Home

shadow-rs 🦀

This document presents an overview of the shadow-rs project, describing its features, instructions for use and details of the development process. shadow-rs is designed to provide an advanced set of tools for manipulating processes, threads, drivers and much more in the Windows kernel.

PS C:\Users\victor> .\shadow.exe --help
   _____ __              __
  / ___// /_  ____ _____/ /___ _      __
  \__ \/ __ \/ __ `/ __  / __ \ | /| / /
 ___/ / / / / /_/ / /_/ / /_/ / |/ |/ /
/____/_/ /_/\__,_/\__,_/\____/|__/|__/


Usage: shadow-rs.exe [OPTIONS] <COMMAND>

Commands:
  process    Operations related to processes
  thread     Operations related to threads
  driver     Operations related to drivers
  misc       Operations related to Misc
  port       Operations related to Port
  registry   Operations related to Registry
  module     Operations related to Module
  callback   Operations related to Callback
  injection  Operations related to Injection
  help       Print this message or the help of the given subcommand(s)

Options:
  -v, --verbose...
          Activate verbose mode (-v, -vv for additional levels)

  -h, --help
          Print help (see a summary with '-h')