github.com / fluffysnaff
fluffysnaff/ fluffy-injector
Rust·22 files·commit 9fef9cc·scanned 1h ago·cached ✓
19/100
LOW RISK
Minor findings consistent with the project type. Nothing reachable from install hooks.
verdict accurate?
Research / educational context
threat-state: lowlive
FINDINGS ░▒▓
warningRust unsafe blockunsafe blocks bypass Rust's memory safety guarantees. Malware uses them for raw pointer manipulation, shellcode injection, or calling dangerous foreign functions.src/core/icon_loader.rs
let count =
unsafe { ExtractIconExW(PCWSTR(wide_path.as_ptr()), 0, None, Some(&mut h_icon), 1) };
if count == 0 || h_icon.is_invalid() {
return None;+3warningRust unsafe blockunsafe blocks bypass Rust's memory safety guarantees. Malware uses them for raw pointer manipulation, shellcode injection, or calling dangerous foreign functions.src/core/injector.rs
let start_routine =
unsafe { std::mem::transmute::<usize, LPTHREAD_START_ROUTINE>(load_library) };
let thread = unsafe {
Owned::new(CreateRemoteThread(+3warningRust unsafe blockunsafe blocks bypass Rust's memory safety guarantees. Malware uses them for raw pointer manipulation, shellcode injection, or calling dangerous foreign functions.src/core/process_scanner.rs
fn for_each_process_entry(mut visit: impl FnMut(&PROCESSENTRY32W)) -> windows::core::Result<()> {
let snapshot = unsafe { Owned::new(CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0)?) };
let mu...+3infoSuspicious file in repoExecutable file (Install-FluffyInjector.ps1) in repositoryinstaller/Install-FluffyInjector.ps1+2
Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.
11 files scanned @ 9fef9cc | 9/25/2026 | heuristic scan — always review manually
risk by category
code execution17
network & exfiltration0
file system access0
obfuscation0
supply chain2
owasp / injection0
telemetry
files 11/22rules hit 5engine v6commit 9fef9cc
github
fluffysnaff/fluffy-injector
Simple DLL injector in Rust
25
2
574d
22 files
11 scanned(50%)
9fef9cc
architecture░▒▓
entry (1) flagged (5) pkg (18)
29 nodes · 28 edgesscroll to zoom · click node to jump to finding