Logo
Explore Help
Sign In
aljaz/shadow-rs
1
1
Fork 0
You've already forked shadow-rs
mirror of https://github.com/joaoviictorti/shadow-rs.git synced 2026-01-10 02:54:27 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
7fda19a93f8fab82819ddedca929df8da3a6a348
shadow-rs/docs/README.md
joaoviictorti 7fda19a93f docs: Adding the rest of the modules
2024-09-22 22:26:45 -03:00

1.7 KiB
Raw Blame History

Windows Kernel Rootkit in Rust (shadow-rs) Documentation

This documentation provides an overview of the shadow-rs rootkit project and instructions on its usage, features, and development process.

Table of contents

  • Process

    • Hide / Unhide Process
    • Elevate Process to System
    • Process Signature (PP / PPL)
    • Terminate Process
    • Lists protected and hidden processes currently on the system
  • Thread

    • Hide / Unhide Thread
    • Thread Protection (Anti-Kill)
    • Lists protected and hidden threads currently on the system
  • Driver

    • Driver (Hide / Unhide)
    • Enumerate Driver
  • Misc

    • Driver Signature Enforcement (DSE) Enable / Disable
    • Keylogger Start / Stop
    • ETWTI Enable / Disable
  • Callbacks

    • List / Remove / Restore Callbacks
    • Listing currently removed callbacks
  • Module

    • Hide Module
  • Registry

    • Hide Key and Values
    • Registry Protection
  • Injection

    • Process Injection - Shellcode / DLL (ZwCreateThreadEx)
    • APC Injection - Shellcode
Powered by Gitea Version: 1.24.6 Page: 47ms Template: 1ms
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API