Interesting protection concept i came up with.

Note

If this reprository is useful to you in in any shape or form please give it a star.

How it works

This protection works by taking all the assembly instructions in the code section and storing them in a table that will be encrypted. After that the instruction is replaced by a debugger breakpoint. On runtime the host processs will debug the child process and restore the original instructions.

How to use

1. Make sure you have rust installed
2. Open it in VS Code or your preferred IDE
3. Run cargo run --bin infector -- <file>
4. Run cargo build --release --bin runtime

Prerequisites

1. Install rust
2. Install windows toolchain

Setup

1. Run cargo run --bin infector -- <file>
2. Run cargo build --release --target=x86_64-pc-windows-msvc --bin runtime

Disclaimer

This project is based on https://github.com/melotic/rekk

Contributing

1. Fork it
2. Create your branch (git checkout -b my-change)
3. Commit your changes (git commit -am 'changed something')
4. Push to the branch (git push origin my-change)
5. Create new pull request