WithSecureLabs/CallStackSpoofer

@WithSecureLabs

A PoC implementation for spoofing arbitrary call stacks when making sys calls (e.g. grabbing a handle via NtOpenProcess)

↗ Open on GitHub

Stars

598

Forks

74

Language

C++

License

Apache-2.0

Last push

1 year ago

C++countercept spoofer

No related intel yet

This repo has not appeared in any of the sources the radar tracks. The collector runs on a schedule — check back once it covers this repo.