8 matches found
SysWhispers2
SysWhispers2 SysWhispers рдкреНрд░рддреНрдпрдХреНрд╖ рд╕рд┐рд╕реНрдЯрдо рдХреЙрд▓ рдХрд░рдиреЗ рдХреЗ рд▓рд┐рдП implants рджреНрд╡рд╛рд░рд╛ рдЙрдкрдпреЛрдЧ рдХрд┐рдП рдЬрд╛рдиреЗ рд╡рд╛рд▓реЗ header/ASM рдлрд╝рд╛рдЗрд▓реЗрдВ рдЙрддреНрдкрдиреНрди рдХрд░рдХреЗ рдПрд╡рд┐рдЬрд╝рди рдореЗрдВ рдорджрдж рдХрд░рддрд╛ рд╣реИред рд╕рднреА рдХреЛрд░ syscalls рд╕рдорд░реНрдерд┐рдд рд╣реИрдВ рдФрд░ рдЙрджрд╛рд╣рд░рдг рдЙрддреНрдкрдиреНрди рдлрд╝рд╛рдЗрд▓реЗрдВ example-output/ рдлрд╝реЛрд▓реНрдбрд░ рдореЗрдВ рдЙрдкрд▓рдмреНрдз рд╣реИрдВред SysWhispers 1 рдФрд░ 2 рдХреЗ рдмреАрдЪ рдЕрдВрддрд░ рдЙрдкрдпреЛрдЧ SysWhispers1 рдХреЗ...
SysWhispers3
SysWhispers3 SysWhispers hilft bei der Umgehung, indem es Header/ASM-Dateien generiert, die Implants verwenden k├╢nnen, um direkte Systemaufrufe zu t├дtigen. Offizieller Discord-Kanal Komm auf Discord vorbei! Warum um Himmels Willen habe ich keinen PR zu SysWhispers2 erstellt? Die Gr├╝nde, warum...
SysWhispers4
SysWhispers4 ├Йvasion AV/EDR via appels syst├иme directs et indirects Windows NT 3.1 ├а Windows 11 24H2 ┬╖ x64 ┬╖ x86 ┬╖ WoW64 ┬╖ ARM64 SysWhispers4 est un g├йn├йrateur de stubs d'appels syst├иme bas├й sur Python qui produit du code C/ASM pour invoquer directement les fonctions du noyau NT, en contournant l...
SysWhispers3 - AV/EDR Evasion Via Direct System Calls
SysWhispers helps with evasion by generating header/ASM files implants can use to make direct system calls. Why on earth didn't I create a PR to SysWhispers2? The reason for SysWhispers3 to be a standalone version are many, but the most important are: SysWhispers3 is the de-facto "fork" used by...
FindObjects-BOF - A Cobalt Strike Beacon Object File (BOF) Project Which Uses Direct System Calls To Enumerate Processes For Specific Loaded Modules Or Process Handles
A Cobalt Strike Beacon Object File BOF project which uses direct system calls to enumerate processes for specific modules or process handles. What is this repository for? Use direct systems calls within Beacon Object files to enumerate processes for specific loaded modules e.g. winhttp.dll,...
WdToggle - A Beacon Object File (BOF) For Cobalt Strike Which Uses Direct System Calls To Enable WDigest Credential Caching
A Proof of Concept Cobalt Strike Beacon Object File which uses direct system calls to enable WDigest credential caching and circumvent Credential Guard if enabled. Additional guidance can be found in this blog post: https://outflank.nl/blog/?p=1592 Background This PoC code is based on the followi...
SysWhispers2 - AV/EDR Evasion Via Direct System Calls
SysWhispers helps with evasion by generating header/ASM files implants can use to make direct system calls. All core syscalls are supported and example generated files available in the example-output/ folder. Difference BetweenSysWhispers 1 and 2 The usage is almost identical to SysWhispers1 but...
SysWhispers - AV/EDR Evasion Via Direct System Calls
SysWhispers helps with evasion by generating header/ASM files implants can use to make direct system calls. All core syscalls are supported from Windows XP to 10. Example generated files available in example-output/. Introduction Various security products place hooks in user-mode APIs which allow...