Inject a shellcode in a remote process using Process Hollowing.
☆54Sep 18, 2021Updated 4 years ago
Alternatives and similar repositories for RustHollow
Users that are interested in RustHollow are comparing it to the libraries listed below
Sorting:
- Repository for dirty scripts and PoCs☆20Feb 18, 2025Updated last year
- improved shellcode template for b1tg/rust-windows-shellcode☆29May 12, 2021Updated 4 years ago
- Dynamically invoke arbitrary unmanaged code☆359Feb 19, 2026Updated last week
- Hide memory artifacts using ROP and hardware breakpoints.☆146Oct 20, 2023Updated 2 years ago
- Reuse open handles to dynamically dump LSASS.☆246Apr 4, 2024Updated last year
- A Rust port of LayeredSyscall — performs indirect syscalls while generating legitimate API call stack frames by abusing VEH.☆161Oct 31, 2024Updated last year
- Just another casual shellcode native loader☆25Feb 3, 2022Updated 4 years ago
- ☆17Sep 25, 2024Updated last year
- EDR Detector that can find what kind of endpoint solution is being used according to drivers in the system.☆94Nov 5, 2021Updated 4 years ago
- Reflective DLL self-loading as a library☆21May 3, 2025Updated 9 months ago
- Experiments on the Windows Internals☆31Sep 22, 2019Updated 6 years ago
- Using fibers to run in-memory code.☆242Oct 19, 2023Updated 2 years ago
- Shellcode loader designed for evasion. Coded in Rust.☆134Mar 5, 2023Updated 2 years ago
- Windows shellcode development in Rust☆305Feb 6, 2021Updated 5 years ago
- A remote process injection using process snapshotting based on https://gitlab.com/ORCA000/snaploader , in rust. It creates a sacrificial …☆50Jan 25, 2025Updated last year
- Shellcode runner in Rust☆34Oct 30, 2020Updated 5 years ago
- Donut generator in rust.☆28Feb 17, 2022Updated 4 years ago
- Call stack spoofing for Rust☆356Feb 7, 2025Updated last year
- Rusty Injection - Shellcode Reflective DLL Injection (sRDI) in Rust (Codename: Venom)☆360Mar 2, 2024Updated last year
- Collection of Cheat dumps for Research and Detection.☆16Jan 4, 2026Updated last month
- Spawns a process from a process. Can sometimes be used to run a session > 0 process from session 0.☆20Jul 8, 2022Updated 3 years ago
- 64-bit, position-independent implant template for Windows in Rust.☆173Nov 28, 2025Updated 3 months ago
- Curated list of projects, articles and more related to Offensive Security and Red Teaming. Completely written in Rust.☆114Jun 12, 2025Updated 8 months ago
- A Rust-based dropper for shellcode payloads.☆72Mar 21, 2025Updated 11 months ago
- Cobalt Strike Beacon Object Files (BOFs) written in rust with rust core and alloc.☆282Feb 8, 2024Updated 2 years ago
- Persistence techniques for windows.☆19Jun 26, 2023Updated 2 years ago
- Detect EDR's exceptions by inspecting processes' loaded modules☆130Mar 15, 2024Updated last year
- RedLizard Rust TCP Reverse Shell Server/Client☆138Dec 9, 2023Updated 2 years ago
- EarlyBird process hollowing technique (BOF) - Spawns a process in a suspended state, inject shellcode, hijack main thread with APC, and e…☆291Mar 8, 2023Updated 2 years ago
- Patch AMSI and ETW in remote process via direct syscall☆84Apr 28, 2022Updated 3 years ago
- Rust template/library for implementing your own COFF loader☆72Jan 27, 2025Updated last year
- An insecurely implemented and installed Windows service for emulating elevation of privileges vulnerabilities☆63Aug 25, 2022Updated 3 years ago
- ☆59Jun 8, 2022Updated 3 years ago
- Black cat magic ฅ(^・ω・^ฅ ✿)☆55Sep 28, 2022Updated 3 years ago
- Find kernel32 base and API addresses. Simple C++ implementation☆23Apr 7, 2022Updated 3 years ago
- Rusty Rootkit - Windows Kernel Rookit in Rust (Codename: Eagle)☆575Jun 5, 2023Updated 2 years ago
- .NET 2.0 CLR project to retrieve saved browser credentials from Google Chrome, Mozilla Firefox and Microsoft Internet Explorer/Edge.☆22Aug 13, 2018Updated 7 years ago
- One gate to all syscalls!☆23Mar 12, 2022Updated 3 years ago
- remote process injections using pool party techniques☆70Jun 29, 2025Updated 8 months ago