MCPcopy Create free account

hub / github.com/aaaddress1/Windows-APT-Warfare / functions

Functions94 in github.com/aaaddress1/Windows-APT-Warfare

⨍ Functions 94◇ Types & classes 36
↓ 6 callersFunctionNtAPI
source/chapter#11/wowGrail/wowGrail/wowGrail.cpp:148
↓ 4 callersFunctionrvaToOffset
source/chapter#04/peExportParser/peExportParser.cpp:27
↓ 3 callersFunctionchkExeExist
(name, path)
source/chapter#04/shellDev.py:466
↓ 2 callersFunctionMapFileToMemory
source/chapter#09/signStego/signStego.cpp:10
↓ 2 callersFunctionMapFileToMemory
source/chapter#09/signThief/signThief.cpp:9
↓ 2 callersFunctiongetShadowContext32
source/chapter#11/wowInjector/wowInjector/wowInjector.cpp:25
↓ 2 callersFunctionhollowing
source/chapter#11/wowInjector/wowInjector/wowInjector.cpp:31
↓ 2 callersFunctionjitInject
(path, shellcode)
source/chapter#04/shellDev.py:35
↓ 2 callersFunctionreadBinFile
source/chapter#08/packer.cpp:17
↓ 2 callersFunctionrvaToOffset
source/chapter#05/iat_parser.cpp:27
↓ 1 callersFunctionGetFuncAddr
source/chapter#04/dynEatCall.c:102
↓ 1 callersFunctionGetModHandle
source/chapter#04/dynEatCall.c:87
↓ 1 callersFunctionGetModHandle
source/chapter#03/ldrParser.c:87
↓ 1 callersFunctionHideModule
source/chapter#03/module_disguise.c:110
↓ 1 callersFunctionMapFileToMemory
source/chapter#02/RunPE/RunPE.cpp:11
↓ 1 callersFunctionMapFileToMemory
source/chapter#11/wowGrail/wowGrail/wowGrail.cpp:245
↓ 1 callersFunctionQueryProcessInformation
source/chapter#11/wowInjector/wowInjector/peb.h:24
↓ 1 callersFunctionRunPortableExecutable
source/chapter#02/RunPE/RunPE.cpp:29
↓ 1 callersFunctionRunPortableExecutable
source/chapter#11/wowGrail/wowGrail/wowGrail.cpp:178
↓ 1 callersFunctionVerifyEmbeddedSignature
source/chapter#09/winTrust/winTrust.cpp:20
↓ 1 callersFunctionarrayifyBinaryRawFile
(asmRawBinPath)
source/chapter#04/shellDev.py:386
↓ 1 callersFunctionbruteSearch_WinAPI
source/chapter#11/memShcBruteforce/memShcBruteforce.cpp:25
↓ 1 callersFunctionchkMinGwToolkit
(usrInputMinGWPath)
source/chapter#04/shellDev.py:473
↓ 1 callersFunctioncompileCtoAsmFile
(cPath, asmPath)
source/chapter#04/shellDev.py:339
↓ 1 callersFunctioncompressData
source/chapter#08/packer.cpp:40
↓ 1 callersFunctiondumpMappedImgBin
source/chapter#08/packer.cpp:78
↓ 1 callersFunctionfixIat
source/chapter#05/invoke_memExe.cpp:27
↓ 1 callersFunctionfixIat
source/chapter#06/peLoader.cpp:27
↓ 1 callersFunctionfixReloc
source/chapter#06/peLoader.cpp:55
↓ 1 callersFunctionfn_call_CMSTPLUA_shellexecute
source/chapter#10/masqueradePEB_CMSTP_UACBypass.cpp:122
↓ 1 callersFunctiongenObjAsmBinary
(inAsmPath, outObjectFilePath, outAsmRawBinPath)
source/chapter#04/shellDev.py:371
↓ 1 callersFunctiongenShellcode
(cppPath, clearAfterRun, jitInj = None)
source/chapter#04/shellDev.py:395
↓ 1 callersFunctionget64b_CSTR
source/chapter#11/wowGrail/wowGrail/wowGrail.cpp:29
↓ 1 callersFunctionget64b_WSTR
source/chapter#11/wowGrail/wowGrail/wowGrail.cpp:35
↓ 1 callersFunctiongetBytecodeOfNtAPI
source/chapter#11/wowGrail/wowGrail/wowGrail.cpp:108
↓ 1 callersFunctiongetPtr_Module64
source/chapter#11/wowGrail/wowGrail/wowGrail.cpp:42
↓ 1 callersFunctiongetPtr_Peb64
source/chapter#11/wowGrail/wowGrail/wowGrail.cpp:23
↓ 1 callersFunctiongetPtr_Wow64SystemServiceEx
source/chapter#11/wowGrail/wowGrail/wowGrail.cpp:58
↓ 1 callersFunctionhttpRecv
source/chapter#11/wowInjector/wowInjector/http_download.h:6
↓ 1 callersFunctioniatHook
source/chapter#05/iatHook.cpp:14
↓ 1 callersFunctioninject
source/chapter#11/wowInjector/wowInjector/wowInjector.cpp:50
↓ 1 callersFunctioninvoke_memExe
source/chapter#05/invoke_memExe.cpp:46
↓ 1 callersFunctionisMemExist
source/chapter#11/memShcBruteforce/memShcBruteforce.cpp:8
↓ 1 callersFunctionjmpShellCodeEntry
(inAsmPath, outAsmPath)
source/chapter#04/shellDev.py:355
↓ 1 callersFunctionlinkBin
source/chapter#08/packer.cpp:90
↓ 1 callersFunctionoverwrite_hdr
source/chapter#11/wowInjector/wowInjector/shellcodify.h:7
↓ 1 callersFunctionpeLoader
source/chapter#06/peLoader.cpp:81
↓ 1 callersFunctionpeParser
source/chapter#02/peParser/peParser.cpp:21
↓ 1 callersFunctionreadBinFile
source/chapter#05/invoke_memExe.cpp:12
↓ 1 callersFunctionreadBinFile
source/chapter#05/iat_parser.cpp:12
↓ 1 callersFunctionreadBinFile
source/chapter#06/peLoader.cpp:12
↓ 1 callersFunctionreadBinFile
source/chapter#04/peExportParser/peExportParser.cpp:12
↓ 1 callersFunctionreadBinFile
source/chapter#02/PE_Patcher/PE_Patcher.cpp:24
↓ 1 callersFunctionreadBinFile
source/chapter#02/peParser/peParser.cpp:9
↓ 1 callersFunctionreadBinFile
source/chapter#11/wowInjector/wowInjector/wowInjector.cpp:13
↓ 1 callersFunctionrenameDynModule
source/chapter#03/module_disguise.c:90
↓ 1 callersFunctionrippedCert
source/chapter#09/signThief/signThief.cpp:25
↓ 1 callersFunctionshellcodify
source/chapter#11/wowInjector/wowInjector/shellcodify.h:28
FunctionDllMain
source/chapter#05/DLLHijack/dllmain.cpp:17
FunctionDllMain
source/chapter#10/FVEWIZ/dllmain.cpp:9
FunctionDllMain
source/chapter#04/dllToTest.c:14
FunctionWinMain
source/chapter#02/RunPE/RunPE.cpp:71
Function_tmain
source/chapter#09/winTrust/winTrust.cpp:167
Functionfunc01
source/chapter#04/dllToTest.c:10
Functionfunc02
source/chapter#04/dllToTest.c:11
Functionfunc03
source/chapter#04/dllToTest.c:12
Functionfunc04
source/chapter#04/dllToTest.c:21
Functionfunc05
source/chapter#04/dllToTest.c:22
Functionmain
source/chapter#01/msgbox.c:9
Functionmain
source/chapter#08/packer.cpp:144
Functionmain
source/chapter#05/iatHook.cpp:35
Functionmain
source/chapter#05/invoke_memExe.cpp:75
Functionmain
source/chapter#05/iat_parser.cpp:39
Functionmain
source/chapter#06/peLoader.cpp:119
Functionmain
source/chapter#10/masqueradePEB_CMSTP_UACBypass.cpp:204
Functionmain
source/chapter#09/signStego/signStego.cpp:26
Functionmain
source/chapter#09/signVerifyBypass/signVerifyBypass.cpp:26
Functionmain
source/chapter#09/signThief/signThief.cpp:39
Functionmain
source/chapter#04/anonymous_call.c:4
Functionmain
source/chapter#04/dynEatCall.c:128
Functionmain
source/chapter#04/peExportParser/peExportParser.cpp:37
Functionmain
source/chapter#02/PE_Patcher/PE_Patcher.cpp:36
Functionmain
source/chapter#02/peParser/peParser.cpp:43
Functionmain
source/chapter#02/tinyLinker/tinyLinker.cpp:24
Functionmain
source/chapter#03/module_disguise.c:141
Functionmain
source/chapter#03/msgbox_new.c:11
Functionmain
source/chapter#03/ldrParser.c:102
Functionmain
source/chapter#03/masqueradeCmdline/masqueradeCmdline.cpp:15
Functionmain
source/chapter#11/wow64Mem_Forensics.cpp:82
Functionmain
source/chapter#11/memShcBruteforce/memShcBruteforce.cpp:51
Functionmain
source/chapter#11/wowGrail/wowGrail/wowGrail.cpp:262
FunctionshellEntry
source/chapter#04/shellcode_template.cpp:8
FunctiontestHello
source/chapter#04/dllToTest.c:20
Functionwmain
source/chapter#11/wowInjector/wowInjector/wowInjector.cpp:62