pkg.gl

Categorygithub.com/tralahm/blackhat-gochapter12_Windows_System_Interaction_and_AnalysisprocInjectorwinsys

package

0.0.0-20230722135718-153971b81542

Repository: https://github.com/tralahm/blackhat-go.git

Documentation: pkg.go.dev

# Functions

AdjustTokenPrivileges

adjustTokenPrivileges from core zsyscall_windows.go.

CreateRemoteThread

No description provided by the author

GetLoadLibAddress

No description provided by the author

GetTokenPrivileges

No description provided by the author

GetTokenUser

GetTokenUser returns the User associated with the given Token.

LookupPrivilegeName

No description provided by the author

LookupPrivilegeValue

No description provided by the author

MapPrivilegeValueToName

No description provided by the author

OpenProcessHandle

No description provided by the author

SetTokenPrivilege

No description provided by the author

VirtualAllocEx

No description provided by the author

VirtualFreeEx

No description provided by the author

WaitForSingleObject

No description provided by the author

WriteProcessMemory

No description provided by the author

# Constants

CREATE_SUSPENDED

No description provided by the author

DELETE

No description provided by the author

ERROR_NOT_ALL_ASSIGNED

No description provided by the author

INFINITE

No description provided by the author

MEM_COMMIT

No description provided by the author

MEM_RELEASE

No description provided by the author

MEM_RESERVE

No description provided by the author

PAGE_EXECUTE

No description provided by the author

PAGE_EXECUTE_READ

No description provided by the author

PAGE_EXECUTE_READWRITE

No description provided by the author

PAGE_EXECUTE_WRITECOPY

No description provided by the author

PAGE_GUARD

No description provided by the author

PAGE_NOACCESS

No description provided by the author

PAGE_NOCACHE

No description provided by the author

PAGE_READONLY

No description provided by the author

PAGE_READWRITE

No description provided by the author

PAGE_WRITECOMBINE

No description provided by the author

PAGE_WRITECOPY

No description provided by the author

PROCESS_ALL_ACCESS

No description provided by the author

PROCESS_CREATE_PROCESS

No description provided by the author

PROCESS_CREATE_THREAD

No description provided by the author

PROCESS_DUP_HANDLE

No description provided by the author

PROCESS_QUERY_INFORMATION

No description provided by the author

PROCESS_QUERY_LIMITED_INFORMATION

No description provided by the author

PROCESS_SET_INFORMATION

No description provided by the author

PROCESS_SET_QUOTA

No description provided by the author

PROCESS_SUSPEND_RESUME

No description provided by the author

PROCESS_TERMINATE

No description provided by the author

PROCESS_VM_OPERATION

No description provided by the author

PROCESS_VM_READ

No description provided by the author

PROCESS_VM_WRITE

No description provided by the author

READ_CONTROL

No description provided by the author

SE_ASSIGNPRIMARYTOKEN_NAME

https://docs.microsoft.com/en-us/windows/desktop/secauthz/privilege-constants.

