Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature Request: Masking the program in task manager #71

Open
RushilKoul opened this issue Jun 6, 2021 · 12 comments
Open

Feature Request: Masking the program in task manager #71

RushilKoul opened this issue Jun 6, 2021 · 12 comments

Comments

@RushilKoul
Copy link

A really cool feature would be having an ability to hide the program in the task manager, or change the process name and/or icon to something else. Right now, A user can easily disable the backdoor by simply using the task manager.

@xp4xbox
Copy link
Owner

xp4xbox commented Jun 8, 2021

There is no way to hide a process from task manager, but there might be something else. Il look into it later.

@Hawkern
Copy link

Hawkern commented Jul 10, 2021

Or is there?

@xp4xbox
Copy link
Owner

xp4xbox commented Jul 10, 2021

Not possible.

@imhemish
Copy link

imhemish commented Aug 6, 2021

It is possible to give a custom icon using pyinstaller and giving a fake name which really looks like an initial componnet like Google service handler, explorer.exe or something like that

@xp4xbox
Copy link
Owner

xp4xbox commented Aug 6, 2021

Yeah, in the setup use the melt file option, and then pick an icon.

@gratisCobalt
Copy link

only thing I thought of is registering it as a service which will hide it from taskmanager task tab (would only be visible in taskmanager services tab) and it wont show on startup tab

@xp4xbox
Copy link
Owner

xp4xbox commented Jan 13, 2022

I will look into it.

@Hasham14
Copy link

Can we migrate the process like in meterpreter

@xp4xbox
Copy link
Owner

xp4xbox commented May 4, 2022

Can we migrate the process like in meterpreter

Forgot to respond to this, but no it is not possible, since migrating the process works by basically writing the payload into the process (would need to be able to have this work as shellcode)

@xp4xbox
Copy link
Owner

xp4xbox commented May 4, 2022

only thing I thought of is registering it as a service which will hide it from taskmanager task tab (would only be visible in taskmanager services tab) and it wont show on startup tab

I looked into this earlier, it is not possible without admin at least.

@xp4xbox xp4xbox closed this as completed May 4, 2022
@xp4xbox xp4xbox reopened this May 4, 2022
@xp4xbox
Copy link
Owner

xp4xbox commented May 4, 2022

Leaving it open incase there is another idea.

@gratisCobalt
Copy link

just an idea... you could inject it into an unsuspicious process like e.g. notepad (in taskmanager it should show the process as e.g. notepad.exe) but maybe it will lead into getting detected easier

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

6 participants