SysWhispers3

SysWhispers3 SysWhispers 通过生成头文件/ASM 文件帮助规避检测，使植入程序能够直接进行系统调用。 官方 Discord 频道 快来 Discord 一起玩吧！ 我为什么不为 SysWhispers2 创建 PR？ SysWhispers3 作为独立版本的原因有很多，但最重要的包括： SysWhispers3 是 Inceptor 使用的“事实分支”，并实现了一些与原始版本工具无关的实用类。 SysWhispers2 正朝着支持 NASM 编译（用于 gcc/mingw）的方向发展，而此版本专门设计并测试支持 MSVC（因为 Inceptor...

acheron

About Acheron is a library inspired by SysWhisper3/FreshyCalls/RecycledGate, with most of the functionality implemented in Go assembly. acheron package can be used to add indirect syscall capabilities to your Golang tradecraft, to bypass AV/EDRs that makes use of usermode hooks and instrumentatio...

SysWhispers3 - AV/EDR Evasion Via Direct System Calls

SysWhispers helps with evasion by generating header/ASM files implants can use to make direct system calls. Why on earth didn't I create a PR to SysWhispers2? The reason for SysWhispers3 to be a standalone version are many, but the most important are: SysWhispers3 is the de-facto "fork" used by...