Documentation ¶
Index ¶
Constants ¶
View Source
const MEM_COMMIT = 0x1000
View Source
const MEM_RESERVE = 0x2000
View Source
const PAGE_EXECUTE_READWRITE = 0x40
View Source
const PROCESS_CREATE_THREAD = 0x0002
View Source
const PROCESS_QUERY_INFORMATION = 0x0400
View Source
const PROCESS_VM_OPERATION = 0x0008
View Source
const PROCESS_VM_READ = 0x0010
View Source
const PROCESS_VM_WRITE = 0x0020
Variables ¶
View Source
var CreateRemoteThread = K32.MustFindProc("CreateRemoteThread")
View Source
var CreateThread = K32.MustFindProc("CreateThread")
View Source
var GetAsyncKeyState = USER32.MustFindProc("GetAsyncKeyState")
View Source
var IsDebuggerPresent = K32.MustFindProc("IsDebuggerPresent")
View Source
var K32 = syscall.MustLoadDLL("kernel32.dll") //kernel32.dll
View Source
var MagicNumber int64 = 0
View Source
var OpenProcess = K32.MustFindProc("OpenProcess")
View Source
var ProcessInfo syscall.ProcessInformation
View Source
var StatupInfo syscall.StartupInfo
View Source
var USER32 = syscall.MustLoadDLL("user32.dll") //user32.dll
View Source
var VirtualAlloc = K32.MustFindProc("VirtualAlloc")
View Source
var VirtualAllocEx = K32.MustFindProc("VirtualAllocEx")
View Source
var WriteProcessMemory = K32.MustFindProc("WriteProcessMemory")
Functions ¶
func AllocateFakeMemory ¶
func AllocateFakeMemory()
func CheckDebugger ¶
func CheckDebugger()
func Persistence ¶
func Persistence()
Types ¶
This section is empty.
Click to show internal directories.
Click to hide internal directories.