corpus.blog
41554 blogs · 4,504,310 posts Claim your blog
Record · corpus.blog/posts/01a0d36e-6d65-70e5-b023-d29b1eba54e8

SysWhispers is dead, long live SysWhispers!

klezvirus.github.io · published 1 August 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at klezvirus.github.io Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
39
Words captured
5,405

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://klezvirus.github.io/AV-Evasion-CodeExecNewDotnet/
klezvirus.github.io
https://www.ired.team/offensive-security/code-injection-process-injection/how-to-hook-windows-api-using-c++
ired.team
https://github.com/klezVirus/inceptor/blob/main/slides/Inceptor%20-%20Bypass%20AV-EDR%20solutions%20combining%20well%20known%20techniques.pdf
github.com
https://twitter.com/Cn33liz
twitter.com
https://twitter.com/am0nsec
twitter.com
https://twitter.com/vxunderground
twitter.com
https://twitter.com/sektor7net
twitter.com
https://twitter.com/trickster012
twitter.com
https://twitter.com/Jackson_T
twitter.com
https://github.com/jthuraisamy/SysWhispers2
github.com
https://github.com/klezVirus/inceptor.git
github.com
https://klezvirus.github.io/imgs/blog/003AVEvasion/syscall-mark.png
klezvirus.github.io
https://klezvirus.github.io/imgs/blog/003AVEvasion/syscall-stub.png
klezvirus.github.io
https://www.geoffchappell.com/studies/windows/km/ntoskrnl/inc/api/ntexapi_x/kuser_shared_data/index.htm
geoffchappell.com
https://docs.microsoft.com/it-it/windows-hardware/design/device-experiences/oem-hvci-enablement
docs.microsoft.com
https://klezvirus.github.io/imgs/blog/003AVEvasion/int2Eh-stub.png
klezvirus.github.io
https://twitter.com/CaptMeelo
twitter.com
https://captmeelo.com/redteam/maldev/2021/11/18/av-evasion-syswhisper.html
captmeelo.com
https://klezvirus.github.io/imgs/blog/003AVEvasion/whispering-too-low.gif
klezvirus.github.io
https://klezvirus.github.io/imgs/blog/003AVEvasion/syswhispering-the-egg.gif
klezvirus.github.io
https://klezvirus.github.io/imgs/blog/003AVEvasion/Detail-of-egg-hunter.png
klezvirus.github.io
https://twitter.com/olafhartong
twitter.com
https://klezvirus.github.io/imgs/blog/003AVEvasion/normal-api-flow.png
klezvirus.github.io
https://klezvirus.github.io/imgs/blog/003AVEvasion/crafted-syscall-flow.png
klezvirus.github.io
https://twitter.com/aionescu
twitter.com
https://www.youtube.com/watch?v=pHyWyH804xE
youtube.com
https://github.com/jackullrich/syscall-detect
github.com
Detecting Manual Syscalls from User Mode Read at the source ↗
winternl.com
https://klezvirus.github.io/imgs/blog/003AVEvasion/syscall-detect.png
klezvirus.github.io
https://twitter.com/s4ntiago_p/status/1488508934172278788
twitter.com
https://twitter.com/s4ntiago_p
twitter.com
https://github.com/helpsystems/nanodump
github.com
https://github.com/helpsystems/nanodump/blob/main/source/syscalls-asm.asm
github.com
https://mobile.twitter.com/elephantse4l
mobile.twitter.com
https://github.com/crummie5/FreshyCalls
github.com
https://klezvirus.github.io/imgs/blog/003AVEvasion/bypass-syscall-detect-800.gif
klezvirus.github.io
https://twitter.com/ElephantSe4l/status/1488463781621547009
twitter.com
https://klezvirus.github.io/imgs/blog/003AVEvasion/sdb-detected.png
klezvirus.github.io
https://klezvirus.github.io/imgs/blog/003AVEvasion/no-jmp-detected.png
klezvirus.github.io