mirror of
https://codeberg.org/smukx/Rust-for-Malware-Development
synced 2026-06-06 20:22:59 +00:00
28e7fac1d3
Rust-for-Malware-Development is an collection of proof of concepts with techniques and advanced evasion methods
Process Hypnosis
A Rust implementation of Process Hypnosis, a technique for debugger-assisted control flow hijacking. This project demonstrates advanced Windows debugging and process manipulation techniques.
Features
- Process debugging and control
- DLL loading monitoring
- Memory manipulation
- Symbol resolution
- Shellcode execution
- Debug event handling
Technical Details
The project implements:
- Windows Debug API usage
- Process creation and debugging
- Memory reading and writing
- Symbol resolution and lookup
- Exception handling
- Thread management
Key Components
-
Debug Event Handling
- Process creation events
- Thread creation events
- DLL loading events
- Exception events
- Breakpoint handling
-
Memory Operations
- Process memory reading
- Process memory writing
- Memory protection manipulation
- Shellcode injection
-
Symbol Resolution
- Symbol initialization
- Symbol lookup
- Address resolution
- Function address retrieval
Usage
-
Build the project using Cargo:
cargo build --release -
Run the executable:
cargo run --release
Dependencies
- winapi: Windows API bindings with specific features:
- debugapi
- errhandlingapi
- memoryapi
- minwinbase
- processthreadsapi
- winbase
References
- https://github.com/CarlosG13/Process-Hypnosis-Debugger-assisted-control-flow-hijack.git
- https://github.com/joaoviictorti/RustRedOps/tree/main/Process_Hypnosis
Author
Created by @5mukx