI and ETW for x64 process. Both syscalls and dynamic resolve versions are available.
Language: C - Size: 33.2 KB - Last synced at: about 2 years ago - Pushed at: over 2 years ago - Stars: 74 - Forks: 15

PinkP4nther/Sutekh
An example rootkit that gives a userland process root permissions
Language: C - Size: 15.6 KB - Last synced at: over 1 year ago - Pushed at: over 5 years ago - Stars: 72 - Forks: 26

kensh1ro/Willie-C2
A Golang implant that uses Discord as a C2 team server
Language: Go - Size: 17.6 MB - Last synced at: 7 months ago - Pushed at: 7 months ago - Stars: 64 - Forks: 10

joshfinley/SyscallDumper
Dump system call codes, names, and offsets from Ntdll.dll
Language: C++ - Size: 236 KB - Last synced at: over 1 year ago - Pushed at: over 1 year ago - Stars: 64 - Forks: 12

stypr/flagchecker
For effective cheating detection in security competitions. Uses Linux Kernel Module (LKM) for generating flags.
Language: C - Size: 82 KB - Last synced at: over 2 years ago - Pushed at: over 2 years ago - Stars: 59 - Forks: 2

Kara-4search/SysCall_ShellcodeLoad_Csharp
Load shellcode via syscall
Language: C# - Size: 83 KB - Last synced at: 11 days ago - Pushed at: almost 4 years ago - Stars: 54 - Forks: 11

GetRektBoy724/TripleS
Extracting Syscall Stub, Modernized
Language: C# - Size: 75.2 KB - Last synced at: over 2 years ago - Pushed at: about 3 years ago - Stars: 51 - Forks: 17

Nugine/rlimit
Resource limits
Language: Rust - Size: 237 KB - Last synced at: 6 days ago - Pushed at: 6 days ago - Stars: 48 - Forks: 12

MatheuZSecurity/detect-lkm-rootkit-cheatsheet
Cheat sheet to detect and remove linux kernel rootkit
Size: 1.04 MB - Last synced at: 4 months ago - Pushed at: 6 months ago - Stars: 47 - Forks: 11

Hagrid29/RemotePatcher
Patch AMSI and ETW in remote process via direct syscall
Language: C - Size: 10.7 KB - Last synced at: over 2 years ago - Pushed at: about 3 years ago - Stars: 47 - Forks: 9

xfgusta/strace-with-colors
A patch to add colors to the strace output
Size: 418 KB - Last synced at: 3 months ago - Pushed at: about 2 years ago - Stars: 45 - Forks: 5

oracle-samples/bysyscall
bypass system calls using BPF
Language: C - Size: 144 KB - Last synced at: 3 months ago - Pushed at: 3 months ago - Stars: 38 - Forks: 7

inkeliz/go_inkwasm
Faster alternative to `syscall/js`. Code-generated Javascript and Assembly, up to 2x faster than native syscall/js.
Language: Go - Size: 72.3 KB - Last synced at: 2 months ago - Pushed at: about 1 year ago - Stars: 33 - Forks: 2

keowu/InstrumentationCallbackToolKit
A fast method to intercept syscalls from any user-mode process using InstrumentationCallback and detect any process using InstrumentationCallback.
Language: C++ - Size: 134 KB - Last synced at: 20 days ago - Pushed at: almost 2 years ago - Stars: 31 - Forks: 11

juliangrtz/frida-iOS-syscall-tracer
Traces syscalls on iOS via Frida, including Mach syscalls
Language: TypeScript - Size: 122 KB - Last synced at: about 1 year ago - Pushed at: about 1 year ago - Stars: 28 - Forks: 6

briceburg/fdclose
attach to a process and close a file descriptor
Language: C - Size: 22.5 KB - Last synced at: 3 months ago - Pushed at: over 8 years ago - Stars: 28 - Forks: 4

nervosnetwork/ckb-std
This library contains serveral modules that could help you write CKB contract with Rust.
Language: Rust - Size: 6.42 MB - Last synced at: 20 days ago - Pushed at: 3 months ago - Stars: 27 - Forks: 20

johannst/dynld
Dynamic linker studies.
Language: C - Size: 140 KB - Last synced at: about 2 months ago - Pushed at: about 2 months ago - Stars: 24 - Forks: 1

