English أضف مشروعاً
→ كل المشاريع

RegistryStagingMalware

بواسطة @AbdouRoumi

16

This Malware is an application for MalwareEvasionTechniques repo .I used in it Registery staging in two modes R/W and I combined it with the remote scanner

عن هذا المشروع

bash git clone https://github.com/yourusername/RegistryStaging.git cd RegistryStaging HKEYCURRENTUSER\Control Panel\R0m4Key cpp readRegistryValue(); cpp writeRegistryValue(); cpp RemoteProcessInjector(shellcode, ...); cpp int main() { // Read registry value readRegistryValue(); // Write shellcode to registry writeRegistryValue(); // Inject shellcode into remote process unsigned char shellcode[] = { / your shellcode here / }; RemoteProcessInjector(shellcode, ...); return 0; } License This project is licensed under the MIT License - see the LICENSE file for details.

من ملف README الخاص بالمشروع على GitHub

C
النجوم
16
التفريعات
0
الرخصة
MIT
آخر تحديث
14/09/2024
عرض على GitHub

أضف هذه الشارة إلى ملف README

أظهر أن مشروعك مُدرج على «صُنع في الجزائر».

Made in Algeria 
[![Made in Algeria](https://www.madeinalgeria.dev/badge/registrystagingmalware.svg)](https://www.madeinalgeria.dev/projects/registrystagingmalware)

مشاريع ذات صلة

MalwareEvasionTechniques

abdouroumi/malwareevasiontechniques

Research project showcasing various malware evasion techniques used to bypass AVs and EDRs, continuously updated with new methods.

41C++أدوات وسطر أوامر

Early_Bird_APC_Injection

abdouroumi/early_bird_apc_injection

Code injection via Asynchronous Procedure Calls to bypass Windows defenses. Mapped to MITRE ATT&CK T1055.004.(Process Injection: Asynchronous Procedure Call).

33C++

R0m4NTAPI

abdouroumi/r0m4ntapi

Native API injector

27C++

GpuAbuser-Malware

abdouroumi/gpuabuser-malware

Research in progress: A malware that abuses the GPU to accelerate the decryption process.

21C++

PE_Inspector

abdouroumi/pe_inspector

A powerful PE file inspector for analyzing Portable Executable binaries, providing detailed insights into their structure, headers, and properties

21C++

Local-And-Remote_Function_Stomping

abdouroumi/local-and-remote_function_stomping

Function Stomping (MITRE ATT&CK ID: T1055.012) — Advanced injection technique overwriting legitimate functions with custom payloads to evade detection. Research & Educational purposes only

20C++