AlphaUncommon
WKL-Sec/LayeredSyscall
Generating legitimate call stack frame along with indirect syscalls by abusing Vectored Exception Handling (VEH) to bypass User-Land EDR hooks in Windows.
- Owner
- WKL-Sec (personal account)
- Stars
- Stars: 311
- Forks
- Forks: 40
- Language
- C
- License
- None
- Created
- 2024
- Tier
- Alpha (250 to 699 ★) What this tier means
More repos by WKL-Sec
All 7 repos by WKL-Sec- WKL-Sec/HiddenDesktopStars: 1,351CBeta
- WKL-Sec/Malleable-CS-ProfilesStars: 550C++Alpha
- WKL-Sec/dcomhijackStars: 327PythonAlpha
- WKL-Sec/GregsBestFriendStars: 206C++Prototype
- WKL-Sec/WMIExecStars: 169PythonPrototype
- WKL-Sec/WinsockyStars: 105CPrototype
Nearby in C
All C repos- rsms/rsmStars: 311CAlpha
- zeruns/Synchronous-Rectification-Buck-Boost-Digital-Power-Supply-Based-on-STM32Stars: 311CAlpha
- davidgfnet/superfwStars: 311CAlpha
- jyr/MNPPStars: 311CAlpha
- id-Software/idsetupStars: 311CAlpha
- grisha/mod_pythonStars: 311CAlpha