Logo
Explore Help
Sign In
aljaz/shadow-rs
1
1
Fork 0
You've already forked shadow-rs
mirror of https://github.com/joaoviictorti/shadow-rs.git synced 2026-01-09 02:24:29 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
fa01827036be5b6996d4e834e964a3fee3db56a0
shadow-rs/docs/README.md
joaoviictorti bf2d6a7f95 docs: Removing tags
2024-09-22 22:31:05 -03:00

1.7 KiB
Raw Blame History

Windows Kernel Rootkit in Rust (shadow-rs) Documentation 🦀

This documentation provides an overview of the shadow-rs rootkit project and instructions on its usage, features, and development process.

Table of contents

  • Process

    • Hide / Unhide Process
    • Elevate Process to System
    • Process Signature (PP / PPL)
    • Terminate Process
    • Lists protected and hidden processes currently on the system
  • Thread

    • Hide / Unhide Thread
    • Thread Protection (Anti-Kill)
    • Lists protected and hidden threads currently on the system
  • Driver

    • Driver (Hide / Unhide)
    • Enumerate Driver
  • Misc

    • Driver Signature Enforcement (DSE) Enable / Disable
    • Keylogger Start / Stop
    • ETWTI Enable / Disable
  • Callbacks

    • List / Remove / Restore Callbacks
    • Listing currently removed callbacks
  • Module

    • Hide Module
    • Enumerate Module
  • Registry

    • Hide Key and Values
    • Registry Protection
  • Injection

    • Process Injection - Shellcode / DLL (ZwCreateThreadEx)
    • APC Injection - Shellcode
Powered by Gitea Version: 1.24.6 Page: 46ms Template: 2ms
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API