SE_AUDIT_NAME

No description provided by the author

SE_BACKUP_NAME

No description provided by the author

SE_CHANGE_NOTIFY_NAME

No description provided by the author

SE_CREATE_GLOBAL_NAME

No description provided by the author

SE_CREATE_PAGEFILE_NAME

No description provided by the author

SE_CREATE_PERMANENT_NAME

No description provided by the author

SE_CREATE_SYMBOLIC_LINK_NAME

No description provided by the author

SE_CREATE_TOKEN_NAME

No description provided by the author

SE_DEBUG_NAME

No description provided by the author

SE_DELEGATE_SESSION_USER_IMPERSONATE_NAME

No description provided by the author

SE_ENABLE_DELEGATION_NAME

No description provided by the author

SE_IMPERSONATE_NAME

No description provided by the author

SE_INC_BASE_PRIORITY_NAME

No description provided by the author

SE_INC_WORKING_SET_NAME

No description provided by the author

SE_INCREASE_QUOTA_NAME

No description provided by the author

SE_LOAD_DRIVER_NAME

No description provided by the author

SE_LOCK_MEMORY_NAME

No description provided by the author

SE_MACHINE_ACCOUNT_NAME

No description provided by the author

SE_MANAGE_VOLUME_NAME

No description provided by the author

SE_PRIVILEGE_ENABLED

No description provided by the author

SE_PRIVILEGE_ENABLED_BY_DEFAULT

No description provided by the author

SE_PRIVILEGE_REMOVED

No description provided by the author

SE_PRIVILEGE_USED_FOR_ACCESS

No description provided by the author

SE_PROF_SINGLE_PROCESS_NAME

No description provided by the author

SE_RELABEL_NAME

No description provided by the author

SE_REMOTE_SHUTDOWN_NAME

No description provided by the author

SE_RESTORE_NAME

No description provided by the author

SECURITY_MANDATORY_HIGH_RID

No description provided by the author

SECURITY_MANDATORY_LOW_RID

No description provided by the author

SECURITY_MANDATORY_MEDIUM_RID

No description provided by the author

SECURITY_MANDATORY_PROTECTED_PROCESS_RID

No description provided by the author

SECURITY_MANDATORY_SYSTEM_RID

No description provided by the author

SECURITY_MANDATORY_UNTRUSTED_RID

Integrity Levels.

SecurityAnonymous

No description provided by the author

SecurityDelegation

No description provided by the author

SecurityIdentification

No description provided by the author

SecurityImpersonation

No description provided by the author

SIZE

No description provided by the author

STANDARD_RIGHTS_ALL

No description provided by the author

STANDARD_RIGHTS_EXECUTE

No description provided by the author

STANDARD_RIGHTS_READ

No description provided by the author

STANDARD_RIGHTS_REQUIRED

No description provided by the author

STANDARD_RIGHTS_WRITE

No description provided by the author

SYNCHRONIZE

No description provided by the author

TOKEN_ADJUST_DEFAULT

No description provided by the author

TOKEN_ADJUST_GROUPS

No description provided by the author

TOKEN_ADJUST_PRIVILEGES

No description provided by the author

TOKEN_ADJUST_SESSIONID

No description provided by the author

TOKEN_ALL_ACCESS

No description provided by the author

TOKEN_ASSIGN_PRIMARY

No description provided by the author

TOKEN_DUPLICATE

No description provided by the author

TOKEN_IMPERSONATE

No description provided by the author

TOKEN_QUERY

No description provided by the author

TOKEN_QUERY_SOURCE

No description provided by the author

WRITE_DAC

No description provided by the author

WRITE_OWNER

No description provided by the author

# Variables

ModKernel32

No description provided by the author

ProcAdjustTokenPrivileges

No description provided by the author

ProcCloseHandle

No description provided by the author

ProcCreateRemoteThread

No description provided by the author

ProcCreateThread

No description provided by the author

ProcGetAsyncKeyState

No description provided by the author

ProcGetCurrentProcess

No description provided by the author

ProcGetExitCodeThread

No description provided by the author

ProcGetLastError

No description provided by the author

ProcGetProcAddress

No description provided by the author

ProcIsDebuggerPresent

No description provided by the author

ProcLookupPrivilegeNameW

No description provided by the author

ProcLookupPrivilegeValueW

No description provided by the author

ProcOpenProcess

No description provided by the author

ProcOpenProcessToken

No description provided by the author

ProcVirtualAlloc

No description provided by the author

ProcVirtualAllocEx

No description provided by the author

ProcVirtualFreeEx

No description provided by the author

ProcWaitForSingleObject

No description provided by the author

ProcWriteProcessMemory

No description provided by the author

# Structs

Inject

No description provided by the author

Privilege

No description provided by the author

TOKEN

No description provided by the author

User

User represent the information about a Windows account.