← All tools

RingReaper

https://github.com/MatheuZSecurity/RingReaper

Open Source

Categories

Evasion Post-Exploitation

Description

Linux post-exploitation agent that uses io_uring to stealthily bypass EDR detection by avoiding traditional syscalls.

Keywords

c2 evasion iouring malware poc rootkit c

Example Usage

sudo apt install liburing-dev -y
gcc agent.c -o agent -luring -O2 -s -static

See also

Advanced tunneling/pivoting tool that creates a VPN-like tunnel from the agent to the operator witho…

Privilege Escalation Awesome Scripts Suite. Automatically enumerates Windows (WinPEAS) and Linux/Mac…

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)…

Payload creation framework focused on EDR bypass. Creates loaders using a variety of techniques incl…

Adversary simulation and Red teaming platform with AI…

Curated list of Unix binaries that can be used to bypass local security restrictions. Shows how to a…