GetRektBoy724/Breaking-Detecting-Direct-Syscall-Techniques

Stars
26
Rank 930,752 (Top 19 %)
Language
Created almost 3 years ago
Updated over 2 years ago

GetRektBoy724/Breaking-Detecting-Direct-Syscall-Techniques

GetRektBoy724

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

A repository filled with ideas to break/detect direct syscall techniques

SharpUnhooker

C# Based Universal API Unhooker

MeterPwrShell

Automated Tool That Generates The Perfect Meterpreter Powershell Payload

DCMB

Dont Call Me Back - Dynamic kernel callback resolver. Scan kernel callbacks in your system in a matter of seconds!

BetterXencrypt

A better version of Xencrypt.Xencrypt it self is a Powershell runtime crypter designed to evade AVs.

KPDB

Windows PDB parser for kernel-mode environment.

TripleS

Extracting Syscall Stub, Modernized

SharpLoadLibrary

An attempt to make a LoadLibrary designed for offensive operations, in C# obviously.

SharpHalos

My implementation of Halo's Gate technique in C#

HalosUnhooker

Halos Gate-based NTAPI Unhooker

SyscallShuffler

Your NTDLL vaccine from modern direct syscall methods.

ReversePowernoid

Reverse TCP Powershell has never been this paranoid. (basically an Opsec-safe reverse powershell)

JALSI

JALSI - Just Another Lame Shellcode Injector

SysGate

One gate to all syscalls!

NiceTryDLL

Nice try reading NTDLL from disk, nerd.

LocalAMSI.Fail

This is a port of AMSI.fail,i modify the code to make it C# 5 compatible and can be executed on Windows 10 without installing any extra requirements.AMSI.fail itself generates obfuscated PowerShell snippets that break or disable AMSI for the current process.

Ultrac1ph3r

Do You Want To Encode Your Text String With Multiple Ciphers? Then You're In The Right Place!

sementara

Some random shits for random things

GetRektBoy724