├── .gitignore ├── Get-SyscallNumber.ps1 ├── HeavensGate ├── HeavensGatePoC │ ├── HeavensGatePoC.sln │ └── HeavensGatePoC │ │ ├── App.config │ │ ├── HeavensGatePoC.cs │ │ ├── HeavensGatePoC.csproj │ │ ├── Interop │ │ ├── NativeMethods.cs │ │ ├── Win32Consts.cs │ │ ├── Win32Enums.cs │ │ └── Win32Structs.cs │ │ ├── Library │ │ ├── HeavensGateFactory.cs │ │ ├── Helpers.cs │ │ ├── PeFile.cs │ │ ├── PhysicalResolve.cs │ │ ├── Syscall.cs │ │ └── Utilities.cs │ │ └── Properties │ │ └── AssemblyInfo.cs └── README.md ├── LICENSE ├── README.md ├── SyscallDumper ├── SyscallDumper.sln └── SyscallDumper │ ├── App.config │ ├── Handler │ ├── CommandLineParser.cs │ └── Execute.cs │ ├── Library │ ├── Helpers.cs │ ├── Modules.cs │ ├── PeFile.cs │ └── Utilities.cs │ ├── Properties │ └── AssemblyInfo.cs │ ├── SyscallDumper.cs │ └── SyscallDumper.csproj ├── SyscallPoCs ├── HalosGatePoC │ ├── App.config │ ├── HalosGatePoC.cs │ ├── HalosGatePoC.csproj │ ├── Interop │ │ ├── NativeMethods.cs │ │ ├── Win32Enums.cs │ │ └── Win32Structs.cs │ ├── Library │ │ ├── HalosGate.cs │ │ ├── Helpers.cs │ │ └── Syscall.cs │ └── Properties │ │ └── AssemblyInfo.cs ├── HellsGatePoC │ ├── App.config │ ├── HellsGatePoC.cs │ ├── HellsGatePoC.csproj │ ├── Interop │ │ ├── NativeMethods.cs │ │ ├── Win32Enums.cs │ │ └── Win32Structs.cs │ ├── Library │ │ ├── HellsGate.cs │ │ ├── Helpers.cs │ │ └── Syscall.cs │ └── Properties │ │ └── AssemblyInfo.cs ├── PhysicalResolvePoC │ ├── App.config │ ├── Interop │ │ ├── NativeMethods.cs │ │ ├── Win32Enums.cs │ │ └── Win32Structs.cs │ ├── Library │ │ ├── Helpers.cs │ │ ├── PeFile.cs │ │ ├── PhysicalResolve.cs │ │ └── Syscall.cs │ ├── PhysicalResolvePoC.cs │ ├── PhysicalResolvePoC.csproj │ └── Properties │ │ └── AssemblyInfo.cs └── SyscallPoCs.sln ├── SyscallResolvers ├── HalosGateResolver │ ├── App.config │ ├── HalosGateResolver.cs │ ├── HalosGateResolver.csproj │ ├── Handler │ │ ├── CommandLineParser.cs │ │ └── Execute.cs │ ├── Library │ │ ├── HalosGate.cs │ │ └── Modules.cs │ └── Properties │ │ └── AssemblyInfo.cs ├── HellsGateResolver │ ├── App.config │ ├── Handler │ │ ├── CommandLineParser.cs │ │ └── Execute.cs │ ├── HellsGateResolver.cs │ ├── HellsGateResolver.csproj │ ├── Library │ │ ├── HellsGate.cs │ │ └── Modules.cs │ └── Properties │ │ └── AssemblyInfo.cs ├── InitialProcessResolver │ ├── App.config │ ├── Handler │ │ ├── CommandLineParser.cs │ │ └── Execute.cs │ ├── InitialProcessResolver.cs │ ├── InitialProcessResolver.csproj │ ├── Interop │ │ ├── NativeMethods.cs │ │ ├── Win32Consts.cs │ │ ├── Win32Enums.cs │ │ └── Win32Structs.cs │ ├── Library │ │ ├── Helpers.cs │ │ ├── Modules.cs │ │ └── Utilities.cs │ └── Properties │ │ └── AssemblyInfo.cs ├── KnownDllsResolver │ ├── App.config │ ├── Handler │ │ ├── CommandLineParser.cs │ │ └── Execute.cs │ ├── Interop │ │ ├── NativeMethods.cs │ │ ├── Win32Consts.cs │ │ ├── Win32Enums.cs │ │ └── Win32Structs.cs │ ├── KnownDllsResolver.cs │ ├── KnownDllsResolver.csproj │ ├── Library │ │ ├── Modules.cs │ │ └── Utilities.cs │ └── Properties │ │ └── AssemblyInfo.cs └── SyscallResolvers.sln └── figures ├── getsyscallnumber.png ├── initialprocessresolver.png └── syscallresolvers.png /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/.gitignore -------------------------------------------------------------------------------- /Get-SyscallNumber.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/Get-SyscallNumber.ps1 -------------------------------------------------------------------------------- /HeavensGate/HeavensGatePoC/HeavensGatePoC.sln: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/HeavensGate/HeavensGatePoC/HeavensGatePoC.sln -------------------------------------------------------------------------------- /HeavensGate/HeavensGatePoC/HeavensGatePoC/App.config: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/HeavensGate/HeavensGatePoC/HeavensGatePoC/App.config -------------------------------------------------------------------------------- /HeavensGate/HeavensGatePoC/HeavensGatePoC/HeavensGatePoC.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/HeavensGate/HeavensGatePoC/HeavensGatePoC/HeavensGatePoC.cs -------------------------------------------------------------------------------- /HeavensGate/HeavensGatePoC/HeavensGatePoC/HeavensGatePoC.csproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/HeavensGate/HeavensGatePoC/HeavensGatePoC/HeavensGatePoC.csproj -------------------------------------------------------------------------------- /HeavensGate/HeavensGatePoC/HeavensGatePoC/Interop/NativeMethods.