mirror of
https://github.com/thefLink/RecycledGate
synced 2026-06-08 17:44:21 +00:00
Update README.md
This commit is contained in:
@@ -2,7 +2,7 @@
|
||||
|
||||
This is just another implementation of Hellsgate + Halosgate/Tartarosgate.
|
||||
|
||||
However, this implementation makes sure that **all system calls still go through ntdll.dll** to avoid the usage of direct systemcalls.
|
||||
However, this implementation makes sure that **all system calls still go through ntdll.dll** to avoid the usage of direct systemcalls.
|
||||
To do so, I parse the ntdll for nonhooked syscall-stubs and re-use existing ```syscall;ret``` instructions - thus the name of this project.
|
||||
|
||||
This probably bypasses some EDR trying to detect abnormal systemcalls.
|
||||
|
||||
Reference in New Issue
Block a user