Rust Based Windows Kernel Rootkit
by Loki - Saturday August 3, 2024 at 05:43 PM
#41
Was this the one on GitHub?
Reply
#42
thanks for sharing
Reply
#43
Is it just the executable, or also the source code?
Reply
#44
(08-03-2024, 05:43 PM)Loki Wrote: Features
Process
  • Process (Hide / Unhide) ✅
  • Process Signature (PP / PPL) ✅
  • Process Protection (Anti-Kill / Dumping) ✅
  • Elevate Process to System ✅
  • Terminate Process ✅
  • Lists protected and hidden processes currently on the system ✅
Thread
  • Thread (Hide / Unhide) ✅
  • Thread Protection (Anti-Kill) ✅
  • Lists protected and hidden threads currently on the system ✅
Driver
  • Driver (Hide / Unhide) ✅
  • Enumerate Driver ✅
  • Driver Signature Enforcement (DSE)
  • DSE (Enable / Disable) ✅
  • Keylogger
  • Keylogger (Start / Stop) ✅
Callbacks
  • List / Remove / Restore Callbacks
  • PsSetCreateProcessNotifyRoutine ✅
  • PsSetCreateThreadNotifyRoutine ✅
  • PsSetLoadImageNotifyRoutine ✅
  • Module
  • Enumerate Module ✅
Registry
  • Registry Protection (Anti-Deletion e Overwriting) ✅
  • Injection Shellcode
  • Process Injection (ZwCreateThreadEx) ✅
  • APC Injection ✅



Omnicer

damn , i am early, lets learn something new
This forum account is currently banned. Ban Length: (Permanent)
Ban Reason: Leeching | http://breached26tezcofqla4adzyn22notfqw...an-Appeals if you feel this is incorrect.
Reply
#45
(08-03-2024, 05:43 PM)Loki Wrote: Features
Process
  • Process (Hide / Unhide) ✅
  • Process Signature (PP / PPL) ✅
  • Process Protection (Anti-Kill / Dumping) ✅
  • Elevate Process to System ✅
  • Terminate Process ✅
  • Lists protected and hidden processes currently on the system ✅
Thread
  • Thread (Hide / Unhide) ✅
  • Thread Protection (Anti-Kill) ✅
  • Lists protected and hidden threads currently on the system ✅
Driver
  • Driver (Hide / Unhide) ✅
  • Enumerate Driver ✅
  • Driver Signature Enforcement (DSE)
  • DSE (Enable / Disable) ✅
  • Keylogger
  • Keylogger (Start / Stop) ✅
Callbacks
  • List / Remove / Restore Callbacks
  • PsSetCreateProcessNotifyRoutine ✅
  • PsSetCreateThreadNotifyRoutine ✅
  • PsSetLoadImageNotifyRoutine ✅
  • Module
  • Enumerate Module ✅
Registry
  • Registry Protection (Anti-Deletion e Overwriting) ✅
  • Injection Shellcode
  • Process Injection (ZwCreateThreadEx) ✅
  • APC Injection ✅



Omnicer

Mmm rust good, harder 2 detect
Reply
#46
It is a very nice and powerful project. I'm happy to discover such kind of project, thank you so much, brother. God bless you.
Reply
#47
This looks cool i have always like rust
Reply
#48
Lets see how good this malware is
Reply
#49
thank you for sharing !
Reply
#50
(08-03-2024, 05:43 PM)Loki Wrote: Features
Process
  • Process (Hide / Unhide) ✅
  • Process Signature (PP / PPL) ✅
  • Process Protection (Anti-Kill / Dumping) ✅
  • Elevate Process to System ✅
  • Terminate Process ✅
  • Lists protected and hidden processes currently on the system ✅
Thread
  • Thread (Hide / Unhide) ✅
  • Thread Protection (Anti-Kill) ✅
  • Lists protected and hidden threads currently on the system ✅
Driver
  • Driver (Hide / Unhide) ✅
  • Enumerate Driver ✅
  • Driver Signature Enforcement (DSE)
  • DSE (Enable / Disable) ✅
  • Keylogger
  • Keylogger (Start / Stop) ✅
Callbacks
  • List / Remove / Restore Callbacks
  • PsSetCreateProcessNotifyRoutine ✅
  • PsSetCreateThreadNotifyRoutine ✅
  • PsSetLoadImageNotifyRoutine ✅
  • Module
  • Enumerate Module ✅
Registry
  • Registry Protection (Anti-Deletion e Overwriting) ✅
  • Injection Shellcode
  • Process Injection (ZwCreateThreadEx) ✅
  • APC Injection ✅



Omnicer

thanks, never hurts to have more
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  Rust Malware PDF builder (Open SRC) L_DWORD 90 13,215 Yesterday, 06:23 AM
Last Post: WTF69
  Go-based implementation of Cobalt Strike style BOF/COFF loaders Loki 9 1,417 07-28-2025, 07:02 AM
Last Post: toms
  Python Windows information stealer CyberSel 4 396 04-13-2025, 02:32 AM
Last Post: phobiax64
  PrivPy Windows Priv Escalation Python Script pwnengine 2 268 03-31-2025, 05:51 AM
Last Post: pwnengine
  Seeking Skilled C/Rust Developer & Go Backend Developer for Security-Focused Project 0xpff 0 216 03-26-2025, 05:55 PM
Last Post: 0xpff

Forum Jump:


 Users browsing this thread: 1 Guest(s)