SISTA

2026-07-18 09:30:00 +01:00
parent ed8b189aa9
commit cc60a24d98
1 changed files with 4 additions and 2 deletions
@@ -1,5 +1,5 @@
 <p align="center">
-  <img src="assets/SISTA.png" alt="SISTA" width="600">
+  <img src="assets/SISTA.png" alt="SISTA">
 </p>

 # Valak
@@ -8,11 +8,13 @@ Zig DLL for Sliver implants. ChaCha20 encrypted sleep via indirect syscalls with

 For initial delivery use [Kage](https://github.com/Yenn503/Kage), minimal syscall-based shellcode loader.

+ngl this is just for fun, im still running through the ziglings course etc trying to understand its syntax better alongside. Deepseek helped with these and based kage on my old c injector to see the differences. 
+
 ## Why Zig over C

 No CRT. C programs pull in the C Runtime Library which adds DLL imports to your IAT. Zig just calls the OS. Smaller binary, less for AV to see.

-Detection engines mostly know C, C++, Rust, Go. Zig flies under the radar. Lower VirusTotal scores.
+Detection engines mostly know C, C++, Rust, Go.

 Ghidra struggles with Zig binaries (open bug). IDA doesn't properly support it either. Makes reverse engineering harder.