direct-syscalls

There are 5 repositories under direct-syscalls topic.

  • DEFCON-31-Syscalls-Workshop

    VirtualAlllocEx/DEFCON-31-Syscalls-Workshop

    Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".

    Language:C64110094

  • VirtualAlllocEx/Direct-Syscalls-vs-Indirect-Syscalls

    The following two code samples can be used to understand the difference between direct syscalls and indirect syscalls

    Language:C1655022

  • annihilatorq/shadow_syscall

    windows syscalls with a single line and a high level of abstraction. has modern cpp20 wrappers and utilities, range-based DLL and export enumeration, wrapper around KUSER_SHARED_DATA. supported compilers: clang, gcc and msvc

    Language:C++1514114

  • VirtualAlllocEx/Direct-Syscalls-A-journey-from-high-to-low

    Start with shellcode execution using Windows APIs (high level), move on to native APIs (medium level) and finally to direct syscalls (low level).

    Language:C1313121

  • VirtualAlllocEx/DSC_SVC_REMOTE

    This code example allows you to create a malware.exe sample that can be run in the context of a system service, and could be used for local privilege escalation in the context of an unquoted service path, etc. The payload itself can be remotely hosted, downloaded via the wininet library and then executed via direct system calls.

    Language:C502010