processes

README

Processes

Commands for manipulating remote processes, e.g. ps, terminate, etc.

Documentation

Index

• func GetPIDByName(ctx *grumble.Context, name string, con *console.SliverConsoleClient) int
• func LootProcessDump(dump *sliverpb.ProcessDump, lootName string, hostName string, pid int, ...)
• func PrintPS(os string, ps *sliverpb.Ps, interactive bool, ctx *grumble.Context, ...)
• func PrintProcessDump(dump *sliverpb.ProcessDump, saveTo string, hostname string, pid int, ...)
• func PrintTerminate(terminated *sliverpb.Terminate, con *console.SliverConsoleClient)
• func ProcdumpCmd(ctx *grumble.Context, con *console.SliverConsoleClient)
• func PsCmd(ctx *grumble.Context, con *console.SliverConsoleClient)
• func SortProcessesByPID(ps []*commonpb.Process) []*commonpb.Process
• func TerminateCmd(ctx *grumble.Context, con *console.SliverConsoleClient)
• type PsTree
  • func NewPsTree(pid int32) *PsTree
  • func (t *PsTree) AddProcess(proc *commonpb.Process)
  • func (t *PsTree) Print() string
  • func (t *PsTree) String() string

Functions

func GetPIDByName

func GetPIDByName(ctx *grumble.Context, name string, con *console.SliverConsoleClient) int

GetPIDByName - Get a PID by name from the active session

func LootProcessDump

func LootProcessDump(dump *sliverpb.ProcessDump, lootName string, hostName string, pid int, con *console.SliverConsoleClient)

func PrintPS

func PrintPS(os string, ps *sliverpb.Ps, interactive bool, ctx *grumble.Context, con *console.SliverConsoleClient)

PrintPS - Prints the process list

func PrintProcessDump

func PrintProcessDump(dump *sliverpb.ProcessDump, saveTo string, hostname string, pid int, con *console.SliverConsoleClient)

PrintProcessDump - Handle the results of a process dump

func PrintTerminate

func PrintTerminate(terminated *sliverpb.Terminate, con *console.SliverConsoleClient)

PrintTerminate - Print the results of the terminate command

func ProcdumpCmd

func ProcdumpCmd(ctx *grumble.Context, con *console.SliverConsoleClient)

ProcdumpCmd - Dump the memory of a remote process

func PsCmd

func PsCmd(ctx *grumble.Context, con *console.SliverConsoleClient)

PsCmd - List processes on the remote system

func SortProcessesByPID

func SortProcessesByPID(ps []*commonpb.Process) []*commonpb.Process

SortProcessesByPID - Sorts a list of processes by PID

func TerminateCmd

func TerminateCmd(ctx *grumble.Context, con *console.SliverConsoleClient)

TerminateCmd - Terminate a process on the remote system

Types

type PsTree

type PsTree struct {
	// contains filtered or unexported fields
}

A PsTree is a tree of *commonpb.Process

func NewPsTree

func NewPsTree(pid int32) *PsTree

NewPsTree creates a new PsTree

func (*PsTree) AddProcess

func (t *PsTree) AddProcess(proc *commonpb.Process)

func (*PsTree) Print

func (t *PsTree) Print() string

func (*PsTree) String

func (t *PsTree) String() string