MCPcopy Create free account

hub / github.com/Ne0nd0g/go-shellcode / types & classes

Types & classes13 in github.com/Ne0nd0g/go-shellcode

⨍ Functions 16◇ Types & classes 13
StructIMAGE_DOS_HEADER
Read the child program's DOS header and validate it is a MZ executable
cmd/CreateProcess/main.go:232
StructIMAGE_DOS_HEADER
Read the child program's DOS header and validate it is a MZ executable
cmd/CreateProcessWithPipe/main.go:291
StructIMAGE_FILE_HEADER
Read the child process's PE file header * typedef struct _IMAGE_FILE_HEADER { USHORT Machine; USHORT NumberOfSections; ULONG TimeDateSt
cmd/CreateProcess/main.go:318
StructIMAGE_FILE_HEADER
Read the child process's PE file header * typedef struct _IMAGE_FILE_HEADER { USHORT Machine; USHORT NumberOfSections; ULONG TimeDateSt
cmd/CreateProcessWithPipe/main.go:377
StructIMAGE_OPTIONAL_HEADER32
* https://docs.microsoft.com/en-us/windows/win32/api/winnt/ns-winnt-image_optional_header32 typedef struct _IMAGE_OPTIONAL_HEADER { WORD
cmd/CreateProcess/main.go:461
StructIMAGE_OPTIONAL_HEADER32
* https://docs.microsoft.com/en-us/windows/win32/api/winnt/ns-winnt-image_optional_header32 typedef struct _IMAGE_OPTIONAL_HEADER { WORD
cmd/CreateProcessWithPipe/main.go:520
StructIMAGE_OPTIONAL_HEADER64
Read the child process's PE optional header to find it's entry point * https://docs.microsoft.com/en-us/windows/win32/api/winnt/ns-winnt-image_optio
cmd/CreateProcess/main.go:391
StructIMAGE_OPTIONAL_HEADER64
Read the child process's PE optional header to find it's entry point * https://docs.microsoft.com/en-us/windows/win32/api/winnt/ns-winnt-image_optio
cmd/CreateProcessWithPipe/main.go:450
StructPEB
Query the child process and find its image base address from its Process Environment Block (PEB) https://github.com/winlabs/gowin32/blob/0b6f3bef0b750
cmd/CreateProcess/main.go:134
StructPEB
Query the child process and find its image base address from its Process Environment Block (PEB) https://github.com/winlabs/gowin32/blob/0b6f3bef0b750
cmd/CreateProcessWithPipe/main.go:193
StructPENUMLOADED_MODULES_CALLBACK
BOOL PenumloadedModulesCallback( PCSTR ModuleName, ULONG ModuleBase, ULONG ModuleSize, PVOID UserContext )
cmd/EnumerateLoadedModules/main.go:119
StructPROCESS_BASIC_INFORMATION
https://github.com/elastic/go-windows/blob/master/ntdll.go#L77
cmd/CreateProcess/main.go:169
StructPROCESS_BASIC_INFORMATION
https://github.com/elastic/go-windows/blob/master/ntdll.go#L77
cmd/CreateProcessWithPipe/main.go:228