TLDR InfoSec · LAUNCHES & TOOLS

NULLGATE

github.comGitHub repository

Summary from the TLDR InfoSec newsletter

NullGate provides a modern approach to using NTAPI functions via indirect syscalls and the FreshyCalls method for dynamic syscall number retrieval. It includes a novel technique to bypass Windows Defender's memory scanning and features a classic PoC process injector.