2vg/blackcat-rs

Black cat magic ฅ(＾・ω・＾ฅ ✿)

Welcome >ω<

🌱visitor:

- general

Hello :3
I'm called 2vg(pronounce is Nībuijī) / mofu / uru.
I like gaming, programming, listening to music.

- tech

I LOVE Rust.

blackcat-rs's Issues

process-hollow example doesn't run

thread 'main' panicked at 'cannot transmute_copy if U is larger than T', /rustc/17cbdfd07178349d0a3cecb8e7dde8f915666ced\library\core\src\mem\mod.rs:1057:5

[Bug] GetLastError returns 87 when 32bit hollow

failed to call Wow64GetThreadContext

[Improvement] hollow method should set "Subsystem to GUI" for the injected process.

hollow method should set "Subsystem to GUI" for the image of the injected process. With that the payload could also a console application

Bad EntryPoint Calculation in Process Hollowing 64 bits

the file putty.exe is the regular file of 64 bits version, you can't inject him self so i think exist an error when you trie to calculate the entry point. More POC in the next Images.

Only works when you inject the sample-payload.exe but whit others files isn't

I trie to determine why and fix it! thanks for your project are very interesting.