Functions — github.com/Teach2Breach/Tempest

hub / github.com/Teach2Breach/Tempest / functions

Functions228 in github.com/Teach2Breach/Tempest

⨍ Functions 228◇ Types & classes 26

↓ 1 callersFunctionget_process_name

This function retrieves the name of the current process.

imps/windows_ldr/src/func.rs:344

↓ 1 callersFunctionget_process_name

This function retrieves the name of the current process. this function needs address of kernel32

imps/windows_noldr/src/func.rs:361

↓ 1 callersFunctionget_process_name

()

imps/macimp/src/func.rs:79

↓ 1 callersFunctionget_process_name

()

imps/experimental_win/win2.py:102

↓ 1 callersFunctionget_system_domain

()

imps/windows_ldr/src/func.rs:1333

↓ 1 callersFunctionget_system_domain

()

imps/windows_noldr/src/func.rs:1332

↓ 1 callersFunctionget_username

()

imps/linux_imp/src/proto.rs:226

↓ 1 callersFunctionget_username

()

imps/windows_ldr/src/func.rs:321

↓ 1 callersFunctionget_username

()

imps/windows_noldr/src/func.rs:337

↓ 1 callersFunctionget_username

()

imps/experimental_win/win2.py:71

↓ 1 callersFunctionget_version

()

imps/linux_imp/src/proto.rs:176

↓ 1 callersFunctionget_version

This function retrieves the version of the Windows operating system.

imps/windows_ldr/src/func.rs:125

↓ 1 callersFunctionget_version

This function retrieves the version of the Windows operating system. this function needs address of ntdll

imps/windows_noldr/src/func.rs:126

↓ 1 callersFunctionget_version

()

imps/macimp/src/func.rs:43

↓ 1 callersFunctionhandle_streams

(fstream: &mut TcpStream, bstream: &mut TcpStream)

Anvil/src/routes.rs:1918

↓ 1 callersFunctioninjection

(mut new_handle: HANDLE, scode: Vec<u8>)

imps/windows_ldr/src/func.rs:743

↓ 1 callersFunctioninjection

this function needs address of ntdll and kernel32

imps/windows_noldr/src/func.rs:765

↓ 1 callersFunctionkill

()

imps/linux_imp/src/proto.rs:344

↓ 1 callersFunctionkill

()

imps/windows_ldr/src/proto.rs:243

↓ 1 callersFunctionkill

()

imps/windows_noldr/src/proto.rs:235

↓ 1 callersFunctionkill

()

imps/macimp/src/func.rs:147

↓ 1 callersFunctionldr_get_dll

fn unescape_backslashes2(input: &str) -> String { input.replace(r"\\", r"\") }*/ TODO these functions are also in func.rs. we should probably co

imps/windows_ldr/src/proto.rs:1049

↓ 1 callersFunctionldr_get_dll

fn unescape_backslashes2(input: &str) -> String { input.replace(r"\\", r"\") }*/ TODO these functions are also in func.rs. we should probably co

imps/windows_noldr/src/proto.rs:1053

↓ 1 callersFunctionlist_all_dlls

(teb: *const TEB)

modules_wip/noldr/src/lib.rs:146

↓ 1 callersFunctionlist_files

return list of files in current directory

imps/macimp/src/func.rs:161

↓ 1 callersFunctionload_key_from_file

(path: &str)

Anvil/src/main.rs:367

↓ 1 callersFunctionls

(args: Vec<&str>)

imps/linux_imp/src/proto.rs:385

↓ 1 callersFunctionls

(args: Vec<&str>)

imps/windows_ldr/src/proto.rs:260

↓ 1 callersFunctionls

(args: Vec<&str>)

imps/windows_noldr/src/proto.rs:252

↓ 1 callersFunctionmain

()

imps/experimental_win/win2.py:335

↓ 1 callersFunctionprocess_list

()

imps/windows_ldr/src/proto.rs:254

↓ 1 callersFunctionprocess_list

()

imps/windows_noldr/src/proto.rs:246

↓ 1 callersFunctionpwd

()

imps/linux_imp/src/proto.rs:373

↓ 1 callersFunctionpwd

()

imps/windows_ldr/src/proto.rs:315

↓ 1 callersFunctionpwd

()

imps/windows_noldr/src/proto.rs:307

↓ 1 callersFunctionpwsh

(args: Vec<&str>)

imps/windows_ldr/src/proto.rs:366

↓ 1 callersFunctionpwsh

(args: Vec<&str>)

imps/windows_noldr/src/proto.rs:358

↓ 1 callersFunctionread_and_decode

(args: Vec<&str>)

imps/linux_imp/src/proto.rs:84

↓ 1 callersFunctionread_and_decode

This function reads a file and decodes its content using a custom decoding engine. The decoded content is written to a new file.

