SharpHide | Tool to create hidden registry keys

 by   outflanknl C# Version: Current License: No License

kandi X-RAY | SharpHide Summary

kandi X-RAY | SharpHide Summary

SharpHide is a C# library. SharpHide has no bugs, it has no vulnerabilities and it has low support. You can download it from GitHub.

Just a nice persistence trick to confuse DFIR investigation. Uses NtSetValueKey native API to create a hidden (null terminated) registry key. This works by adding a null byte in front of the UNICODE_STRING key valuename. More info about this technique can be found in the following whitepaper: The tool uses the following registry path in which it creates the hidden run key: (HKCU if user, else HKLM)\SOFTWARE\Microsoft\Windows\CurrentVersion\Run".
Support
    Quality
      Security
        License
          Reuse

            kandi-support Support

              SharpHide has a low active ecosystem.
              It has 394 star(s) with 95 fork(s). There are 23 watchers for this library.
              OutlinedDot
              It had no major release in the last 6 months.
              There are 0 open issues and 1 have been closed. On average issues are closed in 8 days. There are no pull requests.
              It has a neutral sentiment in the developer community.
              The latest version of SharpHide is current.

            kandi-Quality Quality

              SharpHide has 0 bugs and 0 code smells.

            kandi-Security Security

              SharpHide has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.
              SharpHide code analysis shows 0 unresolved vulnerabilities.
              There are 0 security hotspots that need review.

            kandi-License License

              SharpHide does not have a standard license declared.
              Check the repository for any license declaration and review the terms closely.
              OutlinedDot
              Without a license, all rights are reserved, and you cannot use the library in your applications.

            kandi-Reuse Reuse

              SharpHide releases are not available. You will need to build from source code and install.
              Installation instructions are not available. Examples and code snippets are available.

            Top functions reviewed by kandi - BETA

            kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
            Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of SharpHide
            Get all kandi verified functions for this library.

            SharpHide Key Features

            No Key Features are available at this moment for SharpHide.

            SharpHide Examples and Code Snippets

            No Code Snippets are available at this moment for SharpHide.

            Community Discussions

            No Community Discussions are available at this moment for SharpHide.Refer to stack overflow page for discussions.

            Community Discussions, Code Snippets contain sources that include Stack Exchange Network

            Vulnerabilities

            No vulnerabilities reported

            Install SharpHide

            You can download it from GitHub.

            Support

            For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .
            Find more information at:

            Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items

            Find more libraries
            CLONE
          • HTTPS

            https://github.com/outflanknl/SharpHide.git

          • CLI

            gh repo clone outflanknl/SharpHide

          • sshUrl

            git@github.com:outflanknl/SharpHide.git

          • Stay Updated

            Subscribe to our newsletter for trending solutions and developer bootcamps

            Agree to Sign up and Terms & Conditions

            Share this Page

            share link