syscalls 开源项目推荐（498 个）

proot-me /proot

chroot, mount --bind, and binfmt_misc without privilege/setup for Linux

linux-test-project /ltp

Linux Test Project (mailing list: https://lists.linux.it/listinfo/ltp)

7etsuo /windows-api-function-cheatsheets

A reference of Windows API function calls, including functions for file operations, process management, memory management, thread management, dynamic-link library (DLL) management, synchronization, interprocess communication, Unicode string manipulation, error handling, Winsock networking operations, and registry operations.

joshfaust /Alaris

A protective and Low Level Shellcode Loader that defeats modern EDR systems.

genuinetools /contained.af

一个用于学习容器、能力与系统调用的“愚蠢”游戏。

konatabrk /shellen

交互式 shellcode 编写环境，可轻松制作 shellcode

zer0condition /ReverseKit

x64 Dynamic Reverse Engineering Toolkit

VirtualAlllocEx /DEFCON-31-Syscalls-Workshop

Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".

JustasMasiulis /inline_syscall

Inline syscalls made easy for windows on clang

pmem /syscall_intercept

The system call intercepting library

Maldev-Academy /HellHall

Performing Indirect Clean Syscalls

ergrelet /windiff

Tool that allows comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the OS, using a Web UI and/or LLMs.

f1zm0 /hades

Go shellcode loader that combines multiple evasion techniques

sysdiglabs /kubectl-dig

Deep kubernetes visibility from the kubectl

KVM-VMI /kvm-vmi

KVM-based Virtual Machine Introspection

google /kafel

A language and library for specifying syscall filtering policies.

daem0nc0re /AtomicSyscall

Tools and PoCs for Windows syscall investigation.

crummie5 /FreshyCalls

FreshyCalls tries to make the use of syscalls comfortable and simple, without generating too much boilerplate and in modern C++17!

FrenchYeti /interruptor

Human-friendly cross-platform system call tracing and hooking library based on Frida's Stalker

trailofbits /krf

A kernelspace syscall interceptor and randomized faulter