imps/windows_ldr/src/func.rs:226

↓ 1 callersFunctionread_and_decode

This function reads a file and decodes its content using a custom decoding engine. The decoded content is written to a new file.

imps/windows_noldr/src/func.rs:239

↓ 1 callersFunctionread_and_decode

(args: list)

imps/experimental_win/win2.py:122

↓ 1 callersFunctionread_and_encode

(args: Vec<&str>)

conduit/src/commands.rs:138

↓ 1 callersFunctionread_and_encode

(args: Vec<&str>)

imps/linux_imp/src/proto.rs:64

↓ 1 callersFunctionread_and_encode

This function reads a file and encodes its content using a custom encoding engine. The encoded content is returned as a string.

imps/windows_ldr/src/func.rs:192

↓ 1 callersFunctionread_and_encode

This function reads a file and encodes its content using a custom encoding engine. The encoded content is returned as a string.

imps/windows_noldr/src/func.rs:177

↓ 1 callersFunctionread_and_encode

(args: list)

imps/experimental_win/win2.py:109

↓ 1 callersFunctionread_and_exec

this function will read a bof file from the server and execute it

imps/windows_ldr/src/func.rs:529

↓ 1 callersFunctionread_and_exec

this function will read a bof file from the server and execute it

imps/windows_noldr/src/func.rs:550

↓ 1 callersFunctionread_and_exshellcode

(args: Vec<&str>, server: String, imp_token: String)

imps/windows_ldr/src/func.rs:663

↓ 1 callersFunctionread_and_exshellcode

(args: Vec<&str>, server: String, imp_token: String)

imps/windows_noldr/src/func.rs:684

↓ 1 callersFunctionread_and_runpe

(args: Vec<&str>, server: String, imp_token: String)

imps/windows_ldr/src/func.rs:1461

↓ 1 callersFunctionread_and_runpe

(args: Vec<&str>, server: String, imp_token: String)

imps/windows_noldr/src/func.rs:1454

↓ 1 callersFunctionregistration

this function is used to verify implant secrets and issue new session tokens for imps it also therefor collects all implant info via the ImpInfo struc

Anvil/src/routes.rs:80

↓ 1 callersFunctionretrieve_all_output

( _session_id: &str, token: &str, url: &str, )

conduit/src/commands.rs:96

↓ 1 callersFunctionretrieve_all_output_with_polling

( imp_info: Vec<ImpInfo>, token: &str, url: &str, )

conduit/src/commands.rs:19

↓ 1 callersFunctionrun_tasks

Function to run tasks

imps/linux_imp/src/proto.rs:278

↓ 1 callersFunctionrun_tasks

( tasks: String, server: String, imp_token: String, imp_info: &mut ImpInfo

imps/windows_ldr/src/proto.rs:132

↓ 1 callersFunctionrun_tasks

( tasks: String, server: String, imp_token: String, imp_info: &mut ImpInfo

imps/windows_noldr/src/proto.rs:123

↓ 1 callersFunctionrun_tasks

(tasks: String)

imps/macimp/src/func.rs:97

↓ 1 callersFunctionrun_tasks

(tasks: str)

imps/experimental_win/win2.py:151

↓ 1 callersFunctionrun_wmi_query

Runs a WMI query with the provided query parts and returns the formatted results.

modules_wip/wmi_runner/src/lib.rs:6

↓ 1 callersFunctionrun_wmi_query

Runs a WMI query with the provided query parts and returns the formatted results.

imps/windows_ldr/src/func.rs:1362

↓ 1 callersFunctionrun_wmi_query

Runs a WMI query with the provided query parts and returns the formatted results.

imps/windows_noldr/src/func.rs:1361

↓ 1 callersFunctionsave_key_to_file

(key: &[u8], path: &str)

Anvil/src/main.rs:371

↓ 1 callersFunctionsend_request

Function to send request This is actually the main operations of the implant It performs initial registration, checkins, task retrieval and task execu

imps/linux_imp/src/proto.rs:449

↓ 1 callersFunctionsend_request

(mut imp_info: ImpInfo)

imps/windows_ldr/src/proto.rs:441

↓ 1 callersFunctionsend_request

(mut imp_info: ImpInfo)

imps/windows_noldr/src/proto.rs:433

↓ 1 callersFunctionsend_request

(imp_info: ImpInfo)

imps/macimp/src/main.rs:83

↓ 1 callersFunctionsend_request

(imp_info: ImpInfo)

imps/experimental_win/win2.py:246

↓ 1 callersFunctionshell

(args: Vec<&str>)

imps/linux_imp/src/proto.rs:421

↓ 1 callersFunctionshell

(args: Vec<&str>)

imps/macimp/src/func.rs:171

↓ 1 callersFunctionsocks

this function creates the other end of the socks tunnel for the imp to connect to it is currently using a hardcoded port which i intend to give contro

Anvil/src/routes.rs:1824

↓ 1 callersFunctionsocks

(args: Vec<&str>, server: String)

imps/windows_ldr/src/proto.rs:394

↓ 1 callersFunctionsocks

(args: Vec<&str>, server: String)

imps/windows_noldr/src/proto.rs:386

↓ 1 callersFunctionunescape_backslashes

Function to unescape backslashes

Anvil/src/routes.rs:1603

↓ 1 callersFunctionupdate_sleep_time

this function is used to update an imp's sleep time in the database

Anvil/src/routes.rs:128

↓ 1 callersFunctionvalidate_stream

i dont remember what this function does

Anvil/src/routes.rs:1906

Method__init__

(self, session, ip, username, domain, os_version, imp_pid, process_name, sleep)

imps/experimental_win/win2.py:35

Method__init__

(self, session, task_name, output)

imps/experimental_win/win2.py:46

Method__init__

(self, sleep)

imps/experimental_win/win2.py:52

Methodadd_output

(&mut self, line: String)

conduit/src/main.rs:93

Functionauthenticate

this function is used to authenticate operators and return a token for them to use to interact with the server

Anvil/src/routes.rs:1229

Functionbuild_imp

this function allows operators to build imps for specific targets and download the files it is also horrible and needs refactored

Anvil/src/routes.rs:304

Functioncheck_in

this fis the first check-in endpoint for imps it checks the hardcoded unique identifier in the request header against the unique_identifiers table in

Anvil/src/routes.rs:882

Functiondecrypt_data

(aes_key: bytes, data: str)

imps/experimental_win/win2.py:231

Methoddefault

()

conduit/src/main.rs:73

Functiondownload_file

this function is used to download files from the server

Anvil/src/routes.rs:1766

Functiondraw_dashboard

(f: &mut Frame<B>, chunk: Rect, imp_info: &Vec<ImpInfo>, app: &mut App)

conduit/src/main.rs:1069

Functionfake_get_external_ip

()

imps/linux_imp/src/proto.rs:252

Functionfake_get_external_ip

()

imps/windows_ldr/src/func.rs:656

Functionfake_get_external_ip

()

imps/windows_noldr/src/func.rs:677

Functionget_connected_imps

this function lets operators retrieve a list of all connected imps and their info for display in the conduit UI

Anvil/src/routes.rs:233

Functionget_current_process_handle

Function to get the current process handle

modules_wip/noldr/src/lib.rs:135

Functionget_external_ip

(ntdll: usize, kernel32: usize)

imps/experimental_win/invoke_imp/src/func.rs:195

Functionget_hostname

Function to get the hostname of the current machine

imps/windows_ldr/src/func.rs:261

Functionget_hostname

Function to get the hostname of the current machine this function needs address of kernel32

imps/windows_noldr/src/func.rs:275

Functionget_pid

()

imps/experimental_win/invoke_imp/src/func.rs:374

Functionget_process_name

(module_name: usize)

imps/experimental_win/invoke_imp/src/func.rs:378

Functionget_system_domain

()

imps/experimental_win/invoke_imp/src/func.rs:426

Functionget_username

after i get this working, i'm going to write a seperate tool, a WMI query runner, that can be used for testing WMI queries and getting data.

imps/experimental_win/invoke_imp/src/func.rs:342

← previous next →101–200 of 228, ranked by callers