REpo Structure

Making the PoC Repository well documented and Structured.

Author: Whitecat18

EDRChecker/Cargo.lock

@@ -1 +1,4 @@
-Implementing MsgboXes using WinAPI 
+Implementing MsgboXes using WinAPI 
+
+* [MessageBoxA](./MessageBoxA/src/main.rs)
+* [MessageBoxW](./MessageBoxW/main.rs)

MessageBoxes/README.md

@@ -2,9 +2,12 @@
 
 This repository contains two programs demonstrating inter-process communication (IPC) using named pipes on Windows:-
 
+Download IPC Client & Server: [Download](https://download.5mukx.site/#/home?url=https://github.com/Whitecat18/Rust-for-Malware-Development/tree/main/Named_Pipe)
 
 * [named_pipe_server](./pipe_server/): A server that creates a named pipe and sends a message to connected clients.
+
 * [named_pipe_client](./pipe_client/): A client that connects to the server named pipe and reads the message.
 
----> Under Construction
+## Credits / Resources
 
+* https://learn.microsoft.com/en-us/dotnet/standard/io/how-to-use-named-pipes-for-network-interprocess-communication

Named_Pipe/README.md

@@ -5,4 +5,5 @@ Here you can find the ntapi to perform PoC operations.
 - [NtMapViewOfSection](./NtMapViewOfSection/)
 - [Shellcode Execution using NtApi](./Shellcode_Exectuion_NtApi/)
 
+
 Download Ntapi PoC's: [Download](https://download.5mukx.site/#/home?url=https://github.com/Whitecat18/Rust-for-Malware-Development/tree/main/NtApi/)

NtApi/README.md

@@ -28,6 +28,7 @@
 | [Process Herpaderping](./Process/Herpaderping/)           | Process Herpaderping Written in Rust.                                       |
 | [NtCreateUserProcess](./NtCreateUserProcess)              | Launching the Process using NtCreateUserProcess API.                        |
 | [Named Pipes](./Named_Pipe/)                              | Demonstrating [IPC](https://learn.microsoft.com/en-us/windows/win32/ipc/interprocess-communications) using named pipes on Windows                            |
+| [PE Analyzer](https://github.com/Whitecat18/PE-Analyzer.rs.git) | Extracts PE Information at CLI.                                       | 
 | [BlockHandle](./BlockHandle/)                             | Block Handles using SDDL PoC.                                               |
 | [Dynamic Export Table PEB](./base_addr_locator)           | Calls Windows Function by searching memory.                                 |
 | [API Hammering](api_hammering)                            | API Hammering techniques.                                                   |
@@ -54,9 +55,11 @@
 | [Malware DSA](shellcode_exec/DSA_Exec)                    | Implementing malwares using DSA (Data Structures and Algorithms) Concept.   |
 | [Shellcode Obfuscation](obfuscation)                      | Obfuscate and deobfuscate shellcode using Ipv4, Ipv6, MAC, UUiD formats.    |
 | [EDR Checker](EDRChecker)                                 | Check for the presence of EDR's tools, AV softwares, and other security-related applications on a Windows system. |
+| [Timer](./timer/)                                         | A Program that uses Time-based execution control mechanism.                 |                          
 | [Keylogger Dropper](keylog_dropper)                       | Downloads keylogger and sender on victim PC and executes in background.     |
 | [Rand_Fill](Malware_Tips/rand_fill/)                      | A Small Parallel Program that Deletes All Files on Disk and Fills with Random Bytes, Making the Recovery Process Impossible. |
 | [Encryfer-X](Malware-Samples/Encryfer/)                   | Ransomware written by combining all Possible POC techniques.                |
+| [Github Stealers](./stealer/GitHub_API/)
 
 ## Encryption Techniques
 
@@ -76,6 +79,7 @@
 | [SystemFunction032/033](./Encryption%20Methods/SystemFunction032_033/) | Encrypt and Decrypt shellcode using undocumented winapi function. |
 
 
+
 Click Here to download the Repository: [Download](https://download.5mukx.site/#/home?url=https://github.com/Whitecat18/Rust-for-Malware-Development)
 
 ## Manifest dependencies for [winapi](https://docs.rs/winapi/latest/winapi/) to test and execute

README.md

@@ -1,8 +1,8 @@
 
 ## Rust Simple Client Server Reverse Shell
 
-**Rev Receive** -> Client
-
-**Rev Shell** -> Server
+Downlaod Reverse Shell: [Download](https://download.5mukx.site/#/home?url=https://github.com/Whitecat18/Rust-for-Malware-Development/tree/main/Reverse%20Shell)
 
+* **Rev Receive** -> [Client](./rev_receive/)
 
+* **Rev Shell** -> [Server](./rev_shell/)

Recon/extract_wifi/Cargo.toml

@@ -4,4 +4,14 @@ version = "0.1.0"
 edition = "2021"
 
 [dependencies]
-winapi = { version = "0.3.9", features = ["winnt", "memoryapi", "processthreadsapi", "synchapi"] }
+byteorder = "1.5.0"
+winapi = { version = "0.3.9", features = [
+    "winnt",
+    "memoryapi",
+    "processthreadsapi",
+    "synchapi",
+    "fileapi",
+    "errhandlingapi",
+    "handleapi",
+    "heapapi"
+] }

Recon/extract_wifi/README.md

@@ -1,7 +1,9 @@
-# PE_Analyzer1
+# PE_Analyzer [Main] Rust
 
 A Rust-based PE (Portable Executable) file analyzer that provides detailed information about Windows executable files.
 
+![PoC Image](./image.png)
+
 ## Features
 
 - Parse and analyze PE file headers