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/HeavensGate/HeavensGatePoC/HeavensGatePoC/Interop/NativeMethods.cs -------------------------------------------------------------------------------- /HeavensGate/HeavensGatePoC/HeavensGatePoC/Interop/Win32Consts.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/HeavensGate/HeavensGatePoC/HeavensGatePoC/Interop/Win32Consts.cs -------------------------------------------------------------------------------- /HeavensGate/HeavensGatePoC/HeavensGatePoC/Interop/Win32Enums.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/HeavensGate/HeavensGatePoC/HeavensGatePoC/Interop/Win32Enums.cs -------------------------------------------------------------------------------- /HeavensGate/HeavensGatePoC/HeavensGatePoC/Interop/Win32Structs.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/HeavensGate/HeavensGatePoC/HeavensGatePoC/Interop/Win32Structs.cs -------------------------------------------------------------------------------- /HeavensGate/HeavensGatePoC/HeavensGatePoC/Library/HeavensGateFactory.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/HeavensGate/HeavensGatePoC/HeavensGatePoC/Library/HeavensGateFactory.cs -------------------------------------------------------------------------------- /HeavensGate/HeavensGatePoC/HeavensGatePoC/Library/Helpers.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/HeavensGate/HeavensGatePoC/HeavensGatePoC/Library/Helpers.cs -------------------------------------------------------------------------------- /HeavensGate/HeavensGatePoC/HeavensGatePoC/Library/PeFile.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/HeavensGate/HeavensGatePoC/HeavensGatePoC/Library/PeFile.cs -------------------------------------------------------------------------------- /HeavensGate/HeavensGatePoC/HeavensGatePoC/Library/PhysicalResolve.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/HeavensGate/HeavensGatePoC/HeavensGatePoC/Library/PhysicalResolve.cs -------------------------------------------------------------------------------- /HeavensGate/HeavensGatePoC/HeavensGatePoC/Library/Syscall.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/HeavensGate/HeavensGatePoC/HeavensGatePoC/Library/Syscall.cs -------------------------------------------------------------------------------- /HeavensGate/HeavensGatePoC/HeavensGatePoC/Library/Utilities.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/HeavensGate/HeavensGatePoC/HeavensGatePoC/Library/Utilities.cs -------------------------------------------------------------------------------- /HeavensGate/HeavensGatePoC/HeavensGatePoC/Properties/AssemblyInfo.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/HeavensGate/HeavensGatePoC/HeavensGatePoC/Properties/AssemblyInfo.cs -------------------------------------------------------------------------------- /HeavensGate/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/HeavensGate/README.md -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/README.md -------------------------------------------------------------------------------- /SyscallDumper/SyscallDumper.sln: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallDumper/SyscallDumper.sln -------------------------------------------------------------------------------- /SyscallDumper/SyscallDumper/App.config: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallDumper/SyscallDumper/App.config -------------------------------------------------------------------------------- /SyscallDumper/SyscallDumper/Handler/CommandLineParser.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallDumper/SyscallDumper/Handler/CommandLineParser.cs -------------------------------------------------------------------------------- /SyscallDumper/SyscallDumper/Handler/Execute.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallDumper/SyscallDumper/Handler/Execute.cs -------------------------------------------------------------------------------- /SyscallDumper/SyscallDumper/Library/Helpers.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallDumper/SyscallDumper/Library/Helpers.cs -------------------------------------------------------------------------------- /SyscallDumper/SyscallDumper/Library/Modules.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallDumper/SyscallDumper/Library/Modules.cs -------------------------------------------------------------------------------- /SyscallDumper/SyscallDumper/Library/PeFile.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallDumper/SyscallDumper/Library/PeFile.cs -------------------------------------------------------------------------------- /SyscallDumper/SyscallDumper/Library/Utilities.