windows

Documentation

Index

• Constants
• func AddRegKeyBinary(registryString string, path string, name string, value []byte) error
• func AddRegKeyDWORD(registryString string, path string, name string, value int64) error
• func AddRegKeyExpandedString(registryString string, path string, name string, value string) error
• func AddRegKeyQWORD(registryString string, path string, name string, value int64) error
• func AddRegKeyString(registryString string, path string, name string, value string) error
• func AddRegKeyStrings(registryString string, path string, name string, value []string) error
• func DelRegKey(registryString string, path string) error
• func DelRegKeyValue(registryString string, path string, valueName string) error
• func FindPid(procName string) (int, error)
• func GetRunningCount(procName string) (int, error)
• func InjectShellcode(pid_int int, payload []byte) error
• func RunAs(user, password, proc, cmdline string, netonly bool) (int, error)
• type RegistryRetValue
  • func QueryRegKey(registryString string, path string, key string) (RegistryRetValue, error)

Constants

const (
	MEM_COMMIT                = 0x1000
	MEM_RESERVE               = 0x2000
	PAGE_EXECUTE_READWRITE    = 0x40
	PROCESS_CREATE_THREAD     = 0x0002
	PROCESS_QUERY_INFORMATION = 0x0400
	PROCESS_VM_OPERATION      = 0x0008
	PROCESS_VM_WRITE          = 0x0020
	PROCESS_VM_READ           = 0x0010
)

Functions

func AddRegKeyBinary

func AddRegKeyBinary(registryString string, path string, name string, value []byte) error

AddRegKeyBinary Adds a registry key of type "binary".

func AddRegKeyDWORD

func AddRegKeyDWORD(registryString string, path string, name string, value int64) error

AddRegKeyDWORD Adds a registry key of type DWORD.

func AddRegKeyExpandedString

func AddRegKeyExpandedString(registryString string, path string, name string, value string) error

AddRegKeyExpandedString Adds a registry key of type "expanded string".

func AddRegKeyQWORD

func AddRegKeyQWORD(registryString string, path string, name string, value int64) error

AddRegKeyQWORD Adds a registry key of type QDWORD.

func AddRegKeyString

func AddRegKeyString(registryString string, path string, name string, value string) error

Public funcs

AddRegKeyString Adds a registry key of type "string".

func AddRegKeyStrings

func AddRegKeyStrings(registryString string, path string, name string, value []string) error

AddRegKeyStrings Adds a registry key of type "strings".

func DelRegKey

func DelRegKey(registryString string, path string) error

DelRegKey Removes a key from the registry.

func DelRegKeyValue

func DelRegKeyValue(registryString string, path string, valueName string) error

DelRegKeyValue Removes the value of a key from the registry.

func FindPid

func FindPid(procName string) (int, error)

FindPid returns the PID of a running proccess as an int.

func GetRunningCount

func GetRunningCount(procName string) (int, error)

GetRunningCount returns the number of copies of a process running as an int.

func InjectShellcode

func InjectShellcode(pid_int int, payload []byte) error

InjectShellcode Injects shellcode into a running process.

func RunAs

func RunAs(user, password, proc, cmdline string, netonly bool) (int, error)

Types

type RegistryRetValue

type RegistryRetValue struct {
	ValType        string   `json:"return_type"`
	StringVal      string   `json:"string_val"`
	StringArrayVal []string `json:"string_array_val"`
	ByteArrayVal   []byte   `json:"byte_array_val"`
	IntVal         uint32   `json:"int_val"`
	LongVal        uint64   `json:"long_val"`
}

func QueryRegKey

func QueryRegKey(registryString string, path string, key string) (RegistryRetValue, error)

QueryRegKey Retrives a registry key's value.