mirror of
https://github.com/Karkas66/lacuna-rs
synced 2026-07-03 04:43:40 +00:00
Karkas66
63 lines
2.3 KiB
TOML
63 lines
2.3 KiB
TOML
#
|
|
# lacuna-rs — Ghost-frame call-stack spoofing + indirect syscalls for Windows x64
|
|
#
|
|
# Ported from LACUNA Chain (C) by Mohamed Alzhrani (0xmaz)
|
|
#
|
|
|
|
[package]
|
|
name = "lacuna-rs"
|
|
version = "0.1.0"
|
|
edition = "2021"
|
|
authors = ["Karkas66"]
|
|
documentation = "https://github.com/Karkas66/lacuna-rs"
|
|
description = "Ghost-frame call-stack spoofing via .pdata lacunae + runtime indirect syscalls for Windows x64"
|
|
license = "MIT"
|
|
readme = "README.md"
|
|
keywords = ["windows", "syscalls", "edr", "security", "offensive"]
|
|
categories = ["os::windows-apis"]
|
|
|
|
# Build as both a normal Rust library and a C-compatible dynamic library
|
|
# so it can be loaded from C/C++/Python projects too.
|
|
[lib]
|
|
name = "lacuna"
|
|
crate-type = ["rlib", "cdylib", "staticlib"]
|
|
|
|
[features]
|
|
default = ["syscalls", "inject"]
|
|
|
|
# ── Core scanning primitives (PE parsing, ghost/gadget scanning) ─────────────
|
|
# Always compiled — no Win32 calls beyond GetModuleHandle/GetProcAddress.
|
|
|
|
# ── Indirect syscall engine (SSN resolution + JIT stub emission) ─────────────
|
|
# This is the "better syscalls-rs" layer: runtime SSN resolution, per-function
|
|
# syscall;ret targeting, no build-script SSN table.
|
|
syscalls = []
|
|
|
|
# ── VEH + hardware-breakpoint parameter encryption ───────────────────────────
|
|
veh = ["syscalls"]
|
|
|
|
# ── LACUNA stack-spoofing chain (ghost frames, BYOUD-MF, stomp) ──────────────
|
|
# WARNING: requires -C force-frame-pointers=yes in the consuming crate's
|
|
# .cargo/config.toml. See README.
|
|
stack-spoof = ["syscalls", "veh"]
|
|
|
|
# ── Section-based APC injection orchestration ───────────────────────────────
|
|
inject = ["syscalls"]
|
|
|
|
# ── no_std support (alloc only) ──────────────────────────────────────────────
|
|
# When enabled, the crate does not link std. Useful for shellcode payloads.
|
|
# Currently experimental — some APIs fall back to std when available.
|
|
no-std = []
|
|
|
|
[dependencies]
|
|
litcrypt2 = "0.1.3"
|
|
|
|
[profile.release]
|
|
opt-level = 2
|
|
codegen-units = 1
|
|
panic = "abort"
|
|
lto = true
|
|
|
|
[profile.dev]
|
|
opt-level = 0
|
|
codegen-units = 1 |