MCPcopy Create free account

hub / github.com/TideSec/GoBypassAV / types & classes

Types & classes13 in github.com/TideSec/GoBypassAV

⨍ Functions 89◇ Types & classes 13
StructIMAGE_DOS_HEADER
Read the child program's DOS header and validate it is a MZ executable
Go_Windows_API/02-CreateProcessWithPipe/main.go:222
StructIMAGE_FILE_HEADER
Read the child process's PE file header * typedef struct _IMAGE_FILE_HEADER { USHORT Machine; USHORT NumberOfSections; ULONG TimeDateSt
Go_Windows_API/02-CreateProcessWithPipe/main.go:290
StructIMAGE_OPTIONAL_HEADER32
* https://docs.microsoft.com/en-us/windows/win32/api/winnt/ns-winnt-image_optional_header32 typedef struct _IMAGE_OPTIONAL_HEADER { WORD
Go_Windows_API/02-CreateProcessWithPipe/main.go:417
StructIMAGE_OPTIONAL_HEADER64
Read the child process's PE optional header to find it's entry point * https://docs.microsoft.com/en-us/windows/win32/api/winnt/ns-winnt-image_optio
Go_Windows_API/02-CreateProcessWithPipe/main.go:347
StructImageDosHeader
Go_Windows_API/07-CreatProcess/main.go:47
StructImageFileHeader
Go_Windows_API/07-CreatProcess/main.go:69
StructImageOptionalHeader32
Go_Windows_API/07-CreatProcess/main.go:112
StructImageOptionalHeader64
Go_Windows_API/07-CreatProcess/main.go:79
StructPEB
Go_Windows_API/07-CreatProcess/main.go:15
StructPEB
Query the child process and find its image base address from its Process Environment Block (PEB) https://github.com/winlabs/gowin32/blob/0b6f3bef0b750
Go_Windows_API/02-CreateProcessWithPipe/main.go:136
StructPROCESS_BASIC_INFORMATION
https://github.com/elastic/go-windows/blob/master/ntdll.go#L77
Go_Windows_API/02-CreateProcessWithPipe/main.go:171
StructProcessBasicInformation
Go_Windows_API/07-CreatProcess/main.go:39
StructXor
tidesec
Encryption/XOR_code/xor.go:10