Linux Test Project (mailing list: https://lists.linux.it/listinfo/ltp)

chroot, mount --bind, and binfmt_misc without privilege/setup for Linux

A reference of Windows API function calls, including functions for file operations, process management, memory management, thread management, dynamic-link library (DLL) management, synchronization, interprocess communication, Unicode string manipulation, error handling, Winsock networking operations, and registry operations.

A protective and Low Level Shellcode Loader that defeats modern EDR systems.

A stupid game for learning about containers, capabilities, and syscalls.

🌸 Interactive shellcoding environment to easily craft shellcodes

Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".

x64 Dynamic Reverse Engineering Toolkit

Inline syscalls made easy for windows on clang

The system call intercepting library

Performing Indirect Clean Syscalls

Go shellcode loader that combines multiple evasion techniques

Tool that allows comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the OS, using a Web UI and/or LLMs.

Deep kubernetes visibility from the kubectl

KVM-based Virtual Machine Introspection

A language and library for specifying syscall filtering policies.

Tools and PoCs for Windows syscall investigation.

FreshyCalls tries to make the use of syscalls comfortable and simple, without generating too much boilerplate and in modern C++17!

A kernelspace syscall interceptor and randomized faulter

.NET Project containing plenty of advanced techniques to detect various types of malicious actions on your software, with syscall support.