ProcessGhosting 0.1.0

Process Ghosting technique implementation - Execute PE files from memory without leaving traces on disk
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35

//! Basic usage example for ProcessGhosting library
//! Author: BlackTechX

use process_ghosting::{GhostingBuilder, init};

fn main() {
    // Initialize library (prints banner)
    init();

    println!("[*] Basic Usage Example\n");

    // Read payload from file
    let payload_path = "payload.exe";
    
    match std::fs::read(payload_path) {
        Ok(payload) => {
            println!("[+] Loaded payload: {} bytes", payload.len());
            
            // Execute ghosting
            let result = GhostingBuilder::new(&payload)
                .x64()              // Target x64 architecture
                .with_logging()     // Enable verbose output
                .execute();

            match result {
                Ok(_) => println!("\n[+] Process ghosting completed successfully!"),
                Err(e) => eprintln!("\n[-] Process ghosting failed: {}", e),
            }
        }
        Err(e) => {
            eprintln!("[-] Failed to read payload file '{}': {}", payload_path, e);
            eprintln!("    Please provide a valid PE executable.");
        }
    }
}