Rust Based Windows Kernel Rootkit
by Loki - Saturday August 3, 2024 at 05:43 PM
#21
this is very usefull
This forum account is currently banned. Ban Length: (Permanent)
Ban Reason: advertising his telegram in database section without MVP rank
Reply
#22
thank you for sharing, do you also unhook .dll when using ZwCreateThreadEx?
Reply
#23
Is it a code or a tool?
Reply
#24
(08-03-2024, 05:43 PM)Loki Wrote: Features
Process
  • Process (Hide / Unhide) ✅
  • Process Signature (PP / PPL) ✅
  • Process Protection (Anti-Kill / Dumping) ✅
  • Elevate Process to System ✅
  • Terminate Process ✅
  • Lists protected and hidden processes currently on the system ✅
Thread
  • Thread (Hide / Unhide) ✅
  • Thread Protection (Anti-Kill) ✅
  • Lists protected and hidden threads currently on the system ✅
Driver
  • Driver (Hide / Unhide) ✅
  • Enumerate Driver ✅
  • Driver Signature Enforcement (DSE)
  • DSE (Enable / Disable) ✅
  • Keylogger
  • Keylogger (Start / Stop) ✅
Callbacks
  • List / Remove / Restore Callbacks
  • PsSetCreateProcessNotifyRoutine ✅
  • PsSetCreateThreadNotifyRoutine ✅
  • PsSetLoadImageNotifyRoutine ✅
  • Module
  • Enumerate Module ✅
Registry
  • Registry Protection (Anti-Deletion e Overwriting) ✅
  • Injection Shellcode
  • Process Injection (ZwCreateThreadEx) ✅
  • APC Injection ✅



Omnicer
you're the goat, always new stuff to learn thank you
Reply
#25
Thanks for sharing
Reply
#26
Lets see pleaseeeeeeee
Reply
#27
rust is the goat when it comes to malware
Reply
#28
good work thanks
Reply
#29
Rust is king when it comes to malware....
This forum account is currently banned. Ban Length: (Permanent)
Ban Reason: Leeching | http://breached26tezcofqla4adzyn22notfqw...an-Appeals if you feel this is incorrect.
Reply
#30
(08-03-2024, 05:43 PM)Loki Wrote: Features
Process
  • Process (Hide / Unhide) ✅
  • Process Signature (PP / PPL) ✅
  • Process Protection (Anti-Kill / Dumping) ✅
  • Elevate Process to System ✅
  • Terminate Process ✅
  • Lists protected and hidden processes currently on the system ✅
Thread
  • Thread (Hide / Unhide) ✅
  • Thread Protection (Anti-Kill) ✅
  • Lists protected and hidden threads currently on the system ✅
Driver
  • Driver (Hide / Unhide) ✅
  • Enumerate Driver ✅
  • Driver Signature Enforcement (DSE)
  • DSE (Enable / Disable) ✅
  • Keylogger
  • Keylogger (Start / Stop) ✅
Callbacks
  • List / Remove / Restore Callbacks
  • PsSetCreateProcessNotifyRoutine ✅
  • PsSetCreateThreadNotifyRoutine ✅
  • PsSetLoadImageNotifyRoutine ✅
  • Module
  • Enumerate Module ✅
Registry
  • Registry Protection (Anti-Deletion e Overwriting) ✅
  • Injection Shellcode
  • Process Injection (ZwCreateThreadEx) ✅
  • APC Injection ✅



Omnicer
thx for the post
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  Rust Malware PDF builder (Open SRC) L_DWORD 90 13,215 Yesterday, 06:23 AM
Last Post: WTF69
  Go-based implementation of Cobalt Strike style BOF/COFF loaders Loki 9 1,417 07-28-2025, 07:02 AM
Last Post: toms
  Python Windows information stealer CyberSel 4 396 04-13-2025, 02:32 AM
Last Post: phobiax64
  PrivPy Windows Priv Escalation Python Script pwnengine 2 268 03-31-2025, 05:51 AM
Last Post: pwnengine
  Seeking Skilled C/Rust Developer & Go Backend Developer for Security-Focused Project 0xpff 0 216 03-26-2025, 05:55 PM
Last Post: 0xpff

Forum Jump:


 Users browsing this thread: 1 Guest(s)