C++ self-Injecting dropper based on various EDR evasion techniques.
-
Updated
Feb 11, 2024 - C
#
indirect-syscall
Here are 11 public repositories matching this topic...
Reflective x64 PE/DLL Loader implemented using Dynamic Indirect Syscalls
-
Updated
Oct 8, 2024 - C++
A Rust port of LayeredSyscall — performs indirect syscalls while generating legitimate API call stack frames by abusing VEH.
-
Updated
Oct 31, 2024 - Rust
ApexLdr is a DLL Payload Loader written in C
malware loader threadpool shellcode-loader av-evasion av-bypass red-teaming dll-unhooking dll-sideloading indirect-syscall
-
Updated
Jul 17, 2024 - C
Indirect Syscall invocation via thread hijacking
-
Updated
May 5, 2023 - C
NTAPI hook bypass with (semi) legit stack trace
windows x86 av-evasion redteam antihooking av-bypass edr-bypass detection-evasion hook-bypass indirect-syscall
-
Updated
May 9, 2023 - C
Transparently call NTAPI via Halo's Gate with indirect syscalls.
-
Updated
Apr 26, 2024 - C
A shellcode loader powered by a web panel.
-
Updated
Mar 9, 2024 - C++
shellcode loader that uses indirect syscalls written in D Lang The loader bypasses user-mode hooks by resolving system calls manually from NTDLL using a hash-based method.
shellcode evasion fud av-evasion shellcode-runner indirect-syscall indirect-syscalls shellcode-laoder
-
Updated
Sep 16, 2024 - D
Shellcode Loader Library.
malware loader dll-injection shellcode-loader av-evasion dll-hooking dll-hijacking redteam av-bypass red-teaming indirect-syscall
-
Updated
Nov 21, 2024
Improve this page
Add a description, image, and links to the indirect-syscall topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the indirect-syscall topic, visit your repo's landing page and select "manage topics."