From 19e40db1e58b04d80e3180550d11bdf9a4acc6d7 Mon Sep 17 00:00:00 2001 From: Thijn <113618658+tdeerenberg@users.noreply.github.com> Date: Thu, 10 Apr 2025 15:21:40 +0200 Subject: [PATCH] Update README.md --- README.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/README.md b/README.md index 5223b9a..64c396f 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,9 @@ # InlineWhispers3 InlineWhispers3 is an updated version of [InlineWhispers2](https://github.com/Sh0ckFR/InlineWhispers2), designed to work with Indirect System Calls in Cobalt Strike's Beacon Object Files (BOFs) using [SysWhispers3](https://github.com/klezVirus/SysWhispers3). This tool helps changing SysWhispers3 generated files to be BOF compatible. +### Why InlineWhispers3? +The reason for developing InlineWhispers3 (an updated version of InlineWhispers/InlineWhispers2) is to leverage the advanced features of SysWhispers3, such as indirect syscalls, in red teaming with Beacon Object Files. InlineWhispers2 often gets detected due to its use of direct system calls by certain EDR systems. Indirect system calls provide a more sophisticated method for executing system calls on Windows, significantly enhancing EDR evasion. + ## How to set this up and run this?