VoidSecSoftwares/voidsyscall

Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.

SecurityGo#c2#edr-evasion#golang#red-team#syscall

0.2 Steady Magnitude out of 10. Star growth looks organic. Data as of September 18, 2026.

Open on Seismograph Open on GitHub

About the project

Go-based implant and C2 framework for red teams: all operations go through direct/indirect syscalls (Windows) and raw syscalls (Linux), with no WinAPI, plus HTTPS/DNS/ICMP channels and AES-256-GCM. Includes injection, EDR evasion, token/VAD/registry operations and memory encryption.

Useful for

Test an EDR agent's resilience to direct Nt* syscalls without WinAPI
Build a custom C2 channel over DNS or ICMP for a lab environment
Practice injection techniques (section mapping, hollowing, APC, stomping) in an isolated setup

README summarized by DeepSeek V4.1 Flash. Details may be inaccurate.

Why it’s trending

The repository is 8 days old and already has 55 stars.

Stars per day

Bars are daily stars, the line is the usual pace. Red marks spike days.

Numbers

Total stars: 55
Stars in a day: 0
Forks: 6
Issues and pull requests: 0
Watchers: 0
Language: Go
License: MIT
Latest release: v1.1.0 · September 11, 2026
Created: September 10, 2026
Last push: September 11, 2026

Star trust

Growth looks organic: forks and discussion are in line with active projects, and stars arrive unevenly, the way people give them.

These are heuristics, not a verdict: we judge by the repository’s behavior, not by a list of stargazers.

Spotted in

September 16, 2026Top new repositories this week: #182
September 15, 2026Top new repositories this week: #179

README badge

Paste it into your README — the badge shows the current magnitude and links to this page.

[![Seismograph](https://gitnova.dev/badge/VoidSecSoftwares/voidsyscall.svg?lang=en)](https://gitnova.dev/en/r/VoidSecSoftwares/voidsyscall)

Similar projects

9.7
cloudflare/security-audit-skill
A coding-agent skill that turns the agent into a security auditor, running a multi-phase code audit with independently verified, machine-readable findings.

BreakoutSecurityJavaScript+2,407 stars in a day
6.6
yynxxxxx/gpt_sub_analysis
A guide to analyzing the ChatGPT iOS subscription flow: it describes intercepting the buyProduct request via Reqable and SSL Kill Switch 3 and rewriting the offerName and salableAdamId fields to obtain the Pro 20x…

Early signalSecurity+137 stars in a day
5.8
ctdal/cve-2026-41940-PoC
PoC exploit for CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0) that grants unauthenticated root-level WHM access by injecting CRLF sequences into server-side session files.

Early signalSecurityPython+49 stars in a day
5.3
BennyThink/NFCX
Cross-platform GUI desktop app for NFC card work: reader discovery, MIFARE Classic reads, dumps, key management, and key recovery. For cards you own or are authorized to test.

Early signalSecurityGo+30 stars in a day
4.9
NationalSecurityAgency/ghidra
A software reverse engineering framework from the NSA: disassembly, decompilation, graphing and scripting for analyzing compiled code on Windows, macOS and Linux.

BreakoutSecurityJava+246 stars in a day
4.6
shinthink/blitzstrike
A TypeScript/Bun MCP server packaging a pentest methodology into three tiers: attack-surface reconnaissance, source-to-sink tracing, and live validation of findings before reporting.

Early signalSecurityTypeScript+20 stars in a day