2020-04-29 22:34:09 -05:00
2020-04-16 16:36:08 -05:00
2020-04-16 16:23:58 -05:00
2020-04-16 16:36:08 -05:00
2020-04-16 16:36:08 -05:00
2020-04-29 22:34:09 -05:00
2020-04-16 16:36:08 -05:00
2020-04-16 16:36:08 -05:00
2020-04-16 16:36:08 -05:00

SharpCall

Simple proof of concept code that allows you to execute direct system calls in C# by utilizing unmanaged code to bypass EDR and API Hooking.

This Proof of Concept is directly related to the following blog posts:

File Structure:

  • Native.cs: Contains all the Native Window API function calls, as well as the necessary structures, and flag enumerators.
  • Syscalls.cs: Contains the delegate definition and delegate implementation used to execute our syscall assembly from unmanaged memory.
  • Program.cs: Main program application that utilizes our implemented syscall delegate to execute the syscall.
S
Description
Automated archival mirror of github.com/jhalon/SharpCall
Readme
40 KiB
Languages
C# 100%