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallDumper/SyscallDumper/Library/Utilities.cs -------------------------------------------------------------------------------- /SyscallDumper/SyscallDumper/Properties/AssemblyInfo.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallDumper/SyscallDumper/Properties/AssemblyInfo.cs -------------------------------------------------------------------------------- /SyscallDumper/SyscallDumper/SyscallDumper.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallDumper/SyscallDumper/SyscallDumper.cs -------------------------------------------------------------------------------- /SyscallDumper/SyscallDumper/SyscallDumper.csproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallDumper/SyscallDumper/SyscallDumper.csproj -------------------------------------------------------------------------------- /SyscallPoCs/HalosGatePoC/App.config: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/HalosGatePoC/App.config -------------------------------------------------------------------------------- /SyscallPoCs/HalosGatePoC/HalosGatePoC.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/HalosGatePoC/HalosGatePoC.cs -------------------------------------------------------------------------------- /SyscallPoCs/HalosGatePoC/HalosGatePoC.csproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/HalosGatePoC/HalosGatePoC.csproj -------------------------------------------------------------------------------- /SyscallPoCs/HalosGatePoC/Interop/NativeMethods.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/HalosGatePoC/Interop/NativeMethods.cs -------------------------------------------------------------------------------- /SyscallPoCs/HalosGatePoC/Interop/Win32Enums.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/HalosGatePoC/Interop/Win32Enums.cs -------------------------------------------------------------------------------- /SyscallPoCs/HalosGatePoC/Interop/Win32Structs.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/HalosGatePoC/Interop/Win32Structs.cs -------------------------------------------------------------------------------- /SyscallPoCs/HalosGatePoC/Library/HalosGate.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/HalosGatePoC/Library/HalosGate.cs -------------------------------------------------------------------------------- /SyscallPoCs/HalosGatePoC/Library/Helpers.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/HalosGatePoC/Library/Helpers.cs -------------------------------------------------------------------------------- /SyscallPoCs/HalosGatePoC/Library/Syscall.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/HalosGatePoC/Library/Syscall.cs -------------------------------------------------------------------------------- /SyscallPoCs/HalosGatePoC/Properties/AssemblyInfo.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/HalosGatePoC/Properties/AssemblyInfo.cs -------------------------------------------------------------------------------- /SyscallPoCs/HellsGatePoC/App.config: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/HellsGatePoC/App.config -------------------------------------------------------------------------------- /SyscallPoCs/HellsGatePoC/HellsGatePoC.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/HellsGatePoC/HellsGatePoC.cs -------------------------------------------------------------------------------- /SyscallPoCs/HellsGatePoC/HellsGatePoC.csproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/HellsGatePoC/HellsGatePoC.csproj -------------------------------------------------------------------------------- /SyscallPoCs/HellsGatePoC/Interop/NativeMethods.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/HellsGatePoC/Interop/NativeMethods.cs -------------------------------------------------------------------------------- /SyscallPoCs/HellsGatePoC/Interop/Win32Enums.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/HellsGatePoC/Interop/Win32Enums.cs -------------------------------------------------------------------------------- /SyscallPoCs/HellsGatePoC/Interop/Win32Structs.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/HellsGatePoC/Interop/Win32Structs.cs -------------------------------------------------------------------------------- /SyscallPoCs/HellsGatePoC/Library/HellsGate.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/HellsGatePoC/Library/HellsGate.cs -------------------------------------------------------------------------------- /SyscallPoCs/HellsGatePoC/Library/Helpers.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/HellsGatePoC/Library/Helpers.cs -------------------------------------------------------------------------------- /SyscallPoCs/HellsGatePoC/Library/Syscall.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/HellsGatePoC/Library/Syscall.cs -------------------------------------------------------------------------------- /SyscallPoCs/HellsGatePoC/Properties/AssemblyInfo.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/HellsGatePoC/Properties/AssemblyInfo.cs -------------------------------------------------------------------------------- /SyscallPoCs/PhysicalResolvePoC/App.config: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/PhysicalResolvePoC/App.config -------------------------------------------------------------------------------- /SyscallPoCs/PhysicalResolvePoC/Interop/NativeMethods.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/PhysicalResolvePoC/Interop/NativeMethods.cs -------------------------------------------------------------------------------- /SyscallPoCs/PhysicalResolvePoC/Interop/Win32Enums.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/PhysicalResolvePoC/Interop/Win32Enums.cs -------------------------------------------------------------------------------- /SyscallPoCs/PhysicalResolvePoC/Interop/Win32Structs.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/PhysicalResolvePoC/Interop/Win32Structs.cs -------------------------------------------------------------------------------- /SyscallPoCs/PhysicalResolvePoC/Library/Helpers.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/PhysicalResolvePoC/Library/Helpers.cs -------------------------------------------------------------------------------- /SyscallPoCs/PhysicalResolvePoC/Library/PeFile.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/PhysicalResolvePoC/Library/PeFile.cs -------------------------------------------------------------------------------- /SyscallPoCs/PhysicalResolvePoC/Library/PhysicalResolve.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/PhysicalResolvePoC/Library/PhysicalResolve.cs -------------------------------------------------------------------------------- /SyscallPoCs/PhysicalResolvePoC/Library/Syscall.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/PhysicalResolvePoC/Library/Syscall.cs -------------------------------------------------------------------------------- /SyscallPoCs/PhysicalResolvePoC/PhysicalResolvePoC.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/PhysicalResolvePoC/PhysicalResolvePoC.cs -------------------------------------------------------------------------------- /SyscallPoCs/PhysicalResolvePoC/PhysicalResolvePoC.csproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/PhysicalResolvePoC/PhysicalResolvePoC.csproj -------------------------------------------------------------------------------- /SyscallPoCs/PhysicalResolvePoC/Properties/AssemblyInfo.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/PhysicalResolvePoC/Properties/AssemblyInfo.cs -------------------------------------------------------------------------------- /SyscallPoCs/SyscallPoCs.sln: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallPoCs/SyscallPoCs.sln -------------------------------------------------------------------------------- /SyscallResolvers/HalosGateResolver/App.config: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/HalosGateResolver/App.config -------------------------------------------------------------------------------- /SyscallResolvers/HalosGateResolver/HalosGateResolver.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/HalosGateResolver/HalosGateResolver.cs -------------------------------------------------------------------------------- /SyscallResolvers/HalosGateResolver/HalosGateResolver.csproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/HalosGateResolver/HalosGateResolver.csproj -------------------------------------------------------------------------------- /SyscallResolvers/HalosGateResolver/Handler/CommandLineParser.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/HalosGateResolver/Handler/CommandLineParser.cs -------------------------------------------------------------------------------- /SyscallResolvers/HalosGateResolver/Handler/Execute.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/HalosGateResolver/Handler/Execute.cs -------------------------------------------------------------------------------- /SyscallResolvers/HalosGateResolver/Library/HalosGate.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/HalosGateResolver/Library/HalosGate.cs -------------------------------------------------------------------------------- /SyscallResolvers/HalosGateResolver/Library/Modules.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/HalosGateResolver/Library/Modules.cs -------------------------------------------------------------------------------- /SyscallResolvers/HalosGateResolver/Properties/AssemblyInfo.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/HalosGateResolver/Properties/AssemblyInfo.cs -------------------------------------------------------------------------------- /SyscallResolvers/HellsGateResolver/App.config: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/HellsGateResolver/App.config -------------------------------------------------------------------------------- /SyscallResolvers/HellsGateResolver/Handler/CommandLineParser.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/HellsGateResolver/Handler/CommandLineParser.cs -------------------------------------------------------------------------------- /SyscallResolvers/HellsGateResolver/Handler/Execute.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/HellsGateResolver/Handler/Execute.cs -------------------------------------------------------------------------------- /SyscallResolvers/HellsGateResolver/HellsGateResolver.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/HellsGateResolver/HellsGateResolver.cs -------------------------------------------------------------------------------- /SyscallResolvers/HellsGateResolver/HellsGateResolver.csproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/HellsGateResolver/HellsGateResolver.csproj -------------------------------------------------------------------------------- /SyscallResolvers/HellsGateResolver/Library/HellsGate.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/HellsGateResolver/Library/HellsGate.cs -------------------------------------------------------------------------------- /SyscallResolvers/HellsGateResolver/Library/Modules.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/HellsGateResolver/Library/Modules.cs -------------------------------------------------------------------------------- /SyscallResolvers/HellsGateResolver/Properties/AssemblyInfo.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/HellsGateResolver/Properties/AssemblyInfo.cs -------------------------------------------------------------------------------- /SyscallResolvers/InitialProcessResolver/App.config: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/InitialProcessResolver/App.config -------------------------------------------------------------------------------- /SyscallResolvers/InitialProcessResolver/Handler/CommandLineParser.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/InitialProcessResolver/Handler/CommandLineParser.cs -------------------------------------------------------------------------------- /SyscallResolvers/InitialProcessResolver/Handler/Execute.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/InitialProcessResolver/Handler/Execute.cs -------------------------------------------------------------------------------- /SyscallResolvers/InitialProcessResolver/InitialProcessResolver.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/InitialProcessResolver/InitialProcessResolver.cs -------------------------------------------------------------------------------- /SyscallResolvers/InitialProcessResolver/InitialProcessResolver.csproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/InitialProcessResolver/InitialProcessResolver.csproj -------------------------------------------------------------------------------- /SyscallResolvers/InitialProcessResolver/Interop/NativeMethods.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/InitialProcessResolver/Interop/NativeMethods.cs -------------------------------------------------------------------------------- /SyscallResolvers/InitialProcessResolver/Interop/Win32Consts.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/InitialProcessResolver/Interop/Win32Consts.cs -------------------------------------------------------------------------------- /SyscallResolvers/InitialProcessResolver/Interop/Win32Enums.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/InitialProcessResolver/Interop/Win32Enums.cs -------------------------------------------------------------------------------- /SyscallResolvers/InitialProcessResolver/Interop/Win32Structs.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/InitialProcessResolver/Interop/Win32Structs.cs -------------------------------------------------------------------------------- /SyscallResolvers/InitialProcessResolver/Library/Helpers.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/InitialProcessResolver/Library/Helpers.cs -------------------------------------------------------------------------------- /SyscallResolvers/InitialProcessResolver/Library/Modules.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/InitialProcessResolver/Library/Modules.cs -------------------------------------------------------------------------------- /SyscallResolvers/InitialProcessResolver/Library/Utilities.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/InitialProcessResolver/Library/Utilities.cs -------------------------------------------------------------------------------- /SyscallResolvers/InitialProcessResolver/Properties/AssemblyInfo.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/InitialProcessResolver/Properties/AssemblyInfo.cs -------------------------------------------------------------------------------- /SyscallResolvers/KnownDllsResolver/App.config: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/KnownDllsResolver/App.config -------------------------------------------------------------------------------- /SyscallResolvers/KnownDllsResolver/Handler/CommandLineParser.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/KnownDllsResolver/Handler/CommandLineParser.cs -------------------------------------------------------------------------------- /SyscallResolvers/KnownDllsResolver/Handler/Execute.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/KnownDllsResolver/Handler/Execute.cs -------------------------------------------------------------------------------- /SyscallResolvers/KnownDllsResolver/Interop/NativeMethods.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/KnownDllsResolver/Interop/NativeMethods.cs -------------------------------------------------------------------------------- /SyscallResolvers/KnownDllsResolver/Interop/Win32Consts.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/KnownDllsResolver/Interop/Win32Consts.cs -------------------------------------------------------------------------------- /SyscallResolvers/KnownDllsResolver/Interop/Win32Enums.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/KnownDllsResolver/Interop/Win32Enums.cs -------------------------------------------------------------------------------- /SyscallResolvers/KnownDllsResolver/Interop/Win32Structs.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/KnownDllsResolver/Interop/Win32Structs.cs -------------------------------------------------------------------------------- /SyscallResolvers/KnownDllsResolver/KnownDllsResolver.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/KnownDllsResolver/KnownDllsResolver.cs -------------------------------------------------------------------------------- /SyscallResolvers/KnownDllsResolver/KnownDllsResolver.csproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/KnownDllsResolver/KnownDllsResolver.csproj -------------------------------------------------------------------------------- /SyscallResolvers/KnownDllsResolver/Library/Modules.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/KnownDllsResolver/Library/Modules.cs -------------------------------------------------------------------------------- /SyscallResolvers/KnownDllsResolver/Library/Utilities.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/KnownDllsResolver/Library/Utilities.cs -------------------------------------------------------------------------------- /SyscallResolvers/KnownDllsResolver/Properties/AssemblyInfo.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/KnownDllsResolver/Properties/AssemblyInfo.cs -------------------------------------------------------------------------------- /SyscallResolvers/SyscallResolvers.sln: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/SyscallResolvers/SyscallResolvers.sln -------------------------------------------------------------------------------- /figures/getsyscallnumber.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/figures/getsyscallnumber.png -------------------------------------------------------------------------------- /figures/initialprocessresolver.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/figures/initialprocessresolver.png -------------------------------------------------------------------------------- /figures/syscallresolvers.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/daem0nc0re/AtomicSyscall/HEAD/figures/syscallresolvers.png --------------------------------------------------------------------------------