INeddHelp/os-template
Very basic os template made with Rust
Language: Rust - Size: 79.1 KB - Last synced at: about 2 years ago - Pushed at: about 2 years ago - Stars: 24 - Forks: 1

vkobel/linux-syscall-hook-rootkit
Simple kernel module that hooks the `execve` syscall and waits for `date` to be executed with the `backd00r` argument followed by a PID number, elevating it to root credentials.
Language: C - Size: 19.5 KB - Last synced at: 23 days ago - Pushed at: about 5 years ago - Stars: 24 - Forks: 4

micREsoft/SysCaller
Windows Syscall SDK with dynamic offset resolution, syscall validation, obfuscation, and more!
Language: C - Size: 678 KB - Last synced at: about 23 hours ago - Pushed at: 2 days ago - Stars: 23 - Forks: 2

guidedhacking/GH_Syscall
Small class to help perform syscalls.
Language: C - Size: 25.4 KB - Last synced at: 1 day ago - Pushed at: about 1 month ago - Stars: 22 - Forks: 20

lonnywong/glibcmock
A solution of mocking glibc function with Google Test.
Language: C++ - Size: 389 KB - Last synced at: 3 months ago - Pushed at: over 8 years ago - Stars: 20 - Forks: 8

Truvis/SyscallExtractorAnalyzer
This script will pull and analyze syscalls in given application(s) allowing for easier security research purposes
Language: Python - Size: 27.3 KB - Last synced at: about 2 years ago - Pushed at: over 4 years ago - Stars: 18 - Forks: 2

TwoUnderscorez/DuckOS
Such OS; Very Duck!
Language: C - Size: 4.79 MB - Last synced at: over 2 years ago - Pushed at: over 4 years ago - Stars: 16 - Forks: 1

bucanero/ps3mapi-lib
PS3 MANAGER API
Language: C - Size: 58.6 KB - Last synced at: 3 months ago - Pushed at: over 2 years ago - Stars: 15 - Forks: 1

vitalyvch/strace.ebpf
This repository contains a tool which traces syscalls in a fast way using eBPF linux kernel feature
Language: C++ - Size: 493 KB - Last synced at: over 2 years ago - Pushed at: almost 8 years ago - Stars: 15 - Forks: 6

blaind/hstrace
Syscall tracing CLI & library made in Rust
Language: Rust - Size: 379 KB - Last synced at: 17 days ago - Pushed at: over 2 years ago - Stars: 14 - Forks: 2

Evian-Zhang/introduction-to-linux-x86_64-syscall
Linux x86_64系统调用简介(长线更新中)
Language: C - Size: 1.4 MB - Last synced at: 3 months ago - Pushed at: about 4 years ago - Stars: 14 - Forks: 3

dutchpsycho/ActiveBreach-Engine
SysWhispers/DirectSyscall Successor — Dynamic Syscall Dispatch Engine with Runtime Debugger & Anti-Tamper. Bypasses Userland Hooks & Kernel Callbacks
Language: C++ - Size: 266 KB - Last synced at: 6 days ago - Pushed at: 7 days ago - Stars: 13 - Forks: 0

tklauser/statx
Report file status using the Linux statx(2) syscall
Language: Go - Size: 8.79 KB - Last synced at: 3 months ago - Pushed at: over 2 years ago - Stars: 13 - Forks: 2

foxhoundsk/FlexSC
Implementation of FlexSC on Linux Kernel v5.0+ and Performance Analysis
Language: C - Size: 177 MB - Last synced at: over 2 years ago - Pushed at: over 5 years ago - Stars: 12 - Forks: 2

