Source generator to add D/Invoke and indirect syscall methods to a C# project.

A game-changer for C# developers, CsWhispers is a source generator that effortlessly integrates D/Invoke and indirect syscall methods into your projects.

This article provides a quick start guide, demonstrates its powerful features, and explores the potential for extending its capabilities.

Join us on a journey to enhance your C# coding experience with CsWhispers.

Quick Start

Add the latest NuGet package to your project and allow unsafe code.

<Project Sdk="Microsoft.NET.Sdk">


    <!-- CsWhispers package -->
      <PackageReference Include="CsWhispers" Version="0.0.2" />

    <!-- Allow unsafe code -->
    <PropertyGroup Condition=" '$(Configuration)' == 'Debug' ">

    <PropertyGroup Condition=" '$(Configuration)' == 'Release' ">


Create a file in your project called CsWhispers.txt and set its build action properties to AdditionalFiles.

  <None Remove="CsWhispers.txt" />
  <AdditionalFiles Include="CsWhispers.txt" />

Add each NT API and any supporting structs/enums that you want to be included in your project. Each must be on its own line, for example:




See The Project Wiki For A Full List Of Supported APIs.

Global namespaces are automatically added to allow for clean code.

public static unsafe void Main()
    // use self as example
    using var self = Process.GetCurrentProcess();
    HANDLE hProcess;
    CLIENT_ID cid = new()
        UniqueProcess = new HANDLE((IntPtr)self.Id)

    var status = NtOpenProcess(

    Console.WriteLine("Status: {0}", status.SeverityCode);
    Console.WriteLine("HANDLE: 0x{0:X}", hProcess.Value.ToInt64());


CsWhispers includes a minimalised version of D/Invoke, so you may also call Generic.GetLibraryAddressGeneric.DynamicFunctionInvoke, etc.


All of the generated code goes into a partial CsWhispers.Syscalls class, which you can extend to add your own APIs. For example, create MyAPIs.cs and add:

namespace CsWhispers;

public static partial class Syscalls
    public static NTSTATUS NtCreateThreadEx()
        // whatever
        return new NTSTATUS(0);

This can then be called in your main code without having to add any additional using statements.

namespace ConsoleApp1;

internal static class Program
    public static void Main()
        var status = NtCreateThreadEx();

Published by Tamil S

Tamil has a great interest in the fields of Cyber Security, OSINT, and CTF projects. Currently, he is deeply involved in researching and publishing various security tools with Kali Linux Tutorials, which is quite fascinating.

Leave a comment

Your email address will not be published. Required fields are marked *