Kudaes / rust_tips_and_tricks
Rust For Windows Cheatsheet
☆118Updated 5 months ago
Alternatives and similar repositories for rust_tips_and_tricks:
Users that are interested in rust_tips_and_tricks are comparing it to the libraries listed below
- DLL proxying for lazy people☆154Updated 4 months ago
- A Rust port of LayeredSyscall — performs indirect syscalls while generating legitimate API call stack frames by abusing VEH.☆141Updated 5 months ago
- Some Rust program I wrote while learning Malware Development☆131Updated 2 months ago
- NyxInvoke is a Rust CLI tool for running .NET assemblies, PowerShell, and BOFs with Patchless AMSI and ETW bypass features. with Dual-bui…☆206Updated 2 months ago
- Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…☆258Updated 7 months ago
- An example reference design for a proposed BOF PE☆158Updated last month
- Exploitation of process killer drivers☆199Updated last year
- Single stub direct and indirect syscalling with runtime SSN resolving for windows.☆211Updated 2 years ago
- 64-bit, position-independent implant template for Windows in Rust.☆121Updated 6 months ago
- Host CLR and run .NET binaries using Rust☆97Updated last week
- Reuse open handles to dynamically dump LSASS.☆242Updated last year
- a modified CONTEXT based ropchain to circumvent CFG-FindHiddenShellcode and EtwTi-FluctuationMonitor☆92Updated last year
- Mirage is a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.☆74Updated last month
- A set of programs for analyzing common vulnerabilities in COM☆210Updated 7 months ago
- Rusty Impersonate☆95Updated last year
- Shellcode loader designed for evasion. Coded in Rust.☆126Updated 2 years ago
- Early Bird APC Injection in Rust☆57Updated 6 months ago
- lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.☆109Updated 7 months ago
- Dynamically invoke arbitrary code with Rust tricks, #[no_std] support, and compatibility for x64, x86, ARM64 and WoW64 (DInvoke)☆60Updated 3 weeks ago
- Template-based generation of shellcode loaders☆77Updated 11 months ago
- Shellcode loader that executes embedded Lua from Rust.☆113Updated 4 months ago
- Call stack spoofing for Rust☆333Updated 2 months ago
- Activation Context Hijack☆152Updated 4 months ago
- Using fibers to run in-memory code.☆205Updated last year
- Cobalt Strike (CS) Beacon Object File (BOF) for kernel exploitation using AMD's Ryzen Master Driver (version 17).☆139Updated 2 years ago
- ☆102Updated 3 months ago
- Detect EDR's exceptions by inspecting processes' loaded modules☆129Updated last year
- IoctlHunter is a command-line tool designed to simplify the analysis of IOCTL calls made by userland software targeting Windows drivers.☆99Updated last year
- BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)☆171Updated 2 months ago
- Malware?☆69Updated 6 months ago