[NEW] JOIN OUR TELEGRAM
BUY CREDITS !!
Temporary Advertisements:
Ad
Ad
Ad
Rust Based Windows Kernel Rootkit
by Loki - Saturday August 3, 2024 at 05:43 PM
The God of Stories

Posts: 2,884
Threads: 65
Joined: Jun 2024
Reputation: 1,788

Active
#1
Aug 03, 2024, 05:43 PM
Features
Process
  • Process (Hide / Unhide) ✅
  • Process Signature (PP / PPL) ✅
  • Process Protection (Anti-Kill / Dumping) ✅
  • Elevate Process to System ✅
  • Terminate Process ✅
  • Lists protected and hidden processes currently on the system ✅
Thread
  • Thread (Hide / Unhide) ✅
  • Thread Protection (Anti-Kill) ✅
  • Lists protected and hidden threads currently on the system ✅
Driver
  • Driver (Hide / Unhide) ✅
  • Enumerate Driver ✅
  • Driver Signature Enforcement (DSE)
  • DSE (Enable / Disable) ✅
  • Keylogger
  • Keylogger (Start / Stop) ✅
Callbacks
  • List / Remove / Restore Callbacks
  • PsSetCreateProcessNotifyRoutine ✅
  • PsSetCreateThreadNotifyRoutine ✅
  • PsSetLoadImageNotifyRoutine ✅
  • Module
  • Enumerate Module ✅
Registry
  • Registry Protection (Anti-Deletion e Overwriting) ✅
  • Injection Shellcode
  • Process Injection (ZwCreateThreadEx) ✅
  • APC Injection ✅

Hidden Content
You must register or login to view this content.


Omnicer
Reply
Elite User

Posts: 149
Threads: 4
Joined: Sep 2023
Reputation: 0
#2
Aug 06, 2024, 04:30 PM
(Aug 03, 2024, 05:43 PM)Lokie Wrote: Features
Process
  • Process (Hide / Unhide) ✅
  • Process Signature (PP / PPL) ✅
  • Process Protection (Anti-Kill / Dumping) ✅
  • Elevate Process to System ✅
  • Terminate Process ✅
  • Lists protected and hidden processes currently on the system ✅
Thread
  • Thread (Hide / Unhide) ✅
  • Thread Protection (Anti-Kill) ✅
  • Lists protected and hidden threads currently on the system ✅
Driver
  • Driver (Hide / Unhide) ✅
  • Enumerate Driver ✅
  • Driver Signature Enforcement (DSE)
  • DSE (Enable / Disable) ✅
  • Keylogger
  • Keylogger (Start / Stop) ✅
Callbacks
  • List / Remove / Restore Callbacks
  • PsSetCreateProcessNotifyRoutine ✅
  • PsSetCreateThreadNotifyRoutine ✅
  • PsSetLoadImageNotifyRoutine ✅
  • Module
  • Enumerate Module ✅
Registry
  • Registry Protection (Anti-Deletion e Overwriting) ✅
  • Injection Shellcode
  • Process Injection (ZwCreateThreadEx) ✅
  • APC Injection ✅



Omnicer

better not be eagle Sad
Reply
Breached
Member
Posts: 3
Threads: 0
Joined: Apr 2024
Reputation: 0
#3
Aug 06, 2024, 04:48 PM
Mmm rust good, harder 2 detect
Reply
Breached
Member
Posts: 21
Threads: 0
Joined: Aug 2024
Reputation: 0
#4
Aug 08, 2024, 09:32 PM (This post was last modified: Aug 08, 2024, 09:34 PM by evil_quiddity_1.)
Using Windows' own bootloader to bypass Secure Boot
damn , i am early, lets learn something new
Reply
Breached
Member
Posts: 23
Threads: 2
Joined: Aug 2024
Reputation: 0
#5
Aug 11, 2024, 10:37 PM
this seems interesting
Reply
Breached
Member
Posts: 7
Threads: 0
Joined: Aug 2024
Reputation: 0
#6
Aug 11, 2024, 11:00 PM (This post was last modified: Aug 11, 2024, 11:09 PM by deepnet.)
Rust is king when it comes to malware....

I'm seeing a crate for shadow-rs as well so this would be pretty cool to have installed by accident thinking they were using the original crate.

Looks cool though, a work in progress
Reply
Breached
Member
Posts: 16
Threads: 0
Joined: Jul 2024
Reputation: 0
#7
Aug 12, 2024, 01:41 AM
(Aug 03, 2024, 05:43 PM)Lokie Wrote: Features
Process
  • Process (Hide / Unhide) ✅
  • Process Signature (PP / PPL) ✅
  • Process Protection (Anti-Kill / Dumping) ✅
  • Elevate Process to System ✅
  • Terminate Process ✅
  • Lists protected and hidden processes currently on the system ✅
Thread
  • Thread (Hide / Unhide) ✅
  • Thread Protection (Anti-Kill) ✅
  • Lists protected and hidden threads currently on the system ✅
Driver
  • Driver (Hide / Unhide) ✅
  • Enumerate Driver ✅
  • Driver Signature Enforcement (DSE)
  • DSE (Enable / Disable) ✅
  • Keylogger
  • Keylogger (Start / Stop) ✅
Callbacks
  • List / Remove / Restore Callbacks
  • PsSetCreateProcessNotifyRoutine ✅
  • PsSetCreateThreadNotifyRoutine ✅
  • PsSetLoadImageNotifyRoutine ✅
  • Module
  • Enumerate Module ✅
Registry
  • Registry Protection (Anti-Deletion e Overwriting) ✅
  • Injection Shellcode
  • Process Injection (ZwCreateThreadEx) ✅
  • APC Injection ✅



Omnicer
Bya to pizdec potimu nelnya prosto vilozit
Reply
MVP User
MVP
Posts: 10
Threads: 1
Joined: Aug 2024
Reputation: 20

MVP
#8
Aug 12, 2024, 03:43 AM
This looks cool (recently been teaching myself rust), thank you for sharing <3
Reply
Elite User

Posts: 205
Threads: 5
Joined: Aug 2024
Reputation: 0
#9
Aug 12, 2024, 05:21 AM
This looks like it will be really good cuz I need to learn more languages. Thanks a ton
Reply
Breached
Member
Posts: 4
Threads: 0
Joined: Aug 2024
Reputation: 0
#10
Aug 16, 2024, 05:23 PM
Rust is king when it comes to malware....
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  Discord token logger base (python) 3fr0g 3 1,179 Yesterday, 11:03 PM
Last Post: kidokido
  [ LIST ] 5 FREE STEALERS WITH PROS/CONS elix 427 24,778 Yesterday, 04:19 PM
Last Post: MiaoRancio
  Xordium stealer for Pulsar v2.4.5 nullvex 45 4,769 Yesterday, 02:53 PM
Last Post: JohnnyBlack
  Python Chrome Data Stealer (url, username/email, password, etc) Discord Webhook mooning 153 16,530 Sep 09, 2026, 05:15 PM
Last Post: gzegzegzgezeg5353
  Malware Development MD MZ E Book Mandala 62 5,487 Sep 08, 2026, 07:06 AM
Last Post: kainik

Forum Jump:


 Users browsing this forum: