MCPcopy Create free account

hub / github.com/Teach2Breach/Tempest / functions

Functions228 in github.com/Teach2Breach/Tempest

⨍ Functions 228◇ Types & classes 26
↓ 19 callersFunctionldr_get_fn
This function retrieves the address of an exported function from a DLL module. The function takes a handle to a DLL module and a function name as a st
imps/windows_ldr/src/func.rs:86
↓ 16 callersFunctionldr_get_fn
This function retrieves the address of an exported function from a DLL module. The function takes a handle to a DLL module and a function name as a st
imps/windows_noldr/src/func.rs:86
↓ 11 callersFunctionget_function_address
(ntdll_base: *const c_void, function_name: &str)
modules_wip/noldr/src/lib.rs:96
↓ 9 callersFunctionissue_task
(command_text: &str, session_id: &str, token: &str, url: &str)
conduit/src/main.rs:448
↓ 8 callersFunctionldr_get_dll
This function retrieves a handle to a DLL module. The function takes a DLL name as a string and returns a handle to the DLL module.
imps/windows_ldr/src/func.rs:54
↓ 7 callersFunctionldr_get_fn
Function to get a function address from a DLL module
modules_wip/whoami/src/lib.rs:64
↓ 7 callersFunctionldr_get_fn
Function to get a function address from a DLL module
modules_wip/process_list/src/lib.rs:56
↓ 7 callersFunctionldr_get_fn
(dll: HMODULE, fn_name: &str)
imps/windows_ldr/src/proto.rs:1072
↓ 7 callersFunctionldr_get_fn
(dll: HMODULE, fn_name: &str)
imps/windows_noldr/src/proto.rs:1076
↓ 6 callersFunctionldr_get_fn
This function retrieves the address of an exported function from a DLL module. The function takes a handle to a DLL module and a function name as a st
imps/experimental_win/invoke_imp/src/func.rs:100
↓ 6 callersFunctionverify_token
this function is used to verify tokens for operators
Anvil/src/routes.rs:1306
↓ 5 callersFunctionget_username_ntapi
TODO: copy this module into the windows_noldr implant and convert it to using noldr functions This function gets the username of the current user usin
modules_wip/whoami/src/lib.rs:159
↓ 5 callersFunctionldr_get_dll
This function retrieves a handle to a DLL module. The function takes a DLL name as a string and returns a handle to the DLL module.
imps/windows_noldr/src/func.rs:54
↓ 4 callersFunctionverify_session
this function verifies imp session tokens
Anvil/src/routes.rs:1366
↓ 3 callersFunctiondecode
(data: &str)
imps/linux_imp/src/proto.rs:786
↓ 3 callersFunctiondecode
(data: &str)
imps/windows_ldr/src/func.rs:175
↓ 3 callersFunctiondecode
(data: &str)
imps/windows_noldr/src/func.rs:222
↓ 3 callersFunctiondecode
(data: &str)
imps/macimp/src/main.rs:532
↓ 3 callersFunctiondecode
(data: str)
imps/experimental_win/win2.py:58
↓ 3 callersFunctiondotloader
(content: Vec<u8>, args: String)
modules_wip/oxide_ldr/src/lib.rs:9
↓ 3 callersFunctionencode
(data: &[u8])
imps/linux_imp/src/proto.rs:773
↓ 3 callersFunctionencode
(data: &[u8])
imps/windows_ldr/src/func.rs:163
↓ 3 callersFunctionencode
(data: &[u8])
imps/windows_noldr/src/func.rs:209
↓ 3 callersFunctionencode
(data: &[u8])
imps/macimp/src/main.rs:519
↓ 3 callersFunctionencrypt_data
(aes_key: bytes, data: str)
imps/experimental_win/win2.py:215
↓ 3 callersFunctionexecute_command
(command: str)
imps/experimental_win/win2.py:136
↓ 3 callersFunctionget_dll_address
(dll_name: String, teb: *const TEB)
modules_wip/noldr/src/lib.rs:56
↓ 3 callersFunctionget_process_list
()
modules_wip/process_list/src/lib.rs:94
↓ 3 callersFunctionldr_get_dll
Function to get a handle to a DLL module
modules_wip/whoami/src/lib.rs:33
↓ 3 callersFunctionsend_bof
(file_path: &str, url: &str, token: &str)
conduit/src/commands.rs:330
↓ 2 callersFunctionAES256Encrypt
Function to perform AES-256-CBC encryption
imps/experimental_win/base_c/implant.c:130
↓ 2 callersFunctionBase64UrlEncode
Function to Base64 encode the encrypted data
imps/experimental_win/base_c/implant.c:189
↓ 2 callersFunctionPick
()
imps/linux_imp/src/proto.rs:46
↓ 2 callersFunctionPick
()
imps/windows_ldr/src/proto.rs:84
↓ 2 callersFunctionPick
()
imps/windows_noldr/src/proto.rs:82
↓ 2 callersFunctionPick
()
imps/experimental_win/invoke_imp/src/proto.rs:20
↓ 2 callersFunctionSendPOST
Function to send HTTP POST request with encrypted and base64-encoded data
imps/experimental_win/base_c/implant.c:371
↓ 2 callersFunctionconvert_dll_to_shellcode
add ability to convert dll to shellcode server side this function is used to convert dlls to shellcode. its a hacky way of letting the operator specif
Anvil/src/routes.rs:1957
↓ 2 callersFunctionencode
(data: bytes)
imps/experimental_win/win2.py:55
↓ 2 callersFunctionfetch_imp_info
Fetch imp info
conduit/src/main.rs:1031
↓ 2 callersFunctionget_teb
()
modules_wip/noldr/src/lib.rs:46
↓ 2 callersFunctionget_username
change get username to show hostname/username
imps/macimp/src/func.rs:10
↓ 2 callersFunctionldr_get_dll
Function to get a handle to a DLL module
modules_wip/process_list/src/lib.rs:25
↓ 2 callersFunctionldr_get_dll
(dll_name: &str, ntdll: usize, kernel32: usize)
imps/experimental_win/invoke_imp/src/func.rs:20
↓ 2 callersFunctionui
(f: &mut tui::Frame<tui::backend::CrosstermBackend<io::Stdout>>, app: &App)
conduit/src/main.rs:551
↓ 2 callersFunctionunescape_backslashes
Function to unescape backslashes
imps/windows_ldr/src/proto.rs:1041
↓ 2 callersFunctionunescape_backslashes
Function to unescape backslashes
imps/windows_noldr/src/proto.rs:1045
↓ 1 callersFunctionApplyPadding
Function to apply PKCS#7 padding Function to apply PKCS#7 padding
imps/experimental_win/base_c/implant.c:119
↓ 1 callersFunctionBase64UrlDecode
Function to Base64 decode the AES key Function to Base64 decode with URL-safe conversion and proper padding
imps/experimental_win/base_c/implant.c:60
↓ 1 callersFunctionGetDomain
Function to get domain from environment variable
imps/experimental_win/base_c/implant.c:300
↓ 1 callersFunctionGetExternalIP
Function to get external IP using WinHTTP (api.ipify.org)
imps/experimental_win/base_c/implant.c:232
↓ 1 callersFunctionGetOSVersion
Function to get OS version
imps/experimental_win/base_c/implant.c:315
↓ 1 callersFunctionGetPID
Function to get PID
imps/experimental_win/base_c/implant.c:325
↓ 1 callersFunctionGetProcessName
Function to get process name
imps/experimental_win/base_c/implant.c:333
↓ 1 callersFunctionGetUsername
Function to get username in "hostname\\username" format
imps/experimental_win/base_c/implant.c:284
↓ 1 callersFunctionauthenticate
(url: &str, username: &str, password: &str)
conduit/src/main.rs:627
↓ 1 callersFunctionbuild
( token: &str, url: &str, target: &str, target_ip: &str, target_port: &str, tsle
conduit/src/commands.rs:206
↓ 1 callersFunctioncatfile
(args: Vec<&str>)
imps/linux_imp/src/proto.rs:408
↓ 1 callersFunctioncatfile
(args: Vec<&str>)
imps/windows_ldr/src/proto.rs:327
↓ 1 callersFunctioncatfile
(args: Vec<&str>)
imps/windows_noldr/src/proto.rs:319
↓ 1 callersFunctioncd
(args: Vec<&str>)
imps/linux_imp/src/proto.rs:356
↓ 1 callersFunctioncd
(args: Vec<&str>)
imps/windows_ldr/src/proto.rs:298
↓ 1 callersFunctioncd
(args: Vec<&str>)
imps/windows_noldr/src/proto.rs:290
↓ 1 callersFunctionchange_sleep
