processes

README

Processes

Commands for manipulating remote processes, e.g. ps, terminate, etc.

Documentation

Index

• func Commands(con *console.SliverClient) []*cobra.Command
• func GetPIDByName(cmd *cobra.Command, name string, con *console.SliverClient) int
• func LootProcessDump(dump *sliverpb.ProcessDump, lootName string, hostName string, pid int, ...)
• func PrintPS(os string, ps *sliverpb.Ps, interactive bool, flags *pflag.FlagSet, ...)
• func PrintProcessDump(dump *sliverpb.ProcessDump, saveTo string, hostname string, pid int, ...)
• func PrintServiceDetail(serviceDetail *sliverpb.ServiceDetail, con *console.SliverClient)
• func PrintServices(serviceInfo *sliverpb.Services, con *console.SliverClient)
• func PrintTerminate(terminated *sliverpb.Terminate, con *console.SliverClient)
• func ProcdumpCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
• func PsCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
• func ServiceInfoCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
• func ServiceStartCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
• func ServiceStopCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
• func ServicesCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
• func SortProcessesByPID(ps []*commonpb.Process) []*commonpb.Process
• func TerminateCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
• type PsTree
  • func NewPsTree(pid int32) *PsTree
  • func (t *PsTree) AddProcess(proc *commonpb.Process)
  • func (t *PsTree) Print() string
  • func (t *PsTree) String() string

Functions

func Commands

func Commands(con *console.SliverClient) []*cobra.Command

Commands returns the “ command and its subcommands.

func GetPIDByName

func GetPIDByName(cmd *cobra.Command, name string, con *console.SliverClient) int

GetPIDByName - Get a PID by name from the active session

func LootProcessDump

func LootProcessDump(dump *sliverpb.ProcessDump, lootName string, hostName string, pid int, con *console.SliverClient)

func PrintPS

func PrintPS(os string, ps *sliverpb.Ps, interactive bool, flags *pflag.FlagSet, con *console.SliverClient)

PrintPS - Prints the process list

func PrintProcessDump

func PrintProcessDump(dump *sliverpb.ProcessDump, saveTo string, hostname string, pid int, con *console.SliverClient)

PrintProcessDump - Handle the results of a process dump

func PrintServiceDetail

func PrintServiceDetail(serviceDetail *sliverpb.ServiceDetail, con *console.SliverClient)

func PrintServices

func PrintServices(serviceInfo *sliverpb.Services, con *console.SliverClient)

func PrintTerminate

func PrintTerminate(terminated *sliverpb.Terminate, con *console.SliverClient)

PrintTerminate - Print the results of the terminate command

func ProcdumpCmd

func ProcdumpCmd(cmd *cobra.Command, con *console.SliverClient, args []string)

ProcdumpCmd - Dump the memory of a remote process

func PsCmd

func PsCmd(cmd *cobra.Command, con *console.SliverClient, args []string)

PsCmd - List processes on the remote system

func ServiceInfoCmd

func ServiceInfoCmd(cmd *cobra.Command, con *console.SliverClient, args []string)

func ServiceStartCmd

func ServiceStartCmd(cmd *cobra.Command, con *console.SliverClient, args []string)

func ServiceStopCmd

func ServiceStopCmd(cmd *cobra.Command, con *console.SliverClient, args []string)

func ServicesCmd

func ServicesCmd(cmd *cobra.Command, con *console.SliverClient, args []string)

func SortProcessesByPID

func SortProcessesByPID(ps []*commonpb.Process) []*commonpb.Process

SortProcessesByPID - Sorts a list of processes by PID

func TerminateCmd

func TerminateCmd(cmd *cobra.Command, con *console.SliverClient, args []string)

TerminateCmd - Terminate a process on the remote system

Types

type PsTree

type PsTree struct {
	// contains filtered or unexported fields
}

A PsTree is a tree of *commonpb.Process

func NewPsTree

func NewPsTree(pid int32) *PsTree

NewPsTree creates a new PsTree

func (*PsTree) AddProcess

func (t *PsTree) AddProcess(proc *commonpb.Process)

func (*PsTree) Print

func (t *PsTree) Print() string

func (*PsTree) String

func (t *PsTree) String() string