Affected by 
README
¶
client/command/processes
Overview
Implements the 'processes' command group for the Sliver client console. Handlers map Cobra invocations to processes workflows such as procdump, PS, pstree, and terminate.
Go Files
commands.go– Creates the processes command suite and binds subcommands for inspection and control.procdump.go– Dumps process memory to loot for forensic analysis via RPC tasks.ps.go– Lists active processes on the target with filtering options.pstree.go– Renders process hierarchies as a tree view.services.go– Enumerates Windows services and their states.terminate.go– Terminates processes by PID with confirmation messaging.
Documentation
¶
Index ¶
- func Commands(con *console.SliverClient) []*cobra.Command
- func GetPIDByName(cmd *cobra.Command, name string, con *console.SliverClient) int
- func LootProcessDump(dump *sliverpb.ProcessDump, lootName string, hostName string, pid int, ...)
- func PrintPS(os string, ps *sliverpb.Ps, interactive bool, fullInfo bool, ...)
- func PrintProcessDump(dump *sliverpb.ProcessDump, saveTo string, hostname string, pid int, ...)
- func PrintServiceDetail(serviceDetail *sliverpb.ServiceDetail, con *console.SliverClient)
- func PrintServices(serviceInfo *sliverpb.Services, con *console.SliverClient)
- func PrintTerminate(terminated *sliverpb.Terminate, con *console.SliverClient)
- func ProcdumpCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
- func PsCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
- func ServiceInfoCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
- func ServiceStartCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
- func ServiceStopCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
- func ServicesCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
- func SortProcessesByPID(ps []*commonpb.Process) []*commonpb.Process
- func TerminateCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
- type PsTree
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func Commands ¶ added in v1.6.0
func Commands(con *console.SliverClient) []*cobra.Command
Commands returns the “ command and its subcommands.
func GetPIDByName ¶
GetPIDByName - Get a PID by name from the active session
func LootProcessDump ¶ added in v1.5.13
func LootProcessDump(dump *sliverpb.ProcessDump, lootName string, hostName string, pid int, con *console.SliverClient)
func PrintPS ¶ added in v1.5.0
func PrintPS(os string, ps *sliverpb.Ps, interactive bool, fullInfo bool, flags *pflag.FlagSet, con *console.SliverClient)
PrintPS - Prints the process list
func PrintProcessDump ¶ added in v1.5.0
func PrintProcessDump(dump *sliverpb.ProcessDump, saveTo string, hostname string, pid int, con *console.SliverClient)
PrintProcessDump - Handle the results of a process dump
func PrintServiceDetail ¶ added in v1.6.0
func PrintServiceDetail(serviceDetail *sliverpb.ServiceDetail, con *console.SliverClient)
func PrintServices ¶ added in v1.6.0
func PrintServices(serviceInfo *sliverpb.Services, con *console.SliverClient)
func PrintTerminate ¶ added in v1.5.0
func PrintTerminate(terminated *sliverpb.Terminate, con *console.SliverClient)
PrintTerminate - Print the results of the terminate command
func ProcdumpCmd ¶
func ProcdumpCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
ProcdumpCmd - Dump the memory of a remote process
func PsCmd ¶
func PsCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
PsCmd - List processes on the remote system
func ServiceInfoCmd ¶ added in v1.6.0
func ServiceInfoCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
func ServiceStartCmd ¶ added in v1.6.0
func ServiceStartCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
func ServiceStopCmd ¶ added in v1.6.0
func ServiceStopCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
func ServicesCmd ¶ added in v1.6.0
func ServicesCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
func SortProcessesByPID ¶ added in v1.5.31
SortProcessesByPID - Sorts a list of processes by PID
func TerminateCmd ¶
func TerminateCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
TerminateCmd - Terminate a process on the remote system
Types ¶
type PsTree ¶ added in v1.5.31
type PsTree struct {
// contains filtered or unexported fields
}
A PsTree is a tree of *commonpb.Process
func (*PsTree) AddProcess ¶ added in v1.5.31
Source Files
Click to show internal directories.
Click to hide internal directories.