项目说明
Awesome Offensive Rust ![Awesome]()
<img src=" align="right" width="250">
> Curated list of resources about Rust language used for offensi & red teaming.
_List inspired by the awesome list thing._
Contents
Awesome Offensive Rust - Contents
- Community
- Articles
- Boilerplates
- Books
- Projects
- Useful Libraries
- Contributing
- License
GitAds Sponsored
![Sponsored by GitAds]()
Communities
Official Rust communitiesArticles
Coffee: A COFF loader made in RustExploring RustiPIC shellcode: The Rust wayRasta Mouse Custom Beacon ArtifactsWriting Sliver C2 Extensions in RustBooks
Black Hat Rust - Applied offensi with Rust.Boilerplates
> Boilerplates for Rust language used for offensi & red teaming.
>
> ... Coming soon
Projects
ADPT - DLL proxying for lazy people.Arsenal-rs - Rusty Arsenal - A collection of experimental Process Injection and Post-Exploitation Techniques in Rust.Bin Finder - Detect EDR's exceptions by inspecting processes' loaded modules.Bore - bore is a simple CLI tool for making tunnels to localhost.Cerbero - Kerberos protocol attacker.Crabby - WebShell for Red Teams, just easily.CustomEntryPoint - Select any exported function in a dll as the new dll's entry point.DIn - Dynamically invoke arbitrary unmanaged code.Dog - A command-line DNS client written in rust. Dig alternative.Dumpy - Reuse open handles to dynamically dump LSASS.Eagle-rs - Rusty Rootkit - Windows Kernel Rookit in Rust (Codename: Eagle).Eclipse - Acti Context Hijack to load and run an arbitrary DLL in any desired process.EPI - Threadless Process Injection through entry point hijacking.Feroxbuster - A fast, simple, recursi discovery tool written in Rust.Fiber - Using fibers to run in-memory code.Findomain - The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts , Slack and Freeze.rs - Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST.GhostDriver - GhostDriver is a Rust-built A tool using BYOVD.Goblin - An impish, cross-platform binary parsing crate, written in Rust.Haylxon - Blazing-fast tool to grab screenshots of your domain list right from terminal.Hrekt - A really fast http prober.Illusion-rs - Rusty Hypervisor - Windows UEFI Blue Pill Type-1 Hypervisor in Rust (Codename: Illusion).IronRDP - Rust implementation of the Microsoft Remote Desktop Protocol (RDP).JoJoLoader - Help Redteam members generate E Anti-virus software Trojan.Legba - A multiprotocol credentials bruteforcer / password sprayer and enumerator.Lorsrf - Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load.Matrix-rs - Rusty Hypervisor - Windows Blue Pill Type-2 Hypervisor in Rust (Codename: Matrix)Moonwalk Back - Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps.Noseyparker - Nosey Parker is a command-line program that finds secrets and sensiti in textual data and Git history.NovaLdr - Threadless Module Stomping In Rust with some features (In memory of those murdered in the No massacre).Offensive Rust - A collection of offensi tools written in Rust.Offensi - Rust Weaponization for Red Team Engagements.Osintui - OSINT from your fa services in a friendly terminal user interface - integrations for , Shodan, and Censys.Ppfuzz - A fast tool to scan client-side prototype pollution written in Rust.Pyscan - Python dependency scanner, written in Rust.Qscan - Quick network scanner library.Redlotus-rs - Rusty Bootkit - Windows UEFI Bootkit in Rust (Codename: RedLotus).Ripgen - Rust-based high performance domain permutation generator.Ripgrep - Ripgrep recursively searches directories for a regex pattern while respecting your gitignore.Rust for Malware De - Rust for malware de and for low le.Rust Syscall - Single stub direct and indirect syscalling with runtime SSN resolving for windows.RustChain - Hide memory artifacts using ROP and hardware breakpoints.RustHollow - Inject a shellcode in a remote process using Process Hollowing.RustHound - Acti data collector for BloodHound written in Rust.Rustic64 - 64-bit, position-independent shellcode template for Windows in Rust.Rustic64Shell - 64-bit, position-independent reverse tcp shell, built in Rust for Windows.Rusti - LSASS memory dumper using only NTAPIs, creating a minimal minidump, built in Rust with no_std and independent of the C runtime (CRT). It can be compiled as shellcode (PIC), supports XOR encryption, and remote file transmission.RustPacker - Template-based shellcode packer written in Rust, with indirect syscall support. Made with <3 for pentesters.RustRedOps - RustRedOps is a repository dedicated to gathering and sharing ad techniques and offensi for Red Team, with a specific focus on the Rust programming language.RustScan - The Modern Port Scanner.Rusty Hog - A suite of secret scanners built in Rust for performance. Based on TruffleHog.Rust - Rust port of LayeredSyscall, designed to perform indirect syscalls while generating legitimate API call stack frames by abusing Exception Handling (VEH) to bypass user-land EDR hooks in Windows.Scrying - A tool for collecting RDP, web and all in one place.Shadow-rs - Windows Kernel Rootkit in Rust.Shelter - ROP-based sleep obfuscation to evade memory scanners.Skanuvaty - Dangerously fast DNS/network/port scannerSniffglue - Secure multithreaded packet sniffer.Split - Apply a divide and conquer approach to bypass EDRs.Unwinder - Call stack spoofing for Rust. - Rusty Injection - Shellcode Reflective DLL Injection (sRDI) in Rust (Codename: Venom).WStunnel - Tunnel all your traffic o or HTTP2 - Bypass firewalls/DPI - Static binary a.X8 - Hidden parameters discovery suiteUseful Libraries
LibAFL - Ad Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_std, ...Litcrypt - A Rust compiler plugin to encrypt string literal at compile time.Rustls - A modern TLS library in Rust.Contributing
Found an awesome package, article, blog, video etc.? Send me a pull request! Just follow the guidelines. Thank you!
License
![CC0]()
项目信息
开发语言：未知
Star 数：121
技术要点
该项目属于红蓝攻防方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Curated list of projects, articles and more related to Offensive Security and Red Teaming. Completely written in Rust.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。
从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。
使用与学习建议
1. 下载源码压缩包，解压到本地环境。
2. 根据项目类型准备对应的运行环境与依赖。
3. 按照 README 中的步骤完成配置与部署。
4. 在隔离的测试环境中运行验证，避免影响生产系统。
免责声明
本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。