zeromemoryex / chaos-rootkit Goto Github PK

我该怎么部署它在我的电脑上？

hello sir
Would you please answer my two questions?
1- First, I have a question about Falcon Bypass. What is your opinion about falcon bypass?
2- If you have a zero day about it or you can make it, can I have it,? I mean to buy it for my company?

Subject: Unable to Connect to Rootkit - "INVALID_HANDLE_VALUE" Error

Description:

I've encountered an issue while trying to use the Chaos Rootkit. I followed the steps below:

1. Downloaded all the necessary rootkit files from the release page, including "Chaos-Rootkit.sys," "imgui.ini," and "ring3-gui.exe."

2. Launched "ring3-gui.exe."

3. Clicked on the "Connect to rootkit" button.

However, each time I attempt to connect to the rootkit, I encounter the following error message in the "ring3-gui.exe" console:

INVALID_HANDLE_VALUE

I would appreciate any help or guidance on resolving this issue. Thank you in advance for your assistance!

Best regards,
WilleLX1

After hiding a process the OS BSODs after some time - already reported by another users.

Also the console version does have a code mistake in it, its using PROTECTION_LEVEL_ANTIMALWARE_LIGHT instead of HIDE_PROC

You now have 2 members in your team.

https://bardeen.ai

bardeen.ai https://bardeen.ai

Size of Mane Grew's Team changed
 

Hey Mane Grew, we are writing to inform you that your team size has changed

From 1 to 2

You don't have to take any action, but this might have changed the price of
your subscription.

https://www.facebook.com/bardeenai https://twitter.com/bardeenai
https://www.youtube.com/channel/UCUPnzfAv4f7fajg-7jIVCiQ
https://www.linkedin.com/company/bardeen/ https://www.tiktok.com/@bardeen.ai

Is this malware able to escalate rights locally?

Please take a look

Hi, is it possible to hide registry entry’s as well?
I use a tool named reWASD to map controller buttons for call of duty, but it’s anticheat detect it as hack, wich is not, so I look for rootkit to hide reWASD completely in driver, processes and registry…
Cause cod dont even start if the tool is installed, even if its not running

I use the GUI interface program to hide the process, and then it will blue screen after about an hour or two

Is this malware able to escalate rights locally?

needs wdk? i am a new learner

Hello, I would like to know how do I make it so that when the driver loads automatically it does things for me without needing the usermode interface? for example : look for the process called test.exe elevate to winsystem ppl and then hide it from the task manager ?