* Removes null bytes at end of string, then whitespace, and casts to string */

because of how weird interfaces get named, it's a lot easier to get all of the IPs, and then find the first one that isn't loopback or IPv6 might ruin

https://stackoverflow.com/questions/51691901/how-do-you-escape-characters-within-a-string-json-format * Escapes characters that would otherwise break

this will probably never get used but I'm too lazy to get rid of it

* Returns config to agent. Make modifications here. We're defining the config here so it's more "malleable", although this isn't a one-to-one */

WriteMemory writes the provided memory to the specified memory address. Does **not** check permissions, may cause panic if memory is not writable etc.

Fixes version output from go-sysinfo to suit the teamserver's parsing as of 1-1-2024

Generates an Agent ID of 4 lowercase letters See: https://codex-7.gitbook.io/codexs-terminal-window/red-team/red-team-dev/extending-havoc-c2/third-par

Sends the initial check-in to register the agent Forms and sends a POST request to teamserver with all required information Heavily reliant on elastic

with how the handler works right now, if someone just sends a command like `shell` the teamserver will send it, and we need to reject that

Based off of Blackhat Go: https://github.com/blackhat-go/bhg/blob/master/ch-2/tcp-scanner-final/main.go

A call to get some info in case you wanted to see that

Ne0nd0g is my goat don't have to put this together myself pog takes the raw bytes from a .NET PE and uses Ne0nd0g's go-clr to host the CLR and run it

Kill finds a process from a PID and terminates it.

Kill finds a process from a PID and terminates it.

TODO: Make a Windows version that looks nice We need to parse ACLs and stuff and that's hard :( This looks relevant but idk: https://github.com/

Currently unused - I want to try and do some unmanaged powershell stuff, but I need to learn how to do that first

TODO: This works very well on windows, not so well on Linux maybe we use a different package? specifically, it only works on linux with sudo per

TODO: Consider possibly doing that trick to run shellcode from the commandline? Maybe just do what OffensiveNotion does and make it a dropper?

Credit: https://github.com/chvancooten/maldev-for-dummies/blob/main/Exercises/Exercise%201%20-%20Basic%20Shellcode%20Loader/solutions/golang/BasicShel

Execute via system shell so we have access to shell internal commands