modules

package
v0.0.0-...-823cc7c Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Oct 21, 2022 License: GPL-3.0 Imports: 8 Imported by: 0

Documentation

Index

Constants

View Source
const (
	PROCESS_VM_OPERATION uint32 = 0x0008
	PROCESS_VM_WRITE     uint32 = 0x0020
)

Variables

This section is empty.

Functions

func GetPID

func GetPID(process string) uint32

Get PID of a provided process name

func IsWOW64Process

func IsWOW64Process() bool

Checks if the current process is 32bit

func ReloadDll

func ReloadDll(dll string)

Refreshes the provided DLL by reading the text section from disk and re-writing the dll in memeory

func SePrivEnable

func SePrivEnable(s string) error

Enable SePriv

func Unhook

func Unhook(pid int, dll string) error

ETW bypass by injecting into the provided PID and overwriting the NTDLL.EtwEventWrite function

Types

This section is empty.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL