Skip to content

Commit cbab091

Browse files
Whitecat18Whitecat18
committed
Repo Structure
Making the PoC Repository well documented and Structured.
1 parent 95a7ae3 commit cbab091

File tree

43 files changed

+1082
-714
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

43 files changed

+1082
-714
lines changed

‎BSOD/README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ Here you can find the BSOD Implementation Techniqes..
1010
* [WinLogon](./ntsd_winlogon/)
1111
* [NtSetInformationProcess](./ntsetinformationprocess/)
1212

13-
[Download](https://downgit.github.io/#/home?url=https://github.com/Whitecat18/Rust-for-Malware-Development/tree/main/BSOD)
13+
BSOD Techniqes: [Download](https://download.5mukx.site/#/home?url=https://github.com/Whitecat18/Rust-for-Malware-Development/tree/main/BSOD)
1414

1515

1616
> NOTE: These are old Techniques that i found on forum and i could'nt find the original authors.

‎BSOD/bsod_NtRaiseHardError/README.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,9 @@
22

33
This Rust program demonstrates how to trigger a Blue Screen of Death (BSOD) using NtRaiseHardError with random error codes.
44

5+
[Download](https://download.5mukx.site/#/home?url=https://github.com/Whitecat18/Rust-for-Malware-Development/tree/main/BSOD/bsod_NtRaiseHardError)
6+
7+
58
## Features
69
- Hides the console window
710
- Sets process priority to high

‎BSOD/closewindowstation/README.md

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,8 @@
22

33
A Rust program that demonstrates how to trigger a Blue Screen of Death (BSOD) by manipulating window station handles.
44

5-
[Download](https://downgit.github.io/#/home?url=https://github.com/Whitecat18/Rust-for-Malware-Development/tree/main/BSOD/closewindowstation)
5+
[Download](https://download.5mukx.site/#/home?url=https://github.com/Whitecat18/Rust-for-Malware-Development/tree/main/BSOD/closewindowstation)
66

7-
## Author
8-
@5mukx
97

108
## Description
119
This program demonstrates a technique to trigger a BSOD by:
@@ -35,4 +33,7 @@ The program uses several Windows API functions:
3533
- ShowWindow
3634

3735
## Warning
38-
This program is for educational purposes only. Running it will cause a system crash and data loss. Use with caution and only in controlled environments.
36+
This program is for educational purposes only. Running it will cause a system crash and data loss. Use with caution and only in controlled environments.
37+
38+
## Author
39+
@5mukx

‎BSOD/lookupprivilegevalue/README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22

33
A Rust program that demonstrates how to trigger a Blue Screen of Death (BSOD) by manipulating system privileges and using the NtRaiseHardError API.
44

5-
[Download](https://downgit.github.io/#/home?url=https://github.com/Whitecat18/Rust-for-Malware-Development/tree/main/BSOD/lookupprivilegevalue)
5+
[Download](https://download.5mukx.site/#/home?url=https://github.com/Whitecat18/Rust-for-Malware-Development/tree/main/BSOD/lookupprivilegevalue)
66

77

88
## Author

‎BSOD/ntsd_winlogon/README.md

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,8 @@
22

33
A Rust program that demonstrates how to trigger a Blue Screen of Death (BSOD) by attaching NTSD debugger to the winlogon.exe process.
44

5-
[Download](https://downgit.github.io/#/home?url=https://github.com/Whitecat18/Rust-for-Malware-Development/tree/main/BSOD/ntsd_winlogon)
5+
[Download](https://download.5mukx.site/#/home?url=https://github.com/Whitecat18/Rust-for-Malware-Development/tree/main/BSOD/ntsd_winlogon)
66

7-
## Author
8-
@5mukx
97

108
## Description
119
This program demonstrates a technique to trigger a BSOD by:
@@ -37,4 +35,7 @@ The program uses several Windows API functions:
3735
- ShowWindow
3836

3937
## Warning
40-
This program is for educational purposes only. Running it will cause a system crash and data loss. Use with caution and only in controlled environments.
38+
This program is for educational purposes only. Running it will cause a system crash and data loss. Use with caution and only in controlled environments.
39+
40+
## Author
41+
@5mukx

‎BSOD/ntsetinformationprocess/README.md

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,8 @@
22

33
A Rust program that demonstrates how to trigger a Blue Screen of Death (BSOD) by setting the current process as critical using NtSetInformationProcess.
44

5-
[Download](https://downgit.github.io/#/home?url=https://github.com/Whitecat18/Rust-for-Malware-Development/tree/main/BSOD/ntsetinformationprocess)
5+
[Download](https://download.5mukx.site/#/home?url=https://github.com/Whitecat18/Rust-for-Malware-Development/tree/main/BSOD/ntsetinformationprocess)
66

7-
## Author
8-
@5mukx
97

108
## Description
119
This program demonstrates a technique to trigger a BSOD by:
@@ -37,4 +35,7 @@ The program uses several Windows API functions:
3735
- NtSetInformationProcess
3836

3937
## Warning
40-
This program is for educational purposes only. Running it will cause a system crash and data loss. Use with caution and only in controlled environments.
38+
This program is for educational purposes only. Running it will cause a system crash and data loss. Use with caution and only in controlled environments.
39+
40+
## Author
41+
@5mukx

‎BSOD/rtladjustprivilege/README.md

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,8 @@
22

33
A Rust program that demonstrates how to trigger a Blue Screen of Death (BSOD) using RtlAdjustPrivilege and NtRaiseHardError.
44

5-
[Download](https://downgit.github.io/#/home?url=https://github.com/Whitecat18/Rust-for-Malware-Development/tree/main/BSOD/rtladjustprivilege)
5+
[Download](https://download.5mukx.site/#/home?url=https://github.com/Whitecat18/Rust-for-Malware-Development/tree/main/BSOD/rtladjustprivilege)
66

7-
## Author
8-
@5mukx
97

108
## Description
119
This program demonstrates a technique to trigger a BSOD by:
@@ -33,4 +31,7 @@ The program uses two main functions from ntdll.dll:
3331
- NtRaiseHardError
3432

3533
## Warning
36-
This program is for educational purposes only. Running it will cause a system crash and data loss. Use with caution and only in controlled environments.
34+
This program is for educational purposes only. Running it will cause a system crash and data loss. Use with caution and only in controlled environments.
35+
36+
## Author
37+
@5mukx

‎CLEAN.md

Lines changed: 26 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,26 @@
1+
### How to clean all the repository recursively ?
2+
3+
For Unix/Linux/MacOS:
4+
* bash
5+
```
6+
find . -type d -exec sh -c 'cd "{}" && test -f Cargo.lock && (cargo clean; rm -f Cargo.lock)' \;
7+
```
8+
9+
For Windows Powershell:
10+
11+
* Latest Powershell Version:
12+
```
13+
Get-ChildItem -Directory -Recurse | ForEach-Object { if (Test-Path "$_\Cargo.lock") { Set-Location $_; cargo clean; Remove-Item "Cargo.lock" -ErrorAction SilentlyContinue; Set-Location .. } }
14+
```
15+
16+
* PowerShell 5.1 and earlier:
17+
```
18+
Get-ChildItem -Recurse | Where-Object { $_.PSIsContainer } | ForEach-Object { if (Test-Path "$($_.FullName)\Cargo.lock") { Set-Location $_.FullName; cargo clean; Remove-Item "Cargo.lock" -ErrorAction SilentlyContinue; Set-Location .. } }
19+
```
20+
21+
* Command Prompt(CMD)
22+
```
23+
for /r %d in (.) do @if exist "%d\Cargo.lock" (cd /d "%d" & cargo clean & del /q "%d\Cargo.lock" & cd ..)
24+
```
25+
26+

‎Process-Injection/apc_queue_inject_new.rs

Lines changed: 0 additions & 121 deletions
This file was deleted.

‎Process-Injection/apc_queue_inject_new/Cargo.toml

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
[package]
2+
name = "apc_queue_inject_new"
3+
version = "0.1.0"
4+
edition = "2021"
5+
6+
[dependencies]
7+
winapi = { version = "0.3.9", features = [
8+
"processthreadsapi",
9+
"memoryapi",
10+
"errhandlingapi",
11+
"synchapi",
12+
"handleapi",
13+
"winbase",
14+
"debugapi"
15+
]}

‎Process-Injection/apc_queue_inject_new/README.md

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
# APC Queue Injection (New) PoC
2+
3+
This is a proof of concept demonstrating an alternative implementation of APC (Asynchronous Procedure Call) queue injection in Rust. The code shows how to inject code into a target process using APC with a different approach.
4+
5+
## Warning
6+
This code is for educational purposes only. Do not use this code for malicious purposes.
7+
8+
## Requirements
9+
- Rust
10+
- Windows OS
11+
- Administrative privileges (for process injection)
12+
13+
## Building
14+
```bash
15+
cargo build
16+
```
17+
18+
## Usage
19+
```bash
20+
cargo run
21+
```

0 commit comments

Comments
 (0)