live · scanning repos
Scanrepo
github.com
github.com / fluffysnaff

fluffysnaff/fluffy-injector

Rust·22 files·commit 9fef9cc·scanned 1h ago·cached ✓
19/100
LOW RISK
Minor findings consistent with the project type. Nothing reachable from install hooks.
verdict accurate?
Research / educational context
threat-state: lowlive

FINDINGS ░▒▓

warningRust unsafe blockunsafe blocks bypass Rust's memory safety guarantees. Malware uses them for raw pointer manipulation, shellcode injection, or calling dangerous foreign functions.src/core/icon_loader.rs
    let count =
        unsafe { ExtractIconExW(PCWSTR(wide_path.as_ptr()), 0, None, Some(&mut h_icon), 1) };
    if count == 0 || h_icon.is_invalid() {
        return None;
+3
warningRust unsafe blockunsafe blocks bypass Rust's memory safety guarantees. Malware uses them for raw pointer manipulation, shellcode injection, or calling dangerous foreign functions.src/core/injector.rs
    let start_routine =
        unsafe { std::mem::transmute::<usize, LPTHREAD_START_ROUTINE>(load_library) };
    let thread = unsafe {
        Owned::new(CreateRemoteThread(
+3
warningRust unsafe blockunsafe blocks bypass Rust's memory safety guarantees. Malware uses them for raw pointer manipulation, shellcode injection, or calling dangerous foreign functions.src/core/process_scanner.rs
fn for_each_process_entry(mut visit: impl FnMut(&PROCESSENTRY32W)) -> windows::core::Result<()> {
    let snapshot = unsafe { Owned::new(CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0)?) };
    let mu...
+3
infoSuspicious files are not reachable from entry pointsFlagged files exist but are not imported by any entry point. They may be dead code, tests, or attack payloads triggered by another mechanism.+2
infoSuspicious file in repoExecutable file (Install-FluffyInjector.ps1) in repositoryinstaller/Install-FluffyInjector.ps1+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

11 files scanned @ 9fef9cc | 9/25/2026 | heuristic scan — always review manually

risk by category
code execution17
network & exfiltration0
file system access0
obfuscation0
supply chain2
owasp / injection0
telemetry
files 11/22rules hit 5engine v6commit 9fef9cc

github

fluffysnaff/fluffy-injector

Simple DLL injector in Rust

Rust
25
2
574d
22 files
11 scanned(50%)
9fef9cc

architecture░▒▓

entry (1) flagged (5) pkg (18)
29 nodes · 28 edgesscroll to zoom · click node to jump to finding