AV/EDR evasion via direct and indirect system calls Windows NT 3.1 through Windows 11 24H2 · x64 · x86 · WoW64 · ARM64
-
Updated
Mar 7, 2026 - Python
#
syswhispers
Here are 3 public repositories matching this topic...
Simple Implementation of a Driver for Detecting Techniques like SysWhispers, HellsGate & IndirectSyscalls
forensics red-team forensic-analysis offsec edr detection-engineering blueteam-tools syswhispers direct-syscalls
-
Updated
Jul 13, 2026 - C
Standalone process manipulation SDK for x64 Windows. Indirect syscalls, dynamic function resolution, PE parsing, and injection strategies. No CRT, no external dependencies.
c windows sdk x64 shellcode syscalls evasion offensive-security malware-development red-team process-injection ntapi pe-parser syswhispers indirect-syscalls
-
Updated
Jul 5, 2026 - C
Improve this page
Add a description, image, and links to the syswhispers topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the syswhispers topic, visit your repo's landing page and select "manage topics."