# Process Argument Spoofing

Process Argument Spoofing is a technique used to manipulate or hide command-line arguments of a process, making it harder for security tools to detect the actual parameters passed to the program.

[⬇️ Download](https://download.5mukx.site/#/home?url=https://github.com/Whitecat18/Rust-for-Malware-Development/tree/main/Process/process_argument_spoofing)

## Features
- Process argument spoofing implementation in Rust
- Uses Windows API and NT API for process manipulation
- Demonstrates process memory manipulation techniques

## Requirements
- Rust toolchain
- Required dependencies:
  - winapi
  - ntapi
  - memoffset

## Installation
1. Clone the repository
2. Navigate to the project directory
3. Run `cargo build` to compile the project

## Usage

1. Build the project using Cargo:
   ```bash
   cargo build --release
   ```

2. Run the executable:
   ```bash
   ./target/release/process_argument_spoofing.exe
   ```

# References

* https://www.ired.team/offensive-security/defense-evasion/parent-process-id-ppid-spoofing

## Author
[@5mukx](https://x.com/5mukx)