Rusty Bootkit - Windows UEFI Bootkit in Rust (Codename: RedLotus)
☆583May 14, 2026Updated 5 months ago
Alternatives and similar repositories for redlotus-rs
Users that are interested in redlotus-rs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Rusty Rootkit - Windows Kernel Rookit in Rust (Codename: Eagle)☆577Jun 5, 2023Updated 3 years ago
- Rusty Hypervisor - Windows Kernel Blue Pill Type-2 Hypervisor in Rust (Codename: Matrix)☆360May 14, 2026Updated 5 months ago
- Rusty Hypervisor - Windows UEFI Blue Pill Type-1 Hypervisor in Rust (Codename: Illusion)☆415May 14, 2026Updated 5 months ago
- BlackLotus UEFI Windows Bootkit☆2,257Mar 28, 2024Updated 2 years ago
- Experimental Windows x64 Kernel Rootkit with anti-rootkit evasion features.☆615Aug 2, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- UEFI bootkit for driver manual mapping☆608Jan 1, 2024Updated 2 years ago
- Black Angel is a Windows 11/10 x64 kernel mode rootkit. Rootkit can be loaded with enabled DSE while maintaining its full functionality.☆679Nov 9, 2023Updated 2 years ago
- Rusty Injection - Shellcode Reflective DLL Injection (sRDI) in Rust (Codename: Venom)☆369Mar 2, 2024Updated 2 years ago
- x64 binary obfuscator☆2,003Jul 14, 2023Updated 3 years ago
- Now You See Me, Now You Don't☆1,076May 22, 2026Updated 5 months ago
- Threadless Process Injection through entry point hijacking☆353Sep 10, 2024Updated 2 years ago
- PoC Implementation of a fully dynamic call stack spoofer☆1,015Jul 20, 2024Updated 2 years ago
- A small bootkit which does not rely on x64 assembly.☆529Aug 29, 2019Updated 7 years ago
- A memory-based evasion technique which makes shellcode invisible from process start to end.☆1,202Oct 16, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Call stack spoofing for Rust☆389Feb 7, 2025Updated last year
- Windows rootkit for Intel x64 with 25+ features, demonstrating rootkit techniques compatible with all Windows 10 and Windows 11 versions.☆2,548Sep 26, 2026Updated last month
- Jormungandr is a kernel implementation of a COFF loader, allowing kernel developers to load and execute their COFFs in the kernel.☆242Sep 26, 2023Updated 3 years ago
- Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST☆714Aug 18, 2023Updated 3 years ago
- PE (and elf now!) bin2bin obfuscator☆861Oct 11, 2025Updated last year
- Signtool for expired certificates☆523Jun 10, 2023Updated 3 years ago
- ROP-based sleep obfuscation to evade memory scanners☆390Jun 22, 2025Updated last year
- Windows Kernel Rootkit in Rust☆713Oct 10, 2025Updated last year
- Dont Call Me Back - Dynamic kernel callback resolver. Scan kernel callbacks in your system in a matter of seconds!☆261Jul 9, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- HyperDeceit is the ultimate all-in-one library that emulates Hyper-V for Windows, giving you the ability to intercept and manipulate oper…☆387Jun 3, 2023Updated 3 years ago
- Using fibers to run in-memory code.☆248Oct 19, 2023Updated 3 years ago
- HWSyscalls is a new method to execute indirect syscalls using HWBP, HalosGate and a synthetic trampoline on kernel32 with HWBP.☆733Jul 19, 2023Updated 3 years ago
- Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.☆948Mar 29, 2022Updated 4 years ago
- A modern 32/64-bit position independent implant template☆1,377Jun 1, 2026Updated 5 months ago
- LLVM plugin to transparently apply stack spoofing and indirect syscalls to Windows x64 native calls at compile time.☆329Jan 17, 2024Updated 2 years ago
- Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird …☆816Jan 26, 2026Updated 9 months ago
- Bootkit for Windows Sandbox to disable DSE/PatchGuard.☆353Oct 13, 2024Updated 2 years ago
- A rust library that allows you to host the CLR and execute dotnet binaries.☆235Mar 12, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- This novel way of using NtQueueApcThreadEx by abusing the ApcRoutine and SystemArgument[0-3] parameters by passing a random pop r32; ret …☆268Apr 29, 2023Updated 3 years ago
- Performing Indirect Clean Syscalls☆633May 2, 2026Updated 6 months ago
- Win32 and Kernel abusing techniques for pentesters☆984Sep 3, 2023Updated 3 years ago
- Use hardware breakpoints to spoof the call stack for both syscalls and API calls☆205Jun 6, 2024Updated 2 years ago
- yet another sleep encryption thing. also used the default github repo name for this one.☆67May 11, 2023Updated 3 years ago
- Updated version of System Management Mode backdoor for UEFI based platforms: old dog, new tricks☆378Nov 3, 2023Updated 3 years ago
- CobaltStrike beacon in rust☆210Aug 10, 2024Updated 2 years ago