Rust Based Windows Kernel Rootkit
by Loki - Saturday August 3, 2024 at 05:43 PM
Banned

Posts: 34
Threads: 11
Joined: Jul 2024
Reputation: 0

#21
08-30-2024, 12:57 AM
this is very usefull
Ban reason: advertising his telegram in database section without MVP rank (Permanent)
Reply
RaidForums
Member
Posts: 12
Threads: 1
Joined: Jun 2024
Reputation: 0

#22
08-30-2024, 06:46 AM
thank you for sharing, do you also unhook .dll when using ZwCreateThreadEx?
Reply
RaidForums
Member
Posts: 14
Threads: 0
Joined: Aug 2024
Reputation: 0

#23
08-30-2024, 08:52 AM
Is it a code or a tool?
Reply
RaidForums
Member
Posts: 7
Threads: 0
Joined: Aug 2024
Reputation: 0

#24
09-01-2024, 07:24 AM
(08-03-2024, 05:43 PM)Loki Wrote: Features
Process
  • Process (Hide / Unhide) ✅
  • Process Signature (PP / PPL) ✅
  • Process Protection (Anti-Kill / Dumping) ✅
  • Elevate Process to System ✅
  • Terminate Process ✅
  • Lists protected and hidden processes currently on the system ✅
Thread
  • Thread (Hide / Unhide) ✅
  • Thread Protection (Anti-Kill) ✅
  • Lists protected and hidden threads currently on the system ✅
Driver
  • Driver (Hide / Unhide) ✅
  • Enumerate Driver ✅
  • Driver Signature Enforcement (DSE)
  • DSE (Enable / Disable) ✅
  • Keylogger
  • Keylogger (Start / Stop) ✅
Callbacks
  • List / Remove / Restore Callbacks
  • PsSetCreateProcessNotifyRoutine ✅
  • PsSetCreateThreadNotifyRoutine ✅
  • PsSetLoadImageNotifyRoutine ✅
  • Module
  • Enumerate Module ✅
Registry
  • Registry Protection (Anti-Deletion e Overwriting) ✅
  • Injection Shellcode
  • Process Injection (ZwCreateThreadEx) ✅
  • APC Injection ✅



Omnicer
you're the goat, always new stuff to learn thank you
Reply
RaidForums
Member
Posts: 23
Threads: 0
Joined: Aug 2023
Reputation: 0

#25
09-01-2024, 08:14 AM
Thanks for sharing
Reply
RaidForums
Member
Posts: 1
Threads: 0
Joined: Sep 2024
Reputation: 0

#26
09-04-2024, 02:20 PM
Lets see pleaseeeeeeee
Reply
RaidForums
Member
Posts: 6
Threads: 0
Joined: Aug 2024
Reputation: 0

#27
09-05-2024, 09:54 PM
rust is the goat when it comes to malware
Reply
RaidForums
Member
Posts: 17
Threads: 1
Joined: Jul 2023
Reputation: 0

#28
09-06-2024, 01:57 PM
good work thanks
Reply
Banned

Posts: 25
Threads: 0
Joined: Aug 2024
Reputation: 0

#29
09-09-2024, 10:36 PM
Rust is king when it comes to malware....
Ban reason: Leeching | http://breachddyfwvcp4kzccos5oxtdbssmfbp...an-Appeals if you feel this is incorrect. (Permanent)
Reply
RaidForums
Member
Posts: 4
Threads: 1
Joined: Aug 2024
Reputation: 0

#30
09-10-2024, 06:21 AM
(08-03-2024, 05:43 PM)Loki Wrote: Features
Process
  • Process (Hide / Unhide) ✅
  • Process Signature (PP / PPL) ✅
  • Process Protection (Anti-Kill / Dumping) ✅
  • Elevate Process to System ✅
  • Terminate Process ✅
  • Lists protected and hidden processes currently on the system ✅
Thread
  • Thread (Hide / Unhide) ✅
  • Thread Protection (Anti-Kill) ✅
  • Lists protected and hidden threads currently on the system ✅
Driver
  • Driver (Hide / Unhide) ✅
  • Enumerate Driver ✅
  • Driver Signature Enforcement (DSE)
  • DSE (Enable / Disable) ✅
  • Keylogger
  • Keylogger (Start / Stop) ✅
Callbacks
  • List / Remove / Restore Callbacks
  • PsSetCreateProcessNotifyRoutine ✅
  • PsSetCreateThreadNotifyRoutine ✅
  • PsSetLoadImageNotifyRoutine ✅
  • Module
  • Enumerate Module ✅
Registry
  • Registry Protection (Anti-Deletion e Overwriting) ✅
  • Injection Shellcode
  • Process Injection (ZwCreateThreadEx) ✅
  • APC Injection ✅



Omnicer
thx for the post
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  [Rust]fun way to execute shellcode Nova 3 146 03-27-2026, 09:09 AM
Last Post: hnathan26
  Rust Malware PDF builder (Open SRC) L_DWORD 105 14,171 03-27-2026, 08:28 AM
Last Post: sergiojames
  Go-based implementation of Cobalt Strike style BOF/COFF loaders Loki 12 1,632 02-08-2026, 02:10 PM
Last Post: redmine
  Stealthy open-source linux rootkit netexec 1 107 02-02-2026, 12:25 PM
Last Post: Erlik
  DeadPotato - Windows Privilege Escalation Utility Loki 25 2,917 01-30-2026, 07:28 PM
Last Post: VibeHacking



 Users browsing this thread: 1 Guest(s)