MCPcopy Create free account

hub / github.com/akkuman/toolset / functions

Functions112 in github.com/akkuman/toolset

⨍ Functions 112◇ Types & classes 20
↓ 11 callersFunctionNewError
(ctx *gin.Context, status int, err error)
httputil/error.go:10
↓ 8 callersMethodRun
()
plugins/plugins.go:18
↓ 6 callersFunctionNewPreloadDllHijackBase
NewPreloadDllHijackBase 根据传入的子组件来创建一个完整的插件
plugins/preload_dllhijack.go:91
↓ 3 callersFunctionCustomEncryptData
CustomEncryptData 私有的文件加密逻辑
utils/utils.go:122
↓ 3 callersMethodGetPluginDataPath
()
plugins/plugins.go:25
↓ 3 callersFunctionRandInt63
(from int64, to int64)
utils/utils.go:41
↓ 3 callersFunctionRandStringRunes
(n int64)
utils/utils.go:33
↓ 3 callersFunctionVirtualProtect
(lpAddress unsafe.Pointer, dwSize uintptr, flNewProtect uint32, lpflOldProtect unsafe.Pointer)
data/preload_dll_hijack_x86/main.go:33
↓ 3 callersFunctionZipData
ZipData 压缩数据
utils/utils.go:135
↓ 3 callersFunctionbytesToIntStr
bytesToIntStr []byte{123, 456} => []string{"123", "456"}
utils/utils.go:166
↓ 3 callersMethodgetLoaderPath
getLoaderPath 获取生成的loader的路径
plugins/shellcode_runner.go:30
↓ 2 callersFunctionCopyDir
CopyDir 拷贝一个目录到另一个目录
utils/utils.go:106
↓ 2 callersFunctionDllHijackConfig
()
plugins/preload_dllhijack.go:19
↓ 2 callersMethodGetDllName
()
plugins/preload_dllhijack.go:83
↓ 2 callersMethodGetIsX64Arch
()
plugins/preload_dllhijack.go:85
↓ 2 callersMethodGetRootPath
()
plugins/plugins.go:21
↓ 2 callersFunctionUpdateTplFile
UpdateTplFile 根据所给的tpl文件路径和data以及funcs更新模板文件
utils/utils.go:200
↓ 2 callersFunctionXorEncryptDecrypt
XorEncryptDecrypt 异或加解密
utils/utils.go:68
↓ 2 callersMethodbuildTmpWorkDir
buildTmpWorkDir 新建一个临时目录作为工作目录，并把所有的所需的基础文件拷贝过去
plugins/plugins.go:50
↓ 2 callersMethoddefToExp
defToExp 将 def 文件转为 exp 文件
plugins/plugins.go:39
↓ 1 callersFunctionCopyFile
CopyFile 拷贝文件
utils/utils.go:76
↓ 1 callersFunctionCryptStringToBytesRc4
CryptStringToBytesRc4 采用rc4加密一个字符串，返回加密后的数据和rc4key
utils/utils.go:157
↓ 1 callersFunctionE
(shellcodeFilepath string)
data/dll_proxyer/main.go:69
↓ 1 callersMethodGetDllExports
()
plugins/preload_dllhijack.go:86
↓ 1 callersFunctionGetExecutableDir
()
utils/utils.go:58
↓ 1 callersMethodGetExtraFileList
()
plugins/preload_dllhijack.go:87
↓ 1 callersMethodGetFoundationPath
(pluginRootPath string)
plugins/preload_dllhijack.go:81
↓ 1 callersMethodGetMainProgramName
()
plugins/preload_dllhijack.go:82
↓ 1 callersMethodGetPluginName
()
plugins/preload_dllhijack.go:84
↓ 1 callersFunctionInjectShllcodeToSignExe
InjectShllcodeToSignExe 注入shellcode到签名的exe里面去
utils/utils.go:218
↓ 1 callersFunctionNewController
()
controller/controller.go:5
↓ 1 callersFunctionNewDllProxyer
(shellcode []byte, dllData []byte, dllName string, x64 bool)
plugins/dll_proxyer.go:24
↓ 1 callersFunctionNewShellcodeLoader
(shellcode []byte, reGenerate, x64 bool)
plugins/shellcode_runner.go:18
↓ 1 callersFunctionOnProcessAttach
OnProcessAttach is an async callback (hook). export OnProcessAttach
data/dll_proxyer/main.go:101
↓ 1 callersFunctionPathExist
(name string)
utils/utils.go:49
↓ 1 callersFunctionRUN
(buf []byte)
data/preload_dll_hijack_x86/main.go:42
↓ 1 callersMethodRun
()
plugins/dll_proxyer.go:93
↓ 1 callersMethodRun
()
plugins/shellcode_runner.go:78
↓ 1 callersMethodSetShellcdoe
([]byte)
plugins/plugins.go:17
↓ 1 callersFunctionTplBytes
TplBytes : 将byte数组填充为模板中的字符串
utils/utils.go:194
↓ 1 callersFunctionTplStrXorEncode
TplStrXorEncode 返回xorEncode函数的字符串
utils/utils.go:182
↓ 1 callersFunctionX
* NTSTATUS NtProtectVirtualMemory( IN HANDLE, IN OUT PVOID*, IN OUT SIZE_T*, IN ULONG, OUT PULONG ) */ 执行shellcode inspired by: https://gith
data/dll_proxyer/main.go:37
↓ 1 callersFunctionXorEncryptDecrypt
XorEncryptDecrypt 异或加解密
data/preload_dll_hijack_x86/main.go:58
↓ 1 callersFunctionXorEncryptDecrypt
XorEncryptDecrypt 异或加解密
data/dll_proxyer/main.go:62
↓ 1 callersFunctionXorEncryptDecrypt
XorEncryptDecrypt 异或加解密
data/shellcode_runner/windows_amd64/main.go:59
↓ 1 callersFunctionXorEncryptDecrypt
XorEncryptDecrypt 异或加解密
data/shellcode_runner/windows_386/main.go:59
↓ 1 callersMethodbuildEvilDll
(workDir string, x64 bool, expPath string)
plugins/dll_proxyer.go:57
↓ 1 callersMethodbuildEvilDll
(workDir string, x64 bool, expPath string)
plugins/preload_dllhijack.go:112
↓ 1 callersFunctiondecryptShellcode
(shellcodeData []byte)
data/preload_dll_hijack_x86/main.go:65
↓ 1 callersFunctionextractShellcode
(data []byte, pattern []byte)
data/preload_dll_hijack_x86/main.go:91
↓ 1 callersMethodgenDefContent
genDefContent 根据原始dll文件名称和导出表生成def文件内容
plugins/dll_proxyer.go:49
↓ 1 callersMethodgetBuildWorkDir
getBuildWorkDir 获取执行编译命令的工作目录
plugins/shellcode_runner.go:39
↓ 1 callersMethodgetDlltoolPath
getDlltoolPath 获取系统中 dlltool 的路径
plugins/plugins.go:30
↓ 1 callersMethodgetExports
getExports 获取 dll 的导出表
plugins/dll_proxyer.go:37
↓ 1 callersMethodgetLoader
()
plugins/shellcode_runner.go:87
↓ 1 callersMethodgetShellcodeData
getShellcodeData 对shellcode做变形后的data
plugins/shellcode_runner.go:48
↓ 1 callersMethodgetZipPath
getZipPath 获取loader和payload打包文件路径
plugins/shellcode_runner.go:59
↓ 1 callersMethodloaderIsExist
loaderIsExist 获取shellcode loader是否存在
plugins/shellcode_runner.go:53
↓ 1 callersMethodupdateDefFile
(defFilePath string, exports []string, dllName string)
plugins/preload_dllhijack.go:103
↓ 1 callersFunctionupdateMainGoFile
updateMainGoFile 更新源代码文件
plugins/preload_dllhijack.go:149
↓ 1 callersFunctionworkman
data/preload_dll_hijack_x86/dllmain.c:4
↓ 1 callersFunctionxxx
* NTSTATUS NtProtectVirtualMemory( IN HANDLE, IN OUT PVOID*, IN OUT SIZE_T*, IN ULONG, OUT PULONG ) */ 执行shellcode inspired by: https://gith
data/shellcode_runner/windows_amd64/main.go:32
↓ 1 callersFunctionxxx
* NTSTATUS NtProtectVirtualMemory( IN HANDLE, IN OUT PVOID*, IN OUT SIZE_T*, IN ULONG, OUT PULONG ) */ 执行shellcode inspired by: https://gith
data/shellcode_runner/windows_386/main.go:32
MethodDllHijack
