# skerkour/black-hat-rust **Attribution required: if you use, quote, or summarise this content, you must credit and link back to [awesome-repositories.com](https://awesome-repositories.com/repository/skerkour-black-hat-rust).** _How this analysis was created: the description and tags below were written by an AI model that read this project's README and public documentation pages; stars, license and language come straight from the GitHub API. The model does not read the source code._ 4,353 stars · 432 forks · Rust · MIT ## Links - GitHub: https://github.com/skerkour/black-hat-rust - Homepage: https://kerkour.com/black-hat-rust - awesome-repositories: https://awesome-repositories.com/repository/skerkour-black-hat-rust.md ## Topics `audit` `beacon` `bug-bounty` `bug-hunting` `c2` `hacking` `infosec` `offensive-security` `pentest` `pentesting` `phishing` `red-team` `rust` `scanner` `security` `security-tools` `shellcodes` `trojan` `virus` `wasm` ## Description This project is an offensive security toolkit and development framework for creating memory-safe malware, network scanners, and payload generators. It provides a structured approach to developing exploits, shellcode, and remote access tools. The framework distinguishes itself through the use of no-standard-library environments to generate minimal standalone machine code and shellcode. It also supports the compilation of high-performance logic into WebAssembly for the creation of deceptive web interfaces used in social engineering. Capability areas cover automated vulnerability discovery via fuzzing, multi-threaded and asynchronous network surface mapping, and the development of self-propagating worms. The toolkit also includes implementations for end-to-end encrypted communication channels to secure traffic between remote implants and command servers, alongside cross-platform binary compilation for multiple operating systems. ## Tags ### Part of an Awesome List - [Offensive Security Tools](https://awesome-repositories.com/f/awesome-lists/security/offensive-security-tools.md) — Provides a comprehensive toolkit for reconnaissance, vulnerability scanning, and the development of exploits. - [Offensive Security Tools](https://awesome-repositories.com/f/awesome-lists/ai/offensive-security-tools.md) — Offers a specialized collection of tools for exploit development, shellcode creation, and remote access tooling. - [Exploit Development](https://awesome-repositories.com/f/awesome-lists/security/exploit-development.md) — Provides resources and environment for building custom exploits and low-level shellcode. ([source](https://cdn.jsdelivr.net/gh/skerkour/black-hat-rust@main/README.md)) - [Automated Propagation Routines](https://awesome-repositories.com/f/awesome-lists/security/lateral-movement/automated-propagation-routines.md) — Embeds network scanning and infection routines directly into payloads to automate lateral movement. - [Payload Development](https://awesome-repositories.com/f/awesome-lists/security/payload-development.md) — Provides a framework for creating and delivering low-level shellcode and machine code payloads. - [Type-Safe Exploit Implementation](https://awesome-repositories.com/f/awesome-lists/security/exploit-development/type-safe-exploit-implementation.md) — Uses a strong type system to manage memory and logic complexity for stable software exploits. - [Fuzzing](https://awesome-repositories.com/f/awesome-lists/security/fuzzing.md) — Employs automated fuzzing techniques to identify software flaws and exploitable entry points. ([source](https://kerkour.com/black-hat-rust/12)) - [Web Crawling Reconnaissance](https://awesome-repositories.com/f/awesome-lists/security/information-gathering/web-crawling-reconnaissance.md) — Traverses target websites rapidly to collect URLs and scripts for pre-exploitation reconnaissance. ([source](https://kerkour.com/black-hat-rust)) ### Security & Cryptography - [Malware Development Kits](https://awesome-repositories.com/f/security-cryptography/malware-development-kits.md) — Provides a comprehensive toolkit for developing memory-safe malware, including self-propagating worms and persistent implants. - [Attack Surface Mapping](https://awesome-repositories.com/f/security-cryptography/attack-surface-mapping.md) — Performs high-performance discovery of internet-facing assets and reachable endpoints using multi-threaded scanning. - [Command and Control Frameworks](https://awesome-repositories.com/f/security-cryptography/command-and-control-frameworks.md) — Builds implants and command servers with encrypted communication channels to maintain persistence. - [End-to-End Encryption