MCPcopy Create free account

hub / github.com/D00MFist/Go4aRun / functions

Functions44 in github.com/D00MFist/Go4aRun

↓ 15 callersFunctionerrnoErr
errnoErr returns common boxed Errno values, to prevent allocations at runtime.
pkg/sliversyscalls/syscalls/zsyscalls_windows.go:26
↓ 2 callersFunctionGetTokenPrivileges
(token syscall.Token)
pkg/winsys/token.go:145
↓ 2 callersFunctioncreateHash
Encrypt Functions
pkg/useful/useful.go:20
↓ 1 callersFunctionAdjustTokenPrivileges
adjustTokenPrivileges from core zsyscall_windows.go
pkg/winsys/token.go:228
↓ 1 callersFunctionLookupPrivilegeName
(systemName string, luid int64)
pkg/winsys/token.go:125
↓ 1 callersFunctionLookupPrivilegeValue
(systemName string, name string, luid *int64)
pkg/winsys/token.go:85
↓ 1 callersFunctionMapPrivilegeValueToName
(names []string)
pkg/winsys/token.go:107
↓ 1 callersFunctiongetToken
(i *Inject)
pkg/winsys/token.go:71
↓ 1 callersFunctionnewWindowsProcess
(e *syscall.ProcessEntry32)
pkg/useful/useful.go:110
FunctionCreateProcess
(appName *uint16, commandLine *uint16, procSecurity *windows.SecurityAttributes, threadSecurity *windows.Secur
pkg/sliversyscalls/syscalls/zsyscalls_windows.go:112
FunctionCreateRemoteThread
(i *Inject)
pkg/winsys/inject.go:88
FunctionCreateRemoteThread
(hProcess windows.Handle, lpThreadAttributes *windows.SecurityAttributes, dwStackSize uint32, lpStartAddress u
pkg/sliversyscalls/syscalls/zsyscalls_windows.go:196
FunctionCreateThread
(lpThreadAttributes *windows.SecurityAttributes, dwStackSize uint32, lpStartAddress uintptr, lpParameter uintp
pkg/sliversyscalls/syscalls/zsyscalls_windows.go:209
FunctionDecrypt
(data []byte, passphrase string)
pkg/useful/useful.go:41
FunctionDeleteProcThreadAttributeList
(lpAttributeList *PROC_THREAD_ATTRIBUTE_LIST)
pkg/sliversyscalls/syscalls/zsyscalls_windows.go:179
FunctionEBAPCQueue
EBAPCQueue spawns shellcode in a remote process using Early Bird APC Queue Code Injection
pkg/useful/useful.go:172
FunctionEncrypt
(data []byte, passphrase string)
pkg/useful/useful.go:27
FunctionFindProcessByName
(processes []WindowsProcess, name string)
pkg/useful/useful.go:101
FunctionGetExitCodeThread
(hTread windows.Handle, lpExitCode *uint32)
pkg/sliversyscalls/syscalls/zsyscalls_windows.go:222
FunctionGetLoadLibAddress
(i *Inject)
pkg/winsys/inject.go:70
FunctionGetProcessHeap
()
pkg/sliversyscalls/syscalls/zsyscalls_windows.go:74
FunctionGetTokenUser
GetTokenUser returns the User associated with the given Token.
pkg/winsys/token.go:201
FunctionHeapAlloc
(hHeap windows.Handle, dwFlags uint32, dwBytes uintptr)
pkg/sliversyscalls/syscalls/zsyscalls_windows.go:87
FunctionHeapFree
(hHeap windows.Handle, dwFlags uint32, lpMem uintptr)
pkg/sliversyscalls/syscalls/zsyscalls_windows.go:184
FunctionImpersonateLoggedOnUser
(hToken windows.Token)
pkg/sliversyscalls/syscalls/zsyscalls_windows.go:246
FunctionInitializeProcThreadAttributeList
(lpAttributeList *PROC_THREAD_ATTRIBUTE_LIST, dwAttributeCount uint32, dwFlags uint32, lpSize *uintptr)
pkg/sliversyscalls/syscalls/zsyscalls_windows.go:62
FunctionMiniDumpWriteDump
(hProcess windows.Handle, pid uint32, hFile uintptr, dumpType uint32, exceptionParam uintptr, userStreamParam
pkg/sliversyscalls/syscalls/zsyscalls_windows.go:234
FunctionMoveFile
(source, destination string)
pkg/useful/useful.go:182
FunctionOpenProcessHandle
(i *Inject)
pkg/winsys/inject.go:13
FunctionProcesses
()
pkg/useful/useful.go:71
FunctionQueueUserAPC
(pfnAPC uintptr, hThread windows.Handle, dwData uintptr)
pkg/sliversyscalls/syscalls/zsyscalls_windows.go:167
FunctionSetTokenPrivilege
(i *Inject)
pkg/winsys/token.go:19
FunctionShellCodeCreateRemoteThread
ShellCodeCreateRemoteThread spawns shellcode in a remote process using CreateRemoteThread
pkg/useful/useful.go:157
FunctionUpdateProcThreadAttribute
(lpAttributeList *PROC_THREAD_ATTRIBUTE_LIST, dwFlags uint32, attribute uintptr, lpValue *uintptr, cbSize uint
pkg/sliversyscalls/syscalls/zsyscalls_windows.go:100
FunctionVirtualAllocEx
(i *Inject)
pkg/winsys/inject.go:35
FunctionVirtualAllocEx
(hProcess windows.Handle, lpAddress uintptr, dwSize uintptr, flAllocationType uint32, flProtect uint32)
pkg/sliversyscalls/syscalls/zsyscalls_windows.go:130
FunctionVirtualFreeEx
(i *Inject)
pkg/winsys/inject.go:131
FunctionVirtualProtectEx
(hProcess windows.Handle, lpAddress uintptr, dwSize uintptr, flNewProtect uint32, lpflOldProtect *uint32)
pkg/sliversyscalls/syscalls/zsyscalls_windows.go:155
FunctionWaitForSingleObject
(i *Inject)
pkg/winsys/inject.go:109
FunctionWriteProcessMemory
(i *Inject)
pkg/winsys/inject.go:52
FunctionWriteProcessMemory
(hProcess windows.Handle, lpBaseAddress uintptr, lpBuffer *byte, nSize uintptr, lpNumberOfBytesWritten *uintpt
pkg/sliversyscalls/syscalls/zsyscalls_windows.go:143
FunctionWriteShellcode
(PID int, Shellcode []byte)
pkg/useful/useful.go:148
Functionmain
Encrypts shellcode and stores as a go file to be leveraged in Go4it.go build Example passphrase is D00mfist
cmd/hide/hideit.go:18
Functionmain
()
cmd/run/Go4it.go:17