Linux Test Project (mailing list: https://lists.linux.it/listinfo/ltp)

chroot, mount --bind, and binfmt_misc without privilege/setup for Linux

A stupid game for learning about containers, capabilities, and syscalls.

🌸 Interactive shellcoding environment to easily craft shellcodes

A protective and Low Level Shellcode Loader that defeats modern EDR systems.

A reference of Windows API function calls, including functions for file operations, process management, memory management, thread management, dynamic-link library (DLL) management, synchronization, interprocess communication, Unicode string manipulation, error handling, Winsock networking operations, and registry operations.

Inline syscalls made easy for windows on clang

The system call intercepting library

Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".

x64 Dynamic Reverse Engineering Toolkit

Performing Indirect Clean Syscalls

Deep kubernetes visibility from the kubectl

Tools and PoCs for Windows syscall investigation.

A kernelspace syscall interceptor and randomized faulter

Go shellcode loader that combines multiple evasion techniques

Human-friendly cross-platform system call tracing and hooking library based on Frida's Stalker

Web-based tool that allows comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the OS.

FreshyCalls tries to make the use of syscalls comfortable and simple, without generating too much boilerplate and in modern C++17!

KVM-based Virtual Machine Introspection

A language and library for specifying syscall filtering policies.