MCPcopy Create free account

hub / github.com/Enelg52/KittyStager / functions

Functions209 in github.com/Enelg52/KittyStager

↓ 20 callersFunctionNewTask
(tag string, payload []byte)
internal/task/task.go:13
↓ 13 callersFunctionNewChaCha20
()
internal/crypto/chacha20.go:14
↓ 10 callersFunctionGetRequest
(url string)
client/cli/util.go:120
↓ 10 callersMethodMarshallTask
()
internal/task/task.go:43
↓ 10 callersFunctionNewRecon
(host, user, domain, ip, pName, path string, pid int)
internal/task/recon/recon.go:19
↓ 9 callersFunctionCreateTask
(task *task.Task, name string)
client/cli/util.go:97
↓ 9 callersMethodEncrypt
Encrypt encrypts data using given key
internal/crypto/chacha20.go:27
↓ 9 callersFunctionPostRequest
postRequest does a post request to the C2
kitten/malware/http.go:56
↓ 7 callersFunctionDoAuth
DoAuth is the OPAQUE authentication sequence
kitten/malware/opaque.go:49
↓ 7 callersFunctionDoPwreg
DoPwreg is the OPAQUE registration sequence
kitten/malware/opaque.go:12
↓ 7 callersFunctionGetKittens
()
client/cli/util.go:45
↓ 7 callersFunctionNewConfig
(host, getEndpoint, postEndpoint, regEndpoint, userAgent, name string, sleep, jitter int)
kitten/malware/config.go:16
↓ 6 callersMethodDecrypt
Decrypt decrypts data using given key
internal/crypto/chacha20.go:41
↓ 6 callersMethodUnmarshallTask
(j []byte)
internal/task/task.go:51
↓ 5 callersMethodGetAlive
()
internal/kitten/kitten.go:49
↓ 5 callersMethodGetProtocol
()
internal/config/config.go:79
↓ 5 callersMethodGetSleep
()
internal/kitten/kitten.go:65
↓ 5 callersFunctionNewConfig
(path string)
internal/config/config.go:30
↓ 5 callersFunctionsleep
(config Config)
kitten/malware/util.go:9
↓ 4 callersMethodEncryptTask
(key []byte)
internal/task/task.go:17
↓ 4 callersMethodEncryptTask
(key []byte)
internal/task/recon/recon.go:31
↓ 4 callersMethodGetHost
()
internal/config/config.go:43
↓ 4 callersMethodGetLastSeen
()
internal/kitten/kitten.go:57
↓ 4 callersMethodGetPayload
()
internal/task/task.go:63
↓ 4 callersMethodGetPort
()
internal/config/config.go:47
↓ 4 callersMethodMarshallRecon
()
internal/task/recon/recon.go:57
↓ 3 callersFunctionApi
(config *config.Config)
server/api/api.go:32
↓ 3 callersMethodDecryptTask
(cypherText []byte, key []byte)
internal/task/task.go:30
↓ 3 callersMethodDecryptTask
(cypherText []byte, key []byte)
internal/task/recon/recon.go:44
↓ 3 callersFunctionGenerateKey
(base []byte, size int)
internal/crypto/util.go:5
↓ 3 callersMethodGetHostname
()
internal/task/recon/recon.go:77
↓ 3 callersMethodGetIp
()
internal/task/recon/recon.go:73
↓ 3 callersMethodGetKey
()
internal/kitten/kitten.go:81
↓ 3 callersMethodGetOpaqueEndpoint
()
internal/config/config.go:59
↓ 3 callersMethodGetPostEndpoint
()
internal/config/config.go:55
↓ 3 callersMethodGetSleep
()
internal/config/config.go:63
↓ 3 callersFunctionNewName
(l int)
kitten/malware/util.go:19
↓ 3 callersFunctionNewPrivilege
(name, description string, enable bool)
internal/task/priv/privilege.go:9
↓ 3 callersFunctionNewPrivileges
(priv []*Privilege, integrity string)
internal/task/priv/privileges.go:12
↓ 3 callersFunctionNewProcess
(ppid, pid int, name string)
internal/task/ps/ps.go:19
↓ 3 callersFunctionNewProcessList
(p []Process)
internal/task/ps/ps.go:15
↓ 3 callersMethodSetResult
(t *task.Task)
internal/kitten/kitten.go:77
↓ 3 callersMethodUnmarshallRecon
(j []byte)
internal/task/recon/recon.go:65
↓ 3 callersFunctioncheckForResponse
(name string)
client/cli/util.go:156
↓ 2 callersFunctionBuild
()
client/cli/util.go:247
↓ 2 callersFunctionCheckConnection
(config Config)
kitten/malware/http.go:78
↓ 2 callersFunctionCreateThread
(shellcode []byte)
kitten/malware/inject.go:9
↓ 2 callersMethodGetCert
()
internal/config/config.go:86
↓ 2 callersFunctionGetConfig
()
client/cli/util.go:35
↓ 2 callersMethodGetDescription
()
internal/task/priv/privilege.go:17
↓ 2 callersMethodGetEnable
()
internal/task/priv/privilege.go:21
↓ 2 callersMethodGetExecType
()
internal/config/config.go:106
↓ 2 callersMethodGetGetEndpoint
()
internal/config/config.go:51
↓ 2 callersMethodGetInjection
()
internal/config/config.go:102
↓ 2 callersMethodGetJitter
()
internal/config/config.go:67
↓ 2 callersMethodGetLocalUpload
()
internal/config/config.go:90
↓ 2 callersMethodGetMalPath
()
internal/config/config.go:98
↓ 2 callersMethodGetName
()
internal/kitten/kitten.go:85
↓ 2 callersMethodGetObfuscation
()
internal/config/config.go:110
↓ 2 callersMethodGetRecon
()
internal/kitten/kitten.go:45
↓ 2 callersFunctionGetRequest
GetRequest does a get request to the C2
kitten/malware/http.go:33
↓ 2 callersMethodGetResult
()
internal/kitten/kitten.go:73
↓ 2 callersMethodGetTag
()
internal/task/task.go:59
↓ 2 callersFunctionGetTask
(name string)
client/cli/util.go:110
↓ 2 callersFunctionGetTask
(config Config, key string)
kitten/malware/http.go:14
↓ 2 callersMethodGetTasks
()
internal/kitten/kitten.go:37
↓ 2 callersMethodGetUserAgent
()
internal/config/config.go:75
↓ 2 callersMethodGetWebUpload
()
internal/config/config.go:94
↓ 2 callersMethodMarshallPrivileges
()
internal/task/priv/privileges.go:16
↓ 2 callersMethodMarshallProcessList
()
internal/task/ps/ps.go:27
↓ 2 callersFunctionMemcpy
Memcpy is a replacement for the C memcpy function https://github.com/timwhitez/Doge-Gabh/blob/main/example/shellcodecalc/calc.go
kitten/malware/util.go:44
↓ 2 callersFunctionNewPassword
NewPassword generates a random password for the kittens
kitten/malware/util.go:31
↓ 2 callersMethodSetAlive
(state bool)
internal/kitten/kitten.go:53
↓ 2 callersMethodSetLastSeen
(t time.Time)
internal/kitten/kitten.go:61
↓ 2 callersMethodSetName
(name string)
server/api/malConfig.go:44
↓ 2 callersMethodSetName
(name string)
kitten/malware/config.go:45
↓ 2 callersMethodSetPayload
(p []byte)
internal/task/task.go:67
↓ 2 callersMethodSetRecon
(recon *recon.Recon)
internal/kitten/kitten.go:41
↓ 2 callersMethodSetSleep
(sleep int)
server/api/malConfig.go:48
↓ 2 callersMethodSetTask
(task *task.Task)
internal/kitten/kitten.go:33
↓ 2 callersMethodUnmarshallPrivileges
(j []byte)
internal/task/priv/privileges.go:24
↓ 2 callersMethodUnmarshallProcessList
(j []byte)
internal/task/ps/ps.go:35
↓ 2 callersFunctionVmCheck
()
kitten/malware/sandbox.go:13
↓ 2 callersFunctionWork
(config Config, key, name string)
kitten/malware/work.go:10
↓ 2 callersFunctioncreateThread
(shellcode []byte, handle uintptr, NtAllocateVirtualMemorySysid, NtProtectVirtualMemorySysid, NtCreateThreadEx
kitten/malware/inject.go:62
↓ 2 callersMethodgetJitter
()
kitten/malware/config.go:77
↓ 2 callersFunctiongetKitten
(name string)
client/cli/util.go:55
↓ 2 callersMethodgetName
()
kitten/malware/config.go:53
↓ 2 callersMethodgetSleep
()
kitten/malware/config.go:73
↓ 2 callersMethodgetUserAgent
()
kitten/malware/config.go:69
↓ 2 callersFunctioninteract
interact menu
client/cli/cli.go:119
↓ 2 callersFunctionopenHandle
(path string)
kitten/malware/autoRemove.go:27
↓ 2 callersMethodprepareKey
(key []byte)
internal/crypto/chacha20.go:18
↓ 1 callersFunctionCli
()
client/cli/cli.go:46
↓ 1 callersFunctionDoRecon
(key string)
kitten/malware/recon.go:12
↓ 1 callersFunctionEtwPatch
EtwPatch patches the EtwEventWrite function https://github.com/timwhitez/Doge-Assembly/blob/main/loader/etw.go write arbitrary ret opcodes into the ET
kitten/malware/etw.go:12
↓ 1 callersMethodGetKey
()
internal/config/config.go:83
↓ 1 callersMethodGetName
()
internal/task/priv/privilege.go:13
↓ 1 callersFunctionHandleAuth
(data1 []byte)
internal/crypto/opaque.go:31
↓ 1 callersMethodMarshallConfig
()
server/api/malConfig.go:28
next →1–100 of 209, ranked by callers