MCPcopy Create free account

hub / github.com/0xJs/RedTeaming_CheatSheet / functions

Functions1,919 in github.com/0xJs/RedTeaming_CheatSheet

⨍ Functions 1,919◇ Types & classes 204
↓ 1 callersFunctionDumpProcessHeaders
coding/projects/Hooking/Detours/detours/samples/talloc/talloc.cpp:154
↓ 1 callersFunctionDumpProcessHeaders
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/talloc/talloc.cpp:154
↓ 1 callersFunctionEDll1Function
coding/projects/Hooking/Detours/detours/samples/einst/edll1x.cpp:40
↓ 1 callersFunctionEDll1Function
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/einst/edll1x.cpp:40
↓ 1 callersFunctionEDll2Function
coding/projects/Hooking/Detours/detours/samples/einst/edll2x.cpp:40
↓ 1 callersFunctionEDll2Function
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/einst/edll2x.cpp:40
↓ 1 callersFunctionEDll3Function
coding/projects/Hooking/Detours/detours/samples/einst/edll3x.cpp:67
↓ 1 callersFunctionEDll3Function
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/einst/edll3x.cpp:67
↓ 1 callersFunctionEditFile
coding/projects/Hooking/Detours/detours/samples/impmunge/impmunge.cpp:246
↓ 1 callersFunctionEditFile
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/impmunge/impmunge.cpp:246
↓ 1 callersFunctionEnablePrivilege
coding/projects/Windows_Security/SecurityHelper/SecurityHelper.cpp:47
↓ 1 callersFunctionExceptCatch
coding/projects/Hooking/Detours/detours/samples/excep/excep.cpp:23
↓ 1 callersFunctionExceptCatch
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/excep/excep.cpp:23
↓ 1 callersFunctionFindMsvcr
coding/projects/Hooking/Detours/detours/samples/tracebld/trcbld.cpp:489
↓ 1 callersFunctionFindMsvcr
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/tracebld/trcbld.cpp:489
↓ 1 callersFunctionFindSectionName
coding/projects/Hooking/Detours/detours/samples/withdll/withdll.cpp:181
↓ 1 callersFunctionFindSectionName
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/withdll/withdll.cpp:181
↓ 1 callersFunctionFindTarget
coding/projects/WoW64/implant.cpp:132
↓ 1 callersFunctionFindTarget
coding/projects/Code_Injection/MapView/implant.cpp:135
↓ 1 callersFunctionFindTarget
coding/projects/Code_Injection/AsyncCalls/implant.cpp:135
↓ 1 callersFunctionFindTarget
coding/projects/Code_Injection/Remote_Process_DLL/injectDLL.cpp:9
↓ 1 callersFunctionFindTarget
coding/projects/Code_Injection/ThreadContext/implant.cpp:89
↓ 1 callersFunctionFindTarget
coding/projects/Code_Injection/Remote_Process/implant.cpp:12
↓ 1 callersFunctionFindTarget
coding/projects/VeraCryptPasswordStealer/VCpersist/vcpesrsist.cpp:91
↓ 1 callersFunctionFindTarget
coding/projects/VeraCryptPasswordStealer/VCmigrate/vcmigrate.cpp:78
↓ 1 callersFunctionFindThread
coding/projects/Code_Injection/AsyncCalls/implant.cpp:163
↓ 1 callersFunctionFindThread
coding/projects/Code_Injection/ThreadContext/implant.cpp:117
↓ 1 callersFunctionGePr
coding/projects/Dropper_AES_Favicon_Explorer_NoImports/implant.cpp:240
↓ 1 callersFunctionGePr
coding/projects/Code_Injection/Remote_Process_Variatons/implant.cpp:274
↓ 1 callersFunctionGePr
coding/projects/Dropper_AES_Favicon_Notepad/implant.cpp:155
↓ 1 callersFunctionGePr
coding/projects/Dropper_AES_Reflected_DLL_MapView_Explorer/implant.cpp:323
↓ 1 callersFunctionGePr
coding/projects/Dropper_AES_Favicon_MapView_Explorer/implant.cpp:324
↓ 1 callersFunctionGePr
coding/projects/Dropper_XOR_Favicon_Notepad/implant.cpp:133
↓ 1 callersFunctionGePr
coding/projects/Dropper_AES_Favicon_Explorer_PayloadControl/implant.cpp:251
↓ 1 callersFunctionGetClockInfo
/////////////////////////////////////////////////////////////////////////
coding/projects/Hooking/Detours/detours/samples/cping/cping.cpp:1088
↓ 1 callersFunctionGetClockInfo
/////////////////////////////////////////////////////////////////////////
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/cping/cping.cpp:1088
↓ 1 callersFunctionGetFileContents
coding/projects/VeraCryptPasswordStealer/sRDI/FunctionTest/FunctionTest.cpp:54
↓ 1 callersFunctionGetFileContents
coding/projects/Dropper_AES_Reflected_DLL_MapView_Explorer/sRDI/FunctionTest/FunctionTest.cpp:54
↓ 1 callersFunctionGetFileContents
coding/projects/ReflectiveCode/Shellcode_ReflectiveDLL_Loader/sRDI/FunctionTest/FunctionTest.cpp:54
↓ 1 callersFunctionGetKeyValue
coding/projects/Hooking/Detours/detours/samples/cping/cping.cpp:850
↓ 1 callersFunctionGetKeyValue
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/cping/cping.cpp:850
↓ 1 callersFunctionGetProcAddressR
coding/projects/VeraCryptPasswordStealer/sRDI/Native/Loader.cpp:21
↓ 1 callersFunctionGetProcAddressR
coding/projects/Dropper_AES_Reflected_DLL_MapView_Explorer/sRDI/Native/Loader.cpp:21
↓ 1 callersFunctionGetProcAddressR
coding/projects/ReflectiveCode/Shellcode_ReflectiveDLL_Loader/sRDI/Native/Loader.cpp:21
↓ 1 callersMethodGetProcAddressR
(IntPtr PEPointer, string functionName)
coding/projects/VeraCryptPasswordStealer/sRDI/DotNet/Program.cs:412
↓ 1 callersMethodGetProcAddressR
(IntPtr PEPointer, string functionName)
coding/projects/Dropper_AES_Reflected_DLL_MapView_Explorer/sRDI/DotNet/Program.cs:412
↓ 1 callersMethodGetProcAddressR
(IntPtr PEPointer, string functionName)
coding/projects/ReflectiveCode/Shellcode_ReflectiveDLL_Loader/sRDI/DotNet/Program.cs:412
↓ 1 callersFunctionGetReflectiveLoaderOffset
coding/projects/ReflectiveCode/ReflectiveDLL_Loader/implant/implant.cpp:82
↓ 1 callersFunctionGetSections
coding/projects/Hooking/Detours/detours/samples/withdll/withdll.cpp:200
↓ 1 callersFunctionGetSections
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/withdll/withdll.cpp:200
↓ 1 callersFunctionGetSleptTicks
coding/projects/Hooking/Detours/detours/samples/slept/sleepbed.cpp:40
↓ 1 callersFunctionGetSleptTicks
coding/projects/Hooking/Detours/detours/samples/slept/slept.cpp:40
↓ 1 callersFunctionGetSleptTicks
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/slept/sleepbed.cpp:40
↓ 1 callersFunctionGetSleptTicks
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/slept/slept.cpp:40
↓ 1 callersFunctionGo
coding/projects/Code_Injection/Remote_Process_DLL/implantDLL.cpp:12
↓ 1 callersFunctionHasSpace
coding/projects/Hooking/Detours/detours/samples/tracebld/trcbld.cpp:372
↓ 1 callersFunctionHasSpace
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/tracebld/trcbld.cpp:372
↓ 1 callersFunctionHashFunctionName
coding/projects/VeraCryptPasswordStealer/sRDI/Native/Loader.cpp:81
↓ 1 callersFunctionHashFunctionName
(name, module = None)
coding/projects/VeraCryptPasswordStealer/sRDI/Python/ShellcodeRDI.py:24
↓ 1 callersFunctionHashFunctionName
coding/projects/VeraCryptPasswordStealer/sRDI/FunctionTest/FunctionTest.cpp:74
↓ 1 callersFunctionHashFunctionName
coding/projects/Dropper_AES_Reflected_DLL_MapView_Explorer/sRDI/Native/Loader.cpp:81
↓ 1 callersFunctionHashFunctionName
(name, module = None)
coding/projects/Dropper_AES_Reflected_DLL_MapView_Explorer/sRDI/Python/ShellcodeRDI.py:24
↓ 1 callersFunctionHashFunctionName
coding/projects/Dropper_AES_Reflected_DLL_MapView_Explorer/sRDI/FunctionTest/FunctionTest.cpp:74
↓ 1 callersFunctionHashFunctionName
coding/projects/ReflectiveCode/Shellcode_ReflectiveDLL_Loader/sRDI/Native/Loader.cpp:81
↓ 1 callersFunctionHashFunctionName
(name, module = None)
coding/projects/ReflectiveCode/Shellcode_ReflectiveDLL_Loader/sRDI/Python/ShellcodeRDI.py:24
↓ 1 callersFunctionHashFunctionName
coding/projects/ReflectiveCode/Shellcode_ReflectiveDLL_Loader/sRDI/FunctionTest/FunctionTest.cpp:74
↓ 1 callersFunctionHookem
Set hooks on MessageBox
coding/projects/Hooking/Detours/hookem.cpp:23
↓ 1 callersFunctionHookem
Set hook on origFunc()
coding/projects/Hooking/IAT/hookem.cpp:25
↓ 1 callersFunctionHookem
Set hooks on WideCharToMultiByte
coding/projects/VeraCryptPasswordStealer/VCsniff/VCsniff.cpp:58
↓ 1 callersFunctionInj
coding/projects/Dropper_AES_Favicon_Explorer_NoImports/implant.cpp:287
↓ 1 callersFunctionInj
coding/projects/Code_Injection/Remote_Process_Variatons/implant.cpp:321
↓ 1 callersFunctionInj
coding/projects/Dropper_AES_Favicon_Notepad/implant.cpp:194
↓ 1 callersFunctionInj
coding/projects/Dropper_XOR_Favicon_Notepad/implant.cpp:172
↓ 1 callersFunctionInj
coding/projects/Dropper_AES_Favicon_Explorer_PayloadControl/implant.cpp:298
↓ 1 callersFunctionInject
coding/projects/Code_Injection/Remote_Process/implant.cpp:41
↓ 1 callersFunctionInject
variants of classic injection
coding/projects/VeraCryptPasswordStealer/VCpersist/vcpesrsist.cpp:120
↓ 1 callersFunctionInjectAPC
APC injection
coding/projects/Code_Injection/AsyncCalls/implant.cpp:183
↓ 1 callersFunctionInjectCTX
set remote process/thread context
coding/projects/Code_Injection/ThreadContext/implant.cpp:137
↓ 1 callersFunctionInjectVIEW
map section views injection
coding/projects/Code_Injection/MapView/implant.cpp:183
↓ 1 callersFunctionInjectVIEW
coding/projects/Dropper_AES_Reflected_DLL_MapView_Explorer/implant.cpp:369
↓ 1 callersFunctionInjectVIEW
coding/projects/Dropper_AES_Favicon_MapView_Explorer/implant.cpp:370
↓ 1 callersFunctionInjectWOW64
coding/projects/WoW64/implant.cpp:201
↓ 1 callersFunctionInjectWOW64
coding/projects/VeraCryptPasswordStealer/VCmigrate/vcmigrate.cpp:147
↓ 1 callersFunctionIs64BitDLL
coding/projects/VeraCryptPasswordStealer/sRDI/Native/Loader.cpp:55
↓ 1 callersFunctionIs64BitDLL
coding/projects/Dropper_AES_Reflected_DLL_MapView_Explorer/sRDI/Native/Loader.cpp:55
↓ 1 callersFunctionIs64BitDLL
coding/projects/ReflectiveCode/Shellcode_ReflectiveDLL_Loader/sRDI/Native/Loader.cpp:55
↓ 1 callersMethodIs64BitDLL
(byte[] dllBytes)
coding/projects/VeraCryptPasswordStealer/sRDI/DotNet/Program.cs:394
↓ 1 callersMethodIs64BitDLL
(byte[] dllBytes)
coding/projects/Dropper_AES_Reflected_DLL_MapView_Explorer/sRDI/DotNet/Program.cs:394
↓ 1 callersMethodIs64BitDLL
(byte[] dllBytes)
coding/projects/ReflectiveCode/Shellcode_ReflectiveDLL_Loader/sRDI/DotNet/Program.cs:394
↓ 1 callersFunctionIsInherited
//////////////////////////////////////////////////////// Detours
coding/projects/Hooking/Detours/detours/samples/tracebld/trcbld.cpp:2312
↓ 1 callersFunctionIsInherited
//////////////////////////////////////////////////////// Detours
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/tracebld/trcbld.cpp:2312
↓ 1 callersFunctionIsPayloadRunning
coding/projects/Dropper_AES_Reflected_DLL_MapView_Explorer/implant.cpp:425
↓ 1 callersFunctionIsPayloadRunning
coding/projects/Dropper_AES_Favicon_MapView_Explorer/implant.cpp:437
↓ 1 callersFunctionIsPayloadRunning
coding/projects/Dropper_AES_Favicon_Explorer_PayloadControl/implant.cpp:340
↓ 1 callersFunctionIsTerminate
coding/projects/Hooking/Detours/detours/samples/disas/disas.cpp:58
↓ 1 callersFunctionIsTerminate
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/disas/disas.cpp:58
↓ 1 callersFunctionLoadDLL
coding/projects/VeraCryptPasswordStealer/sRDI/ShellcodeRDI/ShellcodeRDI.c:117
↓ 1 callersFunctionLoadDLL
coding/projects/Dropper_AES_Reflected_DLL_MapView_Explorer/sRDI/ShellcodeRDI/ShellcodeRDI.c:117
↓ 1 callersFunctionLoadDLL
coding/projects/ReflectiveCode/Shellcode_ReflectiveDLL_Loader/sRDI/ShellcodeRDI/ShellcodeRDI.c:117
↓ 1 callersFunctionLoadFile
coding/projects/Hooking/Detours/detours/samples/tracebld/trcbld.cpp:4150
← previousnext →401–500 of 1,919, ranked by callers