SysWhispers

SysWhispers SysWhispers ayuda a evadir generando archivos de cabecera/ASM que los implantes pueden usar para realizar llamadas directas al sistema. Todas las syscalls principales son compatibles desde Windows XP hasta Windows 10 19042 20H2. Los archivos generados de ejemplo están disponibles en l...

Shhhloader - SysWhispers Shellcode Loader

Shhhloader is a SysWhispers Shellcode Loader that is currently a Work in Progress. It takes raw shellcode as input and compiles a C++ stub that has been integrated with SysWhispers in order to bypass AV/EDR. The included python builder will work on any Linux system that has Mingw-w64 installed. T...

SysWhispers - AV/EDR Evasion Via Direct System Calls

SysWhispers helps with evasion by generating header/ASM files implants can use to make direct system calls. All core syscalls are supported from Windows XP to 10. Example generated files available in example-output/. Introduction Various security products place hooks in user-mode APIs which allow...