DllHijack godoc @Summary generate a white + black @Description generate a white + black evil program @Tags pretender @Accept json @Produce octet-strea
controller/dllhijack.go:38
MethodDllHijackConfig
DllHijackConfig godoc @Summary get dll hijack option @Description get all valid dll hijack option @Tags config @Accept json @Produce json @Success 200
controller/dllhijack.go:22
FunctionDllMain
data/preload_dll_hijack_x86/dllmain.c:29
FunctionDllMain
data/dll_proxyer/dllmain.c:16
MethodDllProxyer
DllProxyer godoc @Summary generate a evil dll proxyer @Description Generate a evil dll proxyer according to shellcode and dll provided by the user @De
controller/proxyer.go:28
MethodGetDllExports
()
plugins/preload_dllhijack_powerpoint2007.go:20
MethodGetDllExports
()
plugins/preload_dllhijack_cloudmusic.go:24
MethodGetDllExports
()
plugins/preload_dllhijack_steam.go:20
MethodGetDllExports
()
plugins/preload_dllhijack_XLLiveUD.go:20
MethodGetDllExports
()
plugins/preload_dllhijack_vscode.go:20
MethodGetDllExports
()
plugins/preload_dllhijack_Thunder.go:20
MethodGetDllName
()
plugins/preload_dllhijack_powerpoint2007.go:12
MethodGetDllName
()
plugins/preload_dllhijack_cloudmusic.go:12
MethodGetDllName
()
plugins/preload_dllhijack_steam.go:12
MethodGetDllName
()
plugins/preload_dllhijack_XLLiveUD.go:12
MethodGetDllName
()
plugins/preload_dllhijack_vscode.go:12
MethodGetDllName
()
plugins/preload_dllhijack_Thunder.go:12
MethodGetExtraFileList
GetExtraFileList 获取额外的文件列表，某些情况下exe可能导入的dll不止一个，但我们只对其中一个进行劫持，其他的dll在该列表中体现
plugins/preload_dllhijack_steam.go:39
MethodGetExtraFileList
GetExtraFileList 获取额外的文件列表，某些情况下exe可能导入的dll不止一个，但我们只对其中一个进行劫持，其他的dll在该列表中体现
plugins/preload_dllhijack_vscode.go:32
MethodGetExtraFileList
GetExtraFileList 获取额外的文件列表，某些情况下exe可能导入的dll不止一个，但我们只对其中一个进行劫持，其他的dll在该列表中体现
plugins/preload_dllhijack.go:68
MethodGetFoundationPath
GetFoundationPath 获取子组件的下级基础文件夹（用来构建dll）
plugins/preload_dllhijack.go:58
MethodGetIsX64Arch
()
plugins/preload_dllhijack_cloudmusic.go:20
MethodGetIsX64Arch
GetIsX64Arch 是否为64位
plugins/preload_dllhijack.go:63
MethodGetMainProgramName
()
plugins/preload_dllhijack_powerpoint2007.go:8
MethodGetMainProgramName
()
plugins/preload_dllhijack_cloudmusic.go:8
MethodGetMainProgramName
()
plugins/preload_dllhijack_steam.go:8
MethodGetMainProgramName
()
plugins/preload_dllhijack_XLLiveUD.go:8
MethodGetMainProgramName
()
plugins/preload_dllhijack_vscode.go:8
MethodGetMainProgramName
()
plugins/preload_dllhijack_Thunder.go:8
MethodGetPluginName
()
plugins/preload_dllhijack_powerpoint2007.go:16
MethodGetPluginName
()
plugins/preload_dllhijack_cloudmusic.go:16
MethodGetPluginName
()
plugins/preload_dllhijack_steam.go:16
MethodGetPluginName
()
plugins/preload_dllhijack_XLLiveUD.go:16
MethodGetPluginName
()
plugins/preload_dllhijack_vscode.go:16
MethodGetPluginName
()
plugins/preload_dllhijack_Thunder.go:16
FunctionMyThreadFunction
data/dll_proxyer/dllmain.c:9
FunctionOnProcessAttach
export OnProcessAttach
data/preload_dll_hijack_x86/main.go:112
next →1–100 of 112, ranked by callers