awesome-offensive-rust
Curated list of projects, articles and more related to Offensive Security and Red Teaming. Completely written in Rust.
https://github.com/ebalo55/awesome-offensive-rust
Last synced: 1 day ago
JSON representation
-
Articles
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- PIC shellcode: The Rust way
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Exploring RustiveDump
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Rasta Mouse Custom Beacon Artifacts
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
- Writing Sliver C2 Extensions in Rust
-
Books
- Black Hat Rust - Applied offensive security with Rust.
-
Projects
- ADPT - DLL proxying for lazy people.
- DInvoke_rs - Dynamically invoke arbitrary unmanaged code.
- Dumpy - Reuse open handles to dynamically dump LSASS.
- Bin Finder - Detect EDR's exceptions by inspecting processes' loaded modules.
- Shelter - ROP-based sleep obfuscation to evade memory scanners.
- Unwinder - Call stack spoofing for Rust.
- RustChain - Hide memory artifacts using ROP and hardware breakpoints.
- CustomEntryPoint - Select any exported function in a dll as the new dll's entry point.
- Split - Apply a divide and conquer approach to bypass EDRs.
- EPI - Threadless Process Injection through entry point hijacking.
- RustHollow - Inject a shellcode in a remote process using Process Hollowing.
- Eagle-rs - Rusty Rootkit - Windows Kernel Rookit in Rust (Codename: Eagle).
- Illusion-rs - Rusty Hypervisor - Windows UEFI Blue Pill Type-1 Hypervisor in Rust (Codename: Illusion).
- Matrix-rs - Rusty Hypervisor - Windows Blue Pill Type-2 Hypervisor in Rust (Codename: Matrix)
- Venom-rs - Rusty Injection - Shellcode Reflective DLL Injection (sRDI) in Rust (Codename: Venom).
- Arsenal-rs - Rusty Arsenal - A collection of experimental Process Injection and Post-Exploitation Techniques in Rust.
- Redlotus-rs - Rusty Bootkit - Windows UEFI Bootkit in Rust (Codename: RedLotus).
- Crabby - WebShell for Red Teams, just easily.
- Cerbero - Kerberos protocol attacker.
- RustHound - Active Directory data collector for BloodHound written in Rust.
- Feroxbuster - A fast, simple, recursive content discovery tool written in Rust.
- Offensive Rust - A collection of offensive security tools written in Rust.
- OffensiveRust - Rust Weaponization for Red Team Engagements.
- RustRedOps - RustRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Rust programming language.
- Sniffglue - Secure multithreaded packet sniffer.
- Goblin - An impish, cross-platform binary parsing crate, written in Rust.
- Ripgrep - Ripgrep recursively searches directories for a regex pattern while respecting your gitignore.
- Rust for Malware Development - Rust for malware development and for low level stuffs.
- Moonwalk Back - Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps.
- Bore - bore is a simple CLI tool for making tunnels to localhost.
- Ppfuzz - A fast tool to scan client-side prototype pollution vulnerability written in Rust.
- Ripgen - Rust-based high performance domain permutation generator.
- Pyscan - Python dependency vulnerability scanner, written in Rust.
- Freeze.rs - Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST.
- Haylxon - Blazing-fast tool to grab screenshots of your domain list right from terminal.
- WStunnel - Tunnel all your traffic over Websocket or HTTP2 - Bypass firewalls/DPI - Static binary available.
- Hrekt - A really fast http prober.
- Qscan - Quick network scanner library.
- Osintui - OSINT from your favorite services in a friendly terminal user interface - integrations for Virustotal, Shodan, and Censys.
- Skanuvaty - Dangerously fast DNS/network/port scanner
- Noseyparker - Nosey Parker is a command-line program that finds secrets and sensitive information in textual data and Git history.
- Rusty Hog - A suite of secret scanners built in Rust for performance. Based on TruffleHog.
- Lorsrf - Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load.
- Findomain - The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for sources and much more.
- Scrying - A tool for collecting RDP, web and VNC screenshots all in one place.
- X8 - Hidden parameters discovery suite
- Legba - A multiprotocol credentials bruteforcer / password sprayer and enumerator.
- Rust Syscall - Single stub direct and indirect syscalling with runtime SSN resolving for windows.
- GhostDriver - GhostDriver is a Rust-built AV killer tool using BYOVD.
- NovaLdr - Threadless Module Stomping In Rust with some features (In memory of those murdered in the Nova party massacre).
- Rustic64 - 64-bit, position-independent shellcode template for Windows in Rust.
- Dog - A command-line DNS client written in rust. Dig alternative.
- IronRDP - Rust implementation of the Microsoft Remote Desktop Protocol (RDP).
- Eclipse - Activation Context Hijack to load and run an arbitrary DLL in any desired process.
- JoJoLoader - Help Redteam members generate Evasive Anti-virus software Trojan.
- Rustic64Shell - 64-bit, position-independent reverse tcp shell, built in Rust for Windows.
- RustiveDump - LSASS memory dumper using only NTAPIs, creating a minimal minidump, built in Rust with no_std and independent of the C runtime (CRT). It can be compiled as shellcode (PIC), supports XOR encryption, and remote file transmission.
- RustVEHSyscalls - Rust port of LayeredSyscall, designed to perform indirect syscalls while generating legitimate API call stack frames by abusing Vectored Exception Handling (VEH) to bypass user-land EDR hooks in Windows.
- Fiber - Using fibers to run in-memory code.
- RustPacker - Template-based shellcode packer written in Rust, with indirect syscall support. Made with <3 for pentesters.
- RustScan - The Modern Port Scanner.
- Shadow-rs - Windows Kernel Rootkit in Rust.
-
Useful Libraries
-
Communities
Sub Categories
Keywords
rust
39
windows
13
redteam
12
security
8
hacking
7
rust-lang
6
security-tools
6
pentesting
6
bugbounty
4
rootkit
4
offensive-security
4
pentest
4
dll
3
edr-evasion
3
kernel
3
penetration-testing
3
position-independent-code
3
dns
3
osint
3
scanner
3
content-discovery
2
vt-x
2
virtualization
2
uefi
2
ring-1
2
intel
2
hypervisor
2
bootkit
2
blue-pill
2
ring0
2
fuzzing
2
network
2
cli
2
command-line
2
networking
2
beacon
2
red-team
2
cross-platform
2
malware-development
2
web
2
vulnerability-scanners
2
binary-analysis
1
elf
1
archive
1
pentesting-tool
1
sniffer
1
sandboxed
1
pcap
1
url-bruteforcer
1
mach
1