evade

Documentation

Index

• func CheckDLL(_ string) (bool, error)
• func ReloadDLL(_ string) error

Functions

func CheckDLL

func CheckDLL(_ string) (bool, error)

CheckDLL is a similar function to ReloadDLL. This function will return 'true' and 'nil' if the contents in memory match the contents of the file on disk. Otherwise it returns false.

Always returns 'ErrNoWindows' on non-Windows devices.

func ReloadDLL

func ReloadDLL(_ string) error

ReloadDLL is a function shamelessly stolen from the sliver project. This function will read a DLL file from on-disk and rewrite over it's current in-memory contents to erase any hooks placed on function calls.

Re-mastered and refactored to be less memory hungry and easier to read :P

Orig src here:

https://github.com/BishopFox/sliver/blob/f94f0fc938ca3871390c5adfa71bf4edc288022d/implant/sliver/evasion/evasion_windows.go#L116

Always returns 'ErrNoWindows' on non-Windows devices.