SysWhispers2

SysWhispers2 SysWhispers helps with evasion by generating header/ASM files implants can use to make direct system calls. All core syscalls are supported and example generated files available in the example-output/ folder. Difference Between SysWhispers 1 and 2 The usage is almost identical to...

SharpWhispers

SharpWhispers C porting of SysWhispers2. It uses SharpASM to find the code caves for executing the system call stub. Read the blog post for the technical details: https://www.secforce.com/blog/sharpasm-sharpwhispers/ Requirements Visual Studio .NET Framework = 3.5 Python3 Usage / / / | | /| / / /...

Chimera - Automated DLL Sideloading Tool With EDR Evasion Capabilities

While DLL sideloading can be used for legitimate purposes, such as loading necessary libraries for a program to function, it can also be used for malicious purposes. Attackers can use DLL sideloading to execute arbitrary code on a target system, often by exploiting vulnerabilities in legitimate...