Process Argument Spoofing is a technique used to manipulate or hide command-line arguments of a process, making it harder for security tools to detect the actual parameters passed to the program.

⬇️ Download

• Process argument spoofing implementation in Rust
• Uses Windows API and NT API for process manipulation
• Demonstrates process memory manipulation techniques

• Rust toolchain
• Required dependencies:
  • winapi
  • ntapi
  • memoffset

1. Clone the repository
2. Navigate to the project directory
3. Run cargo build to compile the project

1. Build the project using Cargo:

   cargo build --release

2. Run the executable:

   ./target/release/process_argument_spoofing.exe

• https://www.ired.team/offensive-security/defense-evasion/parent-process-id-ppid-spoofing

@5mukx