Logo
Explore Help
Sign In
aljaz/shadow-rs
1
1
Fork 0
You've already forked shadow-rs
mirror of https://github.com/joaoviictorti/shadow-rs.git synced 2025-12-26 11:44:36 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
0736eb0a63b7e17996b1fdecdad9c341b656e14d
shadow-rs/docs/README.md
joaoviictorti 0736eb0a63 docs: Changing the title
2024-09-22 22:30:23 -03:00

2.1 KiB
Raw Blame History

Windows Kernel Rootkit in Rust (shadow-rs) Documentation 🦀

Rust Platform Forks Stars License

This documentation provides an overview of the shadow-rs rootkit project and instructions on its usage, features, and development process.

Table of contents

  • Process

    • Hide / Unhide Process
    • Elevate Process to System
    • Process Signature (PP / PPL)
    • Terminate Process
    • Lists protected and hidden processes currently on the system
  • Thread

    • Hide / Unhide Thread
    • Thread Protection (Anti-Kill)
    • Lists protected and hidden threads currently on the system
  • Driver

    • Driver (Hide / Unhide)
    • Enumerate Driver
  • Misc

    • Driver Signature Enforcement (DSE) Enable / Disable
    • Keylogger Start / Stop
    • ETWTI Enable / Disable
  • Callbacks

    • List / Remove / Restore Callbacks
    • Listing currently removed callbacks
  • Module

    • Hide Module
    • Enumerate Module
  • Registry

    • Hide Key and Values
    • Registry Protection
  • Injection

    • Process Injection - Shellcode / DLL (ZwCreateThreadEx)
    • APC Injection - Shellcode
Powered by Gitea Version: 1.24.6 Page: 146ms Template: 2ms
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API