Syscalls

ICMP-Ghost v3.6.2: Fileless C2 with Dual-Channel Pivoting & DPI Evasion

Ghost-C2 v3.6.2 introduces Dual-Channel Protocol Pivoting via an in-memory VTable architecture — seamlessly switching between Raw ICMP and DNS UDP tunneling at runtime. Combined with PIC injection, VESQER compression, and layered evasion, it defeats Suricata v8.0.3. All in pure x64 Assembly.

Defying Python: Building a Bare-Metal HTTP Server in x86_64 Assembly

Throw away python -m http.server. Discover how to build a bare-metal web server from scratch using x64 Assembly, featuring zero-copy file transfers and manual IP parsing.

memfd_create: Anonymous RAM Files and Volatile Storage in x64 Assembly

Traditional disk storage leaves traces. memfd_create enables anonymous, volatile files that reside exclusively in RAM. Learn to implement this in x64 Assembly for low-footprint operations.

Linux x64 Assembly: Syscalls, Registers, and the .bss Segment

Go behind the scenes of the Linux Kernel. Learn the register protocol for syscalls and why the .bss segment is essential for efficient, zero-disk memory reservation.

Building a Low-Level ICMP Sniffer in x64 Assembly (Raw Sockets)

Scapy or C are easy, but true control lies in the CPU cycles. Learn how to build a raw socket sniffer from scratch in x64 Assembly, bypassing libc for pure kernel interaction.