mirror of
https://codeberg.org/smukx/Rust-for-Malware-Development
synced 2026-06-06 20:22:59 +00:00
Whitecat18
28e7fac1d3
Rust-for-Malware-Development is an collection of proof of concepts with techniques and advanced evasion methods
22 lines
1.2 KiB
Markdown
22 lines
1.2 KiB
Markdown
## UUID Shellcode Execution
|
|
|
|
Welcome to the **UUID_Shellcode_Execution** directory of [`Rust-for-Malware-Development`](https://github.com/Whitecat18/Rust-for-Malware-Development).
|
|
Shellcode disguised as a list of UUID strings slips past simple byte-pattern scanners. The bytes that make it to disk look like ordinary identifiers; the runtime converts them back into executable code with `UuidFromStringA`.
|
|
|
|
## Sections & Links
|
|
|
|
- [uuid_format](https://github.com/Whitecat18/Rust-for-Malware-Development/tree/main/UUID_Shellcode_Execution/uuid_format):
|
|
Converter that takes raw shellcode bytes and prints them back out as an array of UUID strings ready to paste into a loader.
|
|
|
|
- [uuid_shellcode_execution](https://github.com/Whitecat18/Rust-for-Malware-Development/tree/main/UUID_Shellcode_Execution/uuid_shellcode_execution):
|
|
Loader that walks a UUID array, calls `UuidFromStringA` on each entry to decode it straight into a heap-allocated executable region, and jumps to it.
|
|
|
|
## How to Use
|
|
|
|
```bash
|
|
git clone https://github.com/Whitecat18/Rust-for-Malware-Development.git
|
|
cd Rust-for-Malware-Development/UUID_Shellcode_Execution
|
|
```
|
|
|
|
Each sub-folder is its own Cargo project. Build with `cargo build --release`.
|