r77-rootkit

r77-rootkit copied to clipboard

prior to windows server 2019,after R77 installed,the console application with no user32.dll import such as net.exe and others still occasionally fail to run with access denied or other error.I guess...

wineggdrop

behavior under antivirus

6

https://github.com/user-attachments/assets/b201c6b5-6c82-42ec-aca5-4daf3371632e Kaspersky is running,console application acting weird,gui application performs normal.Not sure why BTW,the CreatePublicNamePipe() function need to free some resource like the PSID valiable and etc Also,I am thinking that...

wineggdrop

Prohibiting network access based on specific PID

8

Networking can be prohibited through the process pid or process name or port, so that the playability can be better. I hope the author can adopt it.

justKing9

Unknown Issue

2

I have installed r77 for test on several servers from Windows Server 2012 to windows Server 2022,and I have exprienced the same issue.,which server's service like RDP,IIS,FTP server,etc refuses outside...

MaggieKong