r77-rootkit icon indicating copy to clipboard operation
r77-rootkit copied to clipboard

Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.

Results 8 r77-rootkit issues
Sort by recently updated
recently updated
newest added

thanks bud,this software is owesome! Can you add a function to hide GPU use,this is so good .thanks

enhancement

I'm not super experieneced in using this type of stuff, can someone please help me tho. How do i include this into my own stub?

help wanted

It works at the details column on task manager,but at Processes,Users and Performance columns of task manager,the cpu usage remains intact.Tested On Windows 10. SystemProcessorPerformanceInformation and SystemProcessorIdleCycleTimeInformation never gets triggered

bug

```Install.exe``` was executed before adding these registry values using Powershell ![image](https://github.com/bytecode77/r77-rootkit/assets/96607632/364ce7b3-2c8c-4471-b21b-0c24de66e77e) These PowerShell commands create a new registry key named ```$77test``` under ```HKLM:\Software```, then adds a new registry value named...

### Hey! How you doing @bytecode77!! 🧡 🔥 _**I'd need you to give me a hand, ‎ ‎ ‎ ‎ ‎ because I'm going crazy, really... 🥴 😅 🥴**_ ‎...

help wanted

would you add local user hidden from net.exe,net1.exe and lusrmgr.msc in the future?

enhancement

The configuration is located in HKEY_LOCAL_MACHINE\SOFTWARE\$77config and is writable by any process without elevated privileges. The DACL of this key is set to grant full access to any user.? ```...

help wanted

The current implementation of HookedNtEnumerateKey seems to hang certain windows applications that use it, specifically sfc /scannow and EventViewer. Will this be fixed in future updates? If not, is there...

bug