← All tools

RingReaper

https://github.com/MatheuZSecurity/RingReaper

Open Source

Categories

Evasion Post-Exploitation

Description

Linux post-exploitation agent that uses io_uring to stealthily bypass EDR detection by avoiding traditional syscalls.

Keywords

c2 evasion iouring malware poc rootkit c

Example Usage

sudo apt install liburing-dev -y
gcc agent.c -o agent -luring -O2 -s -static