https://github.com/cyb3rv1c/rust-indirectsyscalls

A Rust-based tool that facilitates indirect system calls in Windows to inject shellcode.
https://github.com/cyb3rv1c/rust-indirectsyscalls

assembly-language edr-evasion indirect-syscall rust-injector

Last synced: 9 months ago
JSON representation

A Rust-based tool that facilitates indirect system calls in Windows to inject shellcode.

• Host: GitHub
• URL: https://github.com/cyb3rv1c/rust-indirectsyscalls
• Owner: Cyb3rV1c
• License: mit
• Created: 2024-12-23T14:52:42.000Z (over 1 year ago)
• Default Branch: main
• Last Pushed: 2024-12-23T16:36:54.000Z (over 1 year ago)
• Last Synced: 2025-04-10T12:51:03.957Z (about 1 year ago)
• Topics: assembly-language, edr-evasion, indirect-syscall, rust-injector
• Language: Rust
• Homepage:
• Size: 16.6 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
# Rust-IndirectSysCalls

**Description:** 

This Rust tool facilitates the execution of indirect system calls within Windows environments, enabling secure and efficient interactions with the system's kernel.

Designed to bypass the limitations of direct system API calls.

# Usage

1. Git clone Repo

2. Specify path to shellcode in main.rs

   

3. Cargo Build & Run 

# Example Output

**Execution** 

![Screenshot 2024-12-23 at 11 19 31 AM](https://github.com/user-attachments/assets/d8e65e65-0a65-40ce-abc7-a92ff430fca1)

# Credits

https://redops.at/en/blog/direct-syscalls-vs-indirect-syscalls

https://github.com/VirtualAlllocEx/Direct-Syscalls-vs-Indirect-Syscalls/tree/main

# Disclaimer

**This project is intended for educational and research purposes only.**

The code provided in this repository is designed to help individuals understand and improve their knowledge of cybersecurity, ethical hacking, and malware analysis techniques. It must not be used for malicious purposes or in any environment where you do not have explicit permission from the owner.