Crate process_ghosting

Crate process_ghosting 

Source
Expand description

ProcessGhosting Library by BlackTechX Process Ghosting Implementation in Rust

Structs§

GhostingBuilder
Configuration builder for the ghosting operation
GhostingConfig
Configuration for the ghosting operation

Enums§

Architecture
Target architecture for the payload

Constants§

AUTHOR
Library author
VERSION
Library version

Functions§

bytes_to_hex_array
Convert bytes to hex array format with line breaks (16 bytes per line)
bytes_to_hex_string
Convert bytes to hex string format: “0x4D, 0x5A, 0x90, …”
exe_to_hex_array
Read an executable file and return hex bytes as formatted string with line breaks Format suitable for code: 16 bytes per line
exe_to_hex_string
Read an executable file and return hex bytes as formatted string Format: “0x4D, 0x5A, 0x90, …”
execute_ghost_process
Main function to execute the ghost process
ghost_payload
Quick execution with default settings (x64, verbose)
ghost_payload_arch
Quick execution with architecture selection
ghost_payload_file
Quick execution from file
ghost_payload_hex
Quick execution from hex string
init
Initialize the library and print banner
parse_hex_string
Parse hex string in various formats:
print_exe_hex
Print exe as hex to console
read_exe_bytes
Read exe file and return raw bytes