functions.go at 72a7306ab4f6eed36307ab57041332521d378852 - STRLCPY/BananaPhone

ROOT /

pkg /

functions.go

293 lines | ISO-8859-1 | 11 KB

Blame Outline

Outline

Syscall(callid uint16, argh ...uintptr) : (errcode uint32, err error)

bpSyscall(callid uint16, argh ...uintptr) : (errcode uint32)

GetPEB() : uintptr

GetNtdllStart() : (start uintptr, size uintptr)

getModuleLoadedOrder(i int) : (start uintptr, size uintptr, modulepath *stupidstring)

GetModuleLoadedOrderPtr(i int) : *LdrDataTableEntry

GetModuleLoadedOrder(i int) : (start uintptr, size uintptr, modulepath string)

BaseAddr : uint64

InMemLoads() : (map[string]Image, error)

GetSysIDFromMemory(funcname string) : (uint16, error)

GetSysIDFromDiskOrd(ordinal uint32) : (uint16, error)

GetSysIDFromDisk(funcname string) : (uint16, error)

NtAllocateVirtualMemory(sysid uint16, processHandle uintptr, baseAddress *uintptr, zeroBits uintptr, regionSize *uintptr, allocationType, protect uintptr) : (uint32, error)

WriteMemory(inbuf []byte, destination uintptr)

NtProtectVirtualMemory(sysid uint16, processHandle uintptr, baseAddress, regionSize *uintptr, NewProtect uintptr, oldprotect *uintptr) : (uint32, error)

NtCreateThreadEx(sysid uint16, hostThread *uintptr, DesiredAccess, ObjectAttributes, ProcessHandle, LpStartAddress, LpParameter, Createsuspended, StackZeroBits, sizeofstackcommit, SizeOfStackReserve, lpBytesBuffer uintptr) : (uint32, error)

CreateThreadDisk(shellcode []byte)

CreateThreadMem(shellcode []byte)

ProcessAllAccess

CreateRemoteThreadMemory(shellcode []byte, pid uint32)

CreateRemoteThreadDisk(shellcode []byte, pid uint32)

CreateThread(shellcode []byte, handle uintptr, NtAllocateVirtualMemorySysid, NtProtectVirtualMemorySysid, NtCreateThreadExSysid uint16)

Please wait...

Page is in error, reload to recover