etc

~ scripts and random things
git clone https://github.com/djnnvx/etc.git
README.md (2074B)
      1 # 💀 HollowReaper - Hollow the Living, Control the Void
      2 HollowReaper is a mystical tool crafted to manipulate processes through Process Hollowing, allowing seamless injection of custom shellcode into a legitimate process. This arcane art lets you erase a process’s soul and replace it with your own will.
      3 
      4 ![hollowreaper](https://github.com/user-attachments/assets/fdfa66ff-97b2-4860-a4c3-c022cde5095a)
      5 
      6 ## 📜 The Ritual
      7 ### 💀 HollowReaper.c
      8 The vessel for your payload. This program performs process hollowing, carving out a legitimate process and injecting your shellcode into its husk.
      9 
     10 ### 🧬 LSASS_CDumper.c
     11 The soul binder. This shellcode:
     12 
     13 🛡️ Disables PPL using the cursed RTCore64.sys driver (BYOVD)
     14 
     15 🚫 Disables Credential Guard using forbidden kernel incantations
     16 
     17 💾 Extracts a Minidump from LSASS memory
     18 
     19 ### 🗝️ xor20charkey.py
     20 A local obfuscation utility. XOR-encrypts the shellcode using a custom 20-character key, shielding your payload from watchful eyes.
     21 
     22 ### 📦 RTCore64.sys
     23 A vulnerable driver — the ancient relic that grants direct access to kernel memory. Through this cursed artifact, you pierce the veil between userland and kernel.
     24 
     25 ## ⚗️ The Components
     26 | File	| Purpose |
     27 |-------|---------|
     28 |HollowReaper.c	| Hollow a process and inject the embedded shellcode |
     29 |LSASS_CDumper.c | Shellcode: disable PPL & Credential Guard, dump LSASS |
     30 |xor20charkey.py | Python script to XOR the shellcode with a 20-char key |
     31 |RTCore64.sys | Vulnerable driver for kernel memory access (BYOVD) |
     32 
     33 ## 🕯️ Usage Flow
     34 1️⃣ Compile LSASS_CDumper.c
     35 
     36 2️⃣ Use Donut to convert it into shellcode
     37 
     38 3️⃣ Obfuscate the shellcode using xor20charkey.py
     39 
     40 4️⃣ Embed the result into HollowReaper.c
     41 
     42 5️⃣ Run HollowReaper to hollow a process and unleash the payload
     43 
     44 --------------------------------------------------------------------------
     45 
     46 ⚠️ Disclaimer
     47 This tool is provided for educational and research purposes only. Use responsibly.
     48 The arcane always watches. 🧿
     49