r77-rootkit icon indicating copy to clipboard operation
r77-rootkit copied to clipboard

Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.

Results 17 r77-rootkit issues
Sort by recently updated
recently updated
newest added

prior to windows server 2019,after R77 installed,the console application with no user32.dll import such as net.exe and others still occasionally fail to run with access denied or other error.I guess...

bug

https://github.com/user-attachments/assets/b201c6b5-6c82-42ec-aca5-4daf3371632e Kaspersky is running,console application acting weird,gui application performs normal.Not sure why BTW,the CreatePublicNamePipe() function need to free some resource like the PSID valiable and etc Also,I am thinking that...

Networking can be prohibited through the process pid or process name or port, so that the playability can be better. I hope the author can adopt it.

I have installed r77 for test on several servers from Windows Server 2012 to windows Server 2022,and I have exprienced the same issue.,which server's service like RDP,IIS,FTP server,etc refuses outside...

bug

Does it still work and hides CPU/GPU usage of the process on latest windows releases?

i need a dll injector or a dll to capture if you dont have time if you kno someonem which one is perfect in these things can i get contant...

Hi, I'm running into an issue when running the shellcode, and I think it may be because of r77. I made my own dll loader and am using that to...

question