Locked SysWhispers3 - AV/EDR evasion via direct system calls.

[itsMe]

This is the hidden content, please

• Sign In
• or
• Sign Up

SysWhispers helps with evasion by generating header/ASM files implants can use to make direct system calls.

Why on earth didn't I create a PR to SysWhispers2?

The reason for SysWhispers3 to be a standalone version are many, but the most important are:

•     SysWhispers3 is the de-facto "fork" used by Inceptor, and implements some utils class which are not relevant to the original version of the tool.
•     SysWhispers2 is moving towards supporting NASM compilation (for gcc/mingw), while this version is specifically designed and tested to support MSVC (because Inceptor will stay a Windows-only framework for the near future).
•     SysWhispers3 contains partially implemented features (such as egg-hunting) which would not be sensible to include in the original version of the tool.

This is the hidden content, please

• Sign In
• or
• Sign Up