Logo
Explore Help
Sign In
aljaz/shadow-rs
1
1
Fork 0
You've already forked shadow-rs
mirror of https://github.com/joaoviictorti/shadow-rs.git synced 2026-01-13 12:34:34 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
5dd813c552d014c76bebdb0ea93af012a02f4bff
shadow-rs/docs/README.md
joaoviictorti bf2d6a7f95 docs: Removing tags
2024-09-22 22:31:05 -03:00

1.7 KiB
Raw Blame History

Windows Kernel Rootkit in Rust (shadow-rs) Documentation 🦀

This documentation provides an overview of the shadow-rs rootkit project and instructions on its usage, features, and development process.

Table of contents

  • Process

    • Hide / Unhide Process
    • Elevate Process to System
    • Process Signature (PP / PPL)
    • Terminate Process
    • Lists protected and hidden processes currently on the system
  • Thread

    • Hide / Unhide Thread
    • Thread Protection (Anti-Kill)
    • Lists protected and hidden threads currently on the system
  • Driver

    • Driver (Hide / Unhide)
    • Enumerate Driver
  • Misc

    • Driver Signature Enforcement (DSE) Enable / Disable
    • Keylogger Start / Stop
    • ETWTI Enable / Disable
  • Callbacks

    • List / Remove / Restore Callbacks
    • Listing currently removed callbacks
  • Module

    • Hide Module
    • Enumerate Module
  • Registry

    • Hide Key and Values
    • Registry Protection
  • Injection

    • Process Injection - Shellcode / DLL (ZwCreateThreadEx)
    • APC Injection - Shellcode
Powered by Gitea Version: 1.24.6 Page: 153ms Template: 2ms
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API