MauriceKayser/rs-winapi2
Microsoft Windows user-mode API access with clean Rust types.
Language: Rust - Size: 251 KB - Last synced at: over 1 year ago - Pushed at: over 1 year ago - Stars: 11 - Forks: 2

Pithase/asm-payloads-loaders
Desarrollo paso a paso de cargadores de payloads, escritos exclusivamente en lenguaje Ensamblador x86-64 para Linux, sin dependencias externas y utilizando solo syscalls. | Step-by-step development of payload loaders, written exclusively in x86-64 Assembly for Linux, with no external dependencies and using only syscalls.
Language: Assembly - Size: 248 KB - Last synced at: 25 days ago - Pushed at: 26 days ago - Stars: 10 - Forks: 1

misaelcudekmaceiras/LenguajeC
C ejemplos básicos.
Language: C - Size: 1.23 MB - Last synced at: about 1 year ago - Pushed at: about 1 year ago - Stars: 9 - Forks: 2

kensh1ro/syscall_nimject
using nim to inject shellcode via direct syscalls
Language: Nim - Size: 110 KB - Last synced at: over 2 years ago - Pushed at: almost 4 years ago - Stars: 9 - Forks: 2

overfl0/iojack
Hijack (covertly) stdin/stdout of any ptraceable process in the system by ptracing them and messing with their system calls' parameters and return values.
Language: C++ - Size: 58.6 KB - Last synced at: about 2 months ago - Pushed at: over 5 years ago - Stars: 8 - Forks: 1

raminfp/linux_syscall
C source code and Assembly linux system call
Language: C - Size: 11.7 KB - Last synced at: 4 days ago - Pushed at: about 8 years ago - Stars: 8 - Forks: 2

opcode86/SysCaller
Single header library to simplify the usage of direct syscalls. x64/x86
Language: C++ - Size: 19.5 KB - Last synced at: over 1 year ago - Pushed at: over 2 years ago - Stars: 7 - Forks: 5

wendymunyasi/alx-system_engineering-devops
Learn devops practices.
Language: Shell - Size: 607 KB - Last synced at: 2 months ago - Pushed at: over 2 years ago - Stars: 7 - Forks: 9

objectionary/eo-sys 📦
EO Objects Interacting with Operating System Level
Language: Java - Size: 177 KB - Last synced at: about 2 months ago - Pushed at: 11 months ago - Stars: 6 - Forks: 4

ucare-uchicago/MittSSD
MittOS: Supporting Millisecond Tail Tolerance with Fast Rejecting SLO-Aware OS Interface (SOSP'17)
Language: C - Size: 156 MB - Last synced at: over 2 years ago - Pushed at: over 4 years ago - Stars: 6 - Forks: 0

mimecast/ioriot
I/O Riot is a tool for logging, replaying, and benchmarking I/O on Linux
Language: C - Size: 257 KB - Last synced at: over 2 years ago - Pushed at: over 5 years ago - Stars: 6 - Forks: 0

jerrylzy/CS35L
CS 35L: Software Construction Laboratory
Language: C - Size: 66.3 MB - Last synced at: about 2 years ago - Pushed at: over 7 years ago - Stars: 6 - Forks: 18

JJTech0130/swift-raw-syscall
Raw syscalls, in pure Swift!
Language: Swift - Size: 5.86 KB - Last synced at: 3 months ago - Pushed at: over 1 year ago - Stars: 5 - Forks: 0

0x280/syscall
dynamic x64 syscall invocation
Language: C - Size: 117 KB - Last synced at: over 1 year ago - Pushed at: over 1 year ago - Stars: 5 - Forks: 1

Selyss/AssemBuddy
Command line tool for querying assembly syscalls
Language: Go - Size: 98.6 KB - Last synced at: about 2 months ago - Pushed at: over 1 year ago - Stars: 5 - Forks: 0

Valen-H/Admin-Panel-II
A process admin panel with support for WebDAV and CLI commands (& websockets etc...)
Language: JavaScript - Size: 1.05 MB - Last synced at: 3 months ago - Pushed at: over 5 years ago - Stars: 5 - Forks: 0

thebigcicca/HiddenGhost
HiddenGhost is an new solution for find system call table with support for 5.7x kernels +
Language: C - Size: 98.6 KB - Last synced at: 6 days ago - Pushed at: about 1 month ago - Stars: 4 - Forks: 1

samuelselasi/alx-low_level_programming
ALX Low Level Programming (C)
Language: C - Size: 753 KB - Last synced at: 2 months ago - Pushed at: almost 2 years ago - Stars: 4 - Forks: 1

errantmind/faf-syscall
A minimalist, no-std, Linux syscall macro
Language: Rust - Size: 4.88 KB - Last synced at: 22 days ago - Pushed at: over 3 years ago - Stars: 4 - Forks: 1

Codejune/operating-system
숭실대학교 컴퓨터학부 3학년 운영체제
Language: C - Size: 697 KB - Last synced at: almost 2 years ago - Pushed at: over 3 years ago - Stars: 4 - Forks: 0

ferhatgec/systemf
Systemf, C-like syscall macro.
Language: Rust - Size: 2.93 KB - Last synced at: 9 days ago - Pushed at: about 4 years ago - Stars: 4 - Forks: 0

BaseMax/c-nostdlib-assembly
We define own _start point without using GLIBC runtime library using Assembly. (x86_64 and i386)
Language: C - Size: 21.5 KB - Last synced at: about 7 hours ago - Pushed at: about 4 years ago - Stars: 4 - Forks: 0

johannst/mini-kvm-rs
Playground for KVM in rust.
Language: Rust - Size: 3.72 MB - Last synced at: about 2 months ago - Pushed at: about 2 months ago - Stars: 3 - Forks: 4

Mohamed-Mostafaaa/alx-system_engineering-devops
I'm now a ALX Student, this is my system engineering devops
Language: Shell - Size: 599 KB - Last synced at: 25 days ago - Pushed at: 12 months ago - Stars: 3 - Forks: 0

coleak2021/vehsyscall
vehsyscall:a syscall project that may bypass EDR
Language: C - Size: 1.06 MB - Last synced at: over 1 year ago - Pushed at: over 1 year ago - Stars: 3 - Forks: 0

b1tg/syscall-finder
Find Windows syscall numbers from ntdll.dll
Language: Rust - Size: 3.91 KB - Last synced at: 3 months ago - Pushed at: over 2 years ago - Stars: 3 - Forks: 4

Parsankamusa/simple_shell
A simple shell project for creating a UNIX interpreter
Language: C - Size: 2.64 MB - Last synced at: about 1 year ago - Pushed at: almost 3 years ago - Stars: 3 - Forks: 4

ferhatgec/command
Command, ::process::Command like syscalls in C++.
Language: C++ - Size: 2.93 KB - Last synced at: 27 days ago - Pushed at: about 4 years ago - Stars: 3 - Forks: 0

thealifaisal/Simulation-Of-IceCreamShop
[Operating System Course Project] Ice Cream Factory Problem - This program creates a simulation of an ice cream shop where multiple customers are entertained with preventing race condition. It is written in pure C only.
Language: C - Size: 2.5 MB - Last synced at: about 2 years ago - Pushed at: over 4 years ago - Stars: 3 - Forks: 1

henvic/ctxsignal 📦
DEPRECATED: Use signal.NotifyContext, available since Go 1.16. Package ctxsignal can be used to create contexts cancelable by system signals. See https://github.com/golang/go/issues/37255
Language: Go - Size: 11.7 KB - Last synced at: about 1 year ago - Pushed at: over 6 years ago - Stars: 3 - Forks: 0

ldorau/strace.ebpf
Tool tracing syscalls in a fast way using eBPF linux kernel feature
Size: 836 KB - Last synced at: 3 months ago - Pushed at: almost 8 years ago - Stars: 3 - Forks: 2