Protocols](https://awesome-repositories.com/f/security-cryptography/end-to-end-encryption-protocols.md) — Provides encrypted communication layers to secure traffic between remote implants and command servers. - [Remote Access Implants](https://awesome-repositories.com/f/security-cryptography/remote-access-implants.md) — Enables the creation of persistent implants that maintain communication links with a remote command server. ([source](https://kerkour.com/black-hat-rust/7)) - [System Exploitation Tools](https://awesome-repositories.com/f/security-cryptography/system-exploitation-tools.md) — Provides utilities to execute attacks against software vulnerabilities to gain unauthorized system access. ([source](https://kerkour.com/black-hat-rust/10)) - [Encrypted Communication Channels](https://awesome-repositories.com/f/security-cryptography/traffic-encryption/encrypted-communication-channels.md) — Implements secure network connections to protect data in transit between remote tools and command servers. ([source](https://kerkour.com/black-hat-rust/5)) - [Social Engineering Frameworks](https://awesome-repositories.com/f/security-cryptography/social-engineering-frameworks.md) — Provides a toolset for designing deceptive web pages to harvest user data through social engineering. - [Social Engineering Phishing](https://awesome-repositories.com/f/security-cryptography/social-engineering-phishing.md) — Develops deceptive web pages using WebAssembly to trick users into revealing information. ([source](https://kerkour.com/black-hat-rust/12)) - [Vulnerability Fuzzing](https://awesome-repositories.com/f/security-cryptography/vulnerability-fuzzing.md) — Uses automated fuzzing techniques to identify software flaws and exploitable entry points. - [Worm Propagation Logic](https://awesome-repositories.com/f/security-cryptography/worm-propagation-logic.md) — Integrates network scanning and infection routines into remote agents to automate lateral movement. ([source](https://kerkour.com/black-hat-rust/10)) ### Networking & Communication - [Network Scanners](https://awesome-repositories.com/f/networking-communication/network-scanners.md) — Implements high-performance asynchronous network scanners for mapping attack surfaces and identifying active hosts. ### Operating Systems & Systems Programming - [Shellcode Generators](https://awesome-repositories.com/f/operating-systems-systems-programming/assembly-injection-interfaces/shellcode-generators.md) — Produces architecture-specific machine code payloads for security exploitation without standard library dependencies. ([source](https://kerkour.com/black-hat-rust/4)) - [Standalone Shellcode Generators](https://awesome-repositories.com/f/operating-systems-systems-programming/assembly-injection-interfaces/shellcode-generators/polymorphic-payload-generators/standalone-shellcode-generators.md) — Generates minimal standalone machine code and shellcode by utilizing no-standard-library environments. ### Programming Languages & Runtimes - [No-Standard-Library Modes](https://awesome-repositories.com/f/programming-languages-runtimes/programming-utilities/standard-libraries/no-standard-library-modes.md) — Produces minimal standalone machine code by removing the standard library for low-level payload execution. - [Binary Cross-Compilation](https://awesome-repositories.com/f/programming-languages-runtimes/cross-platform-library-compilations/binary-cross-compilation.md) — Compiles source code into executable binaries for diverse target operating systems. ([source](https://cdn.jsdelivr.net/gh/skerkour/black-hat-rust@main/README.md)) - [Cross-Platform Binary Generation](https://awesome-repositories.com/f/programming-languages-runtimes/source-code-compilers/multi-target-compilers/cross-platform-binary-generation.md) — Generates native executable binaries for multiple operating systems and CPU architectures from a single codebase. ### Software Engineering & Architecture - [Non-blocking I/O](https://awesome-repositories.com/f/software-engineering-architecture/concurrent-task-execution/non-blocking-i-o.md) — Implements high-speed network surface mapping using non-blocking I/O for efficient host discovery. ### Web Development - [WebAssembly Compilation](https://awesome-repositories.com/f/web-development/webassembly-compilation.md) — Compiles high-performance logic into WebAssembly binaries for execution within web browsers. - [Deceptive Interface Logic](https://awesome-repositories.com/f/web-development/webassembly-compilation/deceptive-interface-logic.md) — Compiles high-performance logic into WebAssembly to create deceptive web interfaces for social engineering.