ProcessGhosting 0.1.0

Process Ghosting technique implementation - Execute PE files from memory without leaving traces on disk
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71

[package]

name = "ProcessGhosting"

version = "0.1.0"

edition = "2021"

authors = ["BlackTechX"]

description = "Process Ghosting technique implementation - Execute PE files from memory without leaving traces on disk"

documentation = "https://docs.rs/ProcessGhosting"

readme = "../README.md"

homepage = "https://github.com/BlackTechX011/ProcessGhosting"

repository = "https://github.com/BlackTechX011/ProcessGhosting"

license = "MIT"

keywords = ["windows", "process", "ghosting", "security", "pe"]

categories = ["os::windows-apis", "development-tools"]

include = [

    "src/**/*",

    "examples/**/*",

    "Cargo.toml",

    "../README.md",

    "../LICENSE",

]

rust-version = "1.70.0"



[lib]

name = "process_ghosting"

path = "src/lib.rs"

crate-type = ["lib", "cdylib", "staticlib"]



[[example]]

name = "basic_usage"

path = "examples/basic_usage.rs"



[[example]]

name = "from_file"

path = "examples/from_file.rs"



[[example]]

name = "from_hex"

path = "examples/from_hex.rs"



[[example]]

name = "hex_converter"

path = "examples/hex_converter.rs"



[[example]]

name = "silent_mode"

path = "examples/silent_mode.rs"





[dependencies]

winapi = { version = "0.3.9", features = [

    "winnt",

    "handleapi",

    "processthreadsapi",

    "memoryapi",

    "fileapi",

    "libloaderapi",

    "errhandlingapi",

    "synchapi",

    "winbase",

    "std",

    "basetsd",

    "ntdef",

    "minwindef",

]}



[badges]

maintenance = { status = "actively-developed" }



[package.metadata.docs.rs]

default-target = "x86_64-pc-windows-msvc"

targets = ["x86_64-pc-windows-msvc", "i686-pc-windows-msvc"]