oliwer/syscall
Run system calls from your shell
Language: Roff - Size: 11.7 KB - Last synced at: 3 months ago - Pushed at: 3 months ago - Stars: 2 - Forks: 0

lavrd/tunnel
Network tunnel as an example
Language: Rust - Size: 168 KB - Last synced at: 4 months ago - Pushed at: 4 months ago - Stars: 2 - Forks: 0

mauri870/syscall
syscall(1) - Test a linux system call
Language: C - Size: 14.6 KB - Last synced at: about 1 month ago - Pushed at: 6 months ago - Stars: 2 - Forks: 1

guided-hacking/GH_Syscall
Small class to help perform syscalls.
Language: C - Size: 20.5 KB - Last synced at: 6 days ago - Pushed at: 10 months ago - Stars: 2 - Forks: 1

heyvito/gommap
mmap support for Golang
Language: Go - Size: 26.4 KB - Last synced at: 3 months ago - Pushed at: about 1 year ago - Stars: 2 - Forks: 0

felipensp/vtracer
Ptrace interface for writing tracing tools in V and tracing tool
Language: V - Size: 10.7 KB - Last synced at: 4 months ago - Pushed at: over 1 year ago - Stars: 2 - Forks: 0

Flawww/WoW64Injection
Proof of concept for injecting a 64-bit DLL into a 32-bit application
Language: C - Size: 0 Bytes - Last synced at: about 2 years ago - Pushed at: about 2 years ago - Stars: 2 - Forks: 0

lafith/go-check-disk-usage
Check disk usage information like total space, used and free in Golang.
Language: Go - Size: 19.5 KB - Last synced at: about 1 year ago - Pushed at: about 4 years ago - Stars: 2 - Forks: 0

Iliakis-M/Admin-Panel-II
A process admin panel with support for WebDAV and CLI commands (& websockets etc...)
Language: JavaScript - Size: 1.02 MB - Last synced at: over 2 years ago - Pushed at: over 5 years ago - Stars: 2 - Forks: 0

mnito/charmine
Terminal game experiment
Language: Go - Size: 6.84 KB - Last synced at: 3 months ago - Pushed at: about 7 years ago - Stars: 2 - Forks: 0

prateekroy/Jarvis-Operating-System
x86 based Operating System
Language: C - Size: 397 KB - Last synced at: almost 2 years ago - Pushed at: over 7 years ago - Stars: 2 - Forks: 3

saschpe/kidcat
KidCat - the simple chat. Command-line threaded chat server and client written in ANSI C.
Language: C - Size: 113 KB - Last synced at: 3 months ago - Pushed at: over 14 years ago - Stars: 2 - Forks: 0

xfbs-blog/tracing-linux-macos
tracing system and library calls in linux and macos https://blog.xfbs.net/2018/02/22/tracing-linux-macos/
Last synced at: over 2 years ago - Stars: 2 - Forks: 0
obinexus/libpolycall-v1trial
LibPolyCall - The World First Polymorphic Function Call, Polyglot System
Language: C - Size: 387 KB - Last synced at: 24 days ago - Pushed at: 24 days ago - Stars: 1 - Forks: 0

im-razvan/ntdllSyscallDumper
A minimal C++ tool to extract syscall IDs from ntdll.dll on Windows x64 systems.
Language: C++ - Size: 30.3 KB - Last synced at: 3 months ago - Pushed at: 5 months ago - Stars: 1 - Forks: 0

iraqichild/Syscall-Swapper
Simple project I made to swap over a syscall number from one function to another. Use freely just credit me...
Language: C++ - Size: 5.86 KB - Last synced at: 3 months ago - Pushed at: 6 months ago - Stars: 1 - Forks: 1

moazragab12/STM_System-Programming-with-Linux
Language: C - Size: 14.8 MB - Last synced at: 12 months ago - Pushed at: 12 months ago - Stars: 1 - Forks: 0
