# joaoviictorti/RustRedOps

Repository for advanced Red Team techniques focused on Rust

Repository: https://github.com/joaoviictorti/RustRedOps
Canonical: https://ross.abutalabs.com/products/rustredops
Language: Rust
License: Apache-2.0
License Family: permissive
Topics: rust, windows, offensive-security, redteam
Last push: 2025-12-29T16:05:49+00:00

## Health v2 (maintenance only)
Score: 53/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 59, release rhythm 35, longevity 72
- inputs: {"age_days": 1008, "days_push": 247, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1900, forks 214 (observed 2026-08-28T04:05:51.534948+00:00)

## What it is
RustRedOps is a collection of red team tools and technique implementations written in Rust, primarily targeting Windows. It provides working examples of offensive security techniques such as process injection, API hooking, shellcode encryption, anti-debugging, and syscall unhooking for penetration testers and security professionals.

## Use cases
- learn red team techniques implemented in rust
- implement process injection like APC injection in rust
- encrypt and decrypt shellcode with AES or RC4
- hook and intercept windows api calls
- evade analysis with anti-debug and anti-analysis tricks
- extract saved wifi passwords using winapi
- unhook ntdll with hells halos or tartarus gate
- build shellcode loaders for security assessments

## When to choose
- You are a red teamer or pentester who wants Rust reference code for Windows offensive techniques
- You need concrete implementations of injection, hooking, or shellcode loading to adapt into your own tooling
- You are studying evasion techniques such as anti-debugging, block DLL policy, or compile-time string encryption

## When to avoid
- You need a polished, production-ready offensive framework with a unified CLI or team server rather than standalone technique demos
- You are targeting Linux or macOS - nearly all techniques are Windows-specific
- You want a turnkey tool with no requirement to read and adapt Rust code yourself

## Facets
- artifact type: library
- maturity: active
- function: security, penetration-testing
- domain: security, penetration-testing
- platform: windows, rust
- tags: red-team, offensive-security, process-injection, shellcode, api-hooking, anti-debugging, edr-evasion, windows-api, syscall-unhooking, code-examples

## Member repositories
- joaoviictorti/RustRedOps (main) score 53

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:51.534948+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:12:03.715699+00:00, confidence not recorded.
  - readme: https://github.com/joaoviictorti/RustRedOps (fetched 2026-08-28T04:05:51.534948+00:00, sha 396587469032)
- Data as of 2026-08-30T08:39:29.467469+00:00.