* spelling mistakes...LOL
* version bumps because those spelling mistakes caused issues with feature flags
* Update process migration badge data via Github Action
* Update process hollowing badge data via Github Action
Co-authored-by: kmanc <kmanc@users.noreply.github.com>
* whoops
* newlines to end files
* better code comments
* better code comments
* only compile necessary features. ones not asked for get dummy stub functions
* newline at end of file
* small version bump. better conditional compilation logic. better code comments
* build updates to try to cover feature combinations
* typo
* lock
* glaring readme issues...will address more on separate branch
* newline
* typo
* typo
* this was more than just a patch bump for utils
* Update reverse shell badge data via Github Action
* Update process migration badge data via Github Action
* Update process hollowing badge data via Github Action
* Update xor params badge data via Github Action
* lock
* compat change on windows crate
* require newer win version to support change
Co-authored-by: kmanc <kmanc@users.noreply.github.com>
* this is gonna get messy
* getting closer, need to check something
* i was editing the wrong file, lol
* ok now we've made some progress, lets use it
* this needs some cleanup. but tldr is the library has three new functions. one is a legit implementation for windows to try to tell if its AV testing. the other two are bs placeholders
* basic comments and reverse the logic for the wrong one
* lock
* antisand works and now properly passes feature to rco_utils. version bump!
* antisand works and now properly passes feature to rco_utils. version bump!
* Update lib.rs
* Update process migration badge data via Github Action
* Update process hollowing badge data via Github Action
Co-authored-by: kmanc <kmanc@users.noreply.github.com>
* reworked a lot of the way encrypting shellcodes work. allowed xor_shellcode to xor more than just the shellcode. renamed xor_shellcode accordingly. changed the feature name from encrypted to xor. bumped versions
* gh actions and shields
* lock and toml
* these functions are only needed here
* these functions not needed in a lib (at least not now)
* lock
* Update process migration badge data via Github Action
* Update process hollowing badge data via Github Action
* Update xor params badge data via Github Action
* missed one thing, damn
Co-authored-by: kmanc <kmanc@users.noreply.github.com>
* lock file
* version bump
* allow user to choose which process they target for migration, but provide defaults that should work
* more lock updates
* version bump
* allow user to choose which process they target for hollowing, but provide defaults that should work
* Update process migration badge data via Github Action
* Update process hollowing badge data via Github Action
Co-authored-by: kmanc <kmanc@users.noreply.github.com>
* changed shellcode default after having changed the key
* features are kinda cool
* lock update
* encryption! will post detection rates and updated instructions later but this is nice
* lock update
* version bump
* Update process migration badge data via Github Action
Co-authored-by: kmanc <kmanc@users.noreply.github.com>
* shared config library! this will make setting up the payloads much easier
* update lock and toml for new shared config
* migrate rev shell to the new shared config
* lock update again
* shellcodes to config lib
* migrating...process migration to the new shared config
* update readme's links
* minor version bumps
* Update process migration badge data via Github Action
* Update reverse shell badge data via Github Action
Co-authored-by: kmanc <kmanc@users.noreply.github.com>
* safer to not go under 100 pid
* Update Cargo.toml
* Update process migration badge data via Github Action
Co-authored-by: kmanc <kmanc@users.noreply.github.com>
* first official detection rates! need to reorg readmes, add screenshots, and do gifs another day
* separate build categories into jobs so its easier to read
* also separate into jobs for clarity / it seems to make sense
* Update README.md
* Update README.md
* Update README.md
* Update README.md
* Update README.md
* Update README.md
* mingw issue
* still working on fixing
* Update windows.yml
* does this work?
* Update windows.yml
* Update windows.yml
* Update README.md
* moving the last char up so the new action can work
* placeholder shield data
* new action to update shields based on semver
* new badges on display!
* wrong path
* Update shield_io_updater.yml
* Update shield_io_updater.yml
* Update shields data via Github Action
Co-authored-by: kmanc <kmanc@users.noreply.github.com>
* more precise setup
* smarter imports changed lock
* import only in the mod file
* libc for unix
* import in mod file
* import in mod file
* WIP
* unix --> linux
* target linux correctly
* working build, non-working functionality
* really not sure how to run this thing
* clippy suggestion
* dependencies getting narrowed down
* get target pid and verify ptrace perms with process_vm_readv
* need a linux shellcode too
* swapped to ptrace, feel like im close
* seg faults are common and i never get the shell
* this seems more robust but also doesnt work
* removed a few prints and added some coments
* trying to debug this
* looks nicer this way
* idk what im doing
* have i narrowed down the problem?
* still trying to figure out what doesnt work
* minimal nix version via cargo-minimal-verions
* missed commit
* ok finally it works, but in a way that i would never have thought the documentation on ptrace indicated
* it actually works now! and is cleaned up
* minimum supported rust version to 1.58 for format strings
* minimum windows version via cargo-minimal-versions
* git.....
* does this fix?
* updating rust worked. now update cargo to ensure no breaking changes to dependencies
* and update lock too
kmanc