safedv / Rustic64
64-bit, position-independent implant template for Windows in Rust.
☆121Updated 6 months ago
Alternatives and similar repositories for Rustic64:
Users that are interested in Rustic64 are comparing it to the libraries listed below
- A Rust port of LayeredSyscall — performs indirect syscalls while generating legitimate API call stack frames by abusing VEH.☆141Updated 5 months ago
- Mirage is a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.☆76Updated last month
- BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)☆173Updated 2 months ago
- NyxInvoke is a Rust CLI tool for running .NET assemblies, PowerShell, and BOFs with Patchless AMSI and ETW bypass features. with Dual-bui…☆206Updated 2 months ago
- BOF with Synthetic Stackframe☆143Updated last month
- ☆127Updated 7 months ago
- ☆103Updated 3 months ago
- Shellcode loader that executes embedded Lua from Rust.☆113Updated 4 months ago
- Port of Cobalt Strike's Process Inject Kit☆172Updated 4 months ago
- A collection of position independent coding resources☆68Updated 2 months ago
- A Mythic Agent written in PIC C.☆186Updated 2 months ago
- An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution☆186Updated 4 months ago
- ☆114Updated last month
- ForsHops☆98Updated 3 weeks ago
- ☆154Updated 4 months ago
- A Mythic agent for Windows written in C☆117Updated this week
- A 64-bit, position-independent code reverse TCP shell for Windows — built in Rust.☆63Updated 3 months ago
- Robust Cobalt Strike shellcode loader with multiple advanced evasion features☆56Updated this week
- Early Bird Cryo Injections – APC-based DLL & Shellcode Injection via Pre-Frozen Job Objects☆89Updated 2 weeks ago
- DLL proxying for lazy people☆154Updated 4 months ago
- Early Bird APC Injection in Rust☆57Updated 6 months ago
- ☆61Updated 10 months ago
- Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…☆258Updated 7 months ago
- A BOF to enumerate system process, their protection levels, and more.☆116Updated 4 months ago
- Construct the payload at runtime using an array of offsets☆63Updated 10 months ago
- An example reference design for a proposed BOF PE☆159Updated this week
- ☆108Updated 2 months ago
- Malware?☆69Updated 6 months ago
- ☆121Updated last year
- Some Rust program I wrote while learning Malware Development☆131Updated 2 months ago