Affected by 
README
¶
util
Overview
Shared utilities imported by server and implant code. Contains path helpers, resource identifiers, and crypto wrappers. Utilities focus on cryptography, files, generics, and implant within the util package.
Go Files
cryptography.go– Provides shared cryptographic helpers and constants.files.go– File handling utilities for copying, hashing, and temp files.generics.go– Miscellaneous generic helper functions used across packages.implant.go– Utilities for working with implant metadata and artifacts.implant_test.go(tests) – Tests implant utility helpers.paths_generic.go– Platform-neutral path helpers and directories.paths_test.go(tests) – Tests path helper behavior.paths_windows.go– Windows-specific path utilities.resource_ids.go– Generates deterministic resource identifiers.
Sub-packages
encoders/– Common encoder implementations shared across binaries. Offers shared registry wiring and helper encoders.leaky/– Leak detection helpers for debugging resource usage. Implements buffering utilities to capture leaked output.minisign/– Minisign signing and verification helpers. Wraps minisign key handling, signature generation, and validation.
Documentation
¶
Index ¶
- func AllowedName(name string) error
- func ByteCountBinary(b int64) string
- func ChmodR(path string, filePerm, dirPerm os.FileMode) error
- func Contains[T comparable](elements []T, v T) bool
- func CopyFile(src string, dst string) error
- func DeflateBuf(data []byte) []byte
- func Float64() float64
- func Int63n(n int64) int64
- func Intn(n int) int
- func Keys[M ~map[K]V, K comparable, V any](m M) []K
- func PreludeDecrypt(data []byte, key []byte) []byte
- func PreludeEncrypt(data []byte, key []byte, iv []byte) []byte
- func RC4EncryptUnsafe(data []byte, key []byte) []byte
- func ReadFileFromTarGz(tarGzFile string, tarPath string) ([]byte, error)
- func RemoveElement(slice []uint64, value uint64) []uint64
- func ResolvePath(in string) string
- func Shuffle(n int, swap func(i, j int))
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func AllowedName ¶ added in v1.5.18
func ByteCountBinary ¶
ByteCountBinary - Pretty print byte size
func Contains ¶ added in v1.5.30
func Contains[T comparable](elements []T, v T) bool
func DeflateBuf ¶ added in v1.5.22
DeflateBuf - Deflate a buffer using BestCompression (9)
func Float64 ¶ added in