rasta-mouse/CsWhispers

Your Windows syscall hooking factory - feat Canterlot's Gate - All accessible over MCP

AV/EDR evasion via direct and indirect system calls Windows NT 3.1 through Windows 11 24H2 · x64 · x86 · WoW64 · ARM64

A source generator to add a user-defined set of Win32 P/Invoke methods and supporting types to a C# project.

Advanced OPSEC fork of Donut. Features a Custom in-memory CLR Host, Tail-Jump ETW bypasses, and zero-patch AMSI evasion for stealthy shellcode generation.

Automated proxy DLL generator for DLL hijacking

C# language projection for the Windows Runtime

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

Hide your P/Invoke signatures through other people's signed assemblies

Generate DLL proxy/sideload projects. Automatically parses PE export tables and generates ready-to-compile project for red team engagements.