(args: Vec<&str>, sleep: &mut String, jitter: &mut String)
imps/windows_ldr/src/func.rs:1424
↓ 1 callersFunctionchange_sleep
(args: Vec<&str>, sleep: &mut String, jitter: &mut String)
imps/windows_noldr/src/func.rs:1419
↓ 1 callersFunctioncheck_db_and_update_output
(url: &str, token: &str, ui_refresh_tx: Sender<String>)
conduit/src/main.rs:653
↓ 1 callersFunctioncheck_tasks
this function is used to allow imps to check in with the server and receive tasks it also updates the last_check_in field in the imps table based on t
Anvil/src/routes.rs:158
↓ 1 callersFunctioncmd
(args: Vec<&str>)
imps/windows_ldr/src/proto.rs:340
↓ 1 callersFunctioncmd
(args: Vec<&str>)
imps/windows_noldr/src/proto.rs:332
↓ 1 callersFunctionescape_json_string
imps/experimental_win/base_c/implant.c:349
↓ 1 callersFunctionexecute_whoami
()
imps/linux_imp/src/proto.rs:348
↓ 1 callersFunctionexecute_whoami
()
imps/windows_ldr/src/proto.rs:250
↓ 1 callersFunctionexecute_whoami
()
imps/windows_noldr/src/proto.rs:242
↓ 1 callersFunctionexshellcode
(target_pid: &str, scode: Vec<u8>)
imps/windows_ldr/src/func.rs:1094
↓ 1 callersFunctionexshellcode
this function needs the address of kernel32 and ntdll
imps/windows_noldr/src/func.rs:1117
↓ 1 callersFunctionfake_get_external_ip
()
imps/macimp/src/func.rs:39
↓ 1 callersFunctionfetch_imp_info_periodically
( url: String, token: String, tx: Sender<Vec<ImpInfo>>, ui_refresh_tx: Sender<String>, )
conduit/src/main.rs:989
↓ 1 callersFunctiongenerate_aes_key
()
Anvil/src/main.rs:377
↓ 1 callersFunctiongenerate_imp_secret
this function generates the intial hardcoded secret UUID in imps at compile time (imp compile time, not server compile time)
Anvil/src/routes.rs:1345
↓ 1 callersFunctiongenerate_imp_token
this function is used to generate tokens for imps
Anvil/src/routes.rs:1328
↓ 1 callersFunctiongenerate_token
this function is used to generate tokens for operators
Anvil/src/routes.rs:1294
↓ 1 callersFunctionget_cwd
return current working directory
imps/macimp/src/func.rs:155
↓ 1 callersFunctionget_domain
()
imps/experimental_win/win2.py:80
↓ 1 callersFunctionget_external_ip
()
imps/linux_imp/src/proto.rs:259
↓ 1 callersFunctionget_external_ip
()
imps/windows_ldr/src/func.rs:522
↓ 1 callersFunctionget_external_ip
()
imps/windows_noldr/src/func.rs:543
↓ 1 callersFunctionget_external_ip
()
imps/experimental_win/win2.py:62
↓ 1 callersFunctionget_hostname
()
imps/linux_imp/src/proto.rs:207
↓ 1 callersFunctionget_hostname
()
imps/macimp/src/func.rs:29
↓ 1 callersFunctionget_input
( terminal: &mut Terminal<CrosstermBackend<io::Stdout>>, app: &mut App, )
conduit/src/main.rs:487
↓ 1 callersFunctionget_network_info
Retrieves network information for all network adapters on the system that are enabled.
imps/windows_ldr/src/func.rs:1229
↓ 1 callersFunctionget_network_info
Retrieves network information for all network adapters on the system that are enabled.
imps/windows_noldr/src/func.rs:1252
↓ 1 callersFunctionget_os_version
()
imps/experimental_win/win2.py:88
↓ 1 callersFunctionget_pid
()
imps/linux_imp/src/proto.rs:149
↓ 1 callersFunctionget_pid
()
imps/windows_ldr/src/func.rs:652
↓ 1 callersFunctionget_pid
()
imps/windows_noldr/src/func.rs:673
↓ 1 callersFunctionget_pid
()
imps/macimp/src/func.rs:74
↓ 1 callersFunctionget_pid
()
imps/experimental_win/win2.py:95
↓ 1 callersFunctionget_privilege_name
This function gets the name of a privilege given its LUID (Locally Unique Identifier).
modules_wip/whoami/src/lib.rs:103
↓ 1 callersFunctionget_process_name
()
imps/linux_imp/src/proto.rs:122
next →1–100 of 228, ranked by callers