Whitecat18
28e7fac1d3
Rust-for-Malware-Development is an collection of proof of concepts with techniques and advanced evasion methods
Syscalls
Welcome to the syscalls directory of Rust-for-Malware-Development.
Here, you will find various syscall techniques, each in its own folder. Explore the linked submodules for details, code, and implementation notes!
Sections & Links
-
RecycledGate:
Implements syscall gate recycling for evasion/bypass purposes. -
TartarusGate:
Tartarus syscall gates for stealthy execution and anti-analysis. -
direct_syscalls:
Examples for performing direct system calls in Rust, bypassing user-mode APIs. -
indirect_syscalls:
Techniques for indirect syscall dispatch ideal for evading EDR hooks. -
parallel_syscalls:
Implements parallel syscall strategy for multi-threaded or batched operations. -
Doom Syscalls: Dynamic SSN & RIP spoofing via addresses within ntdll.dll.
How to Use
Clone the repository and browse each folder for usage details:
git clone https://github.com/Whitecat18/Rust-for-Malware-Development.git
cd Rust-for-Malware-Development/syscalls
Each subfolder contains its own README or code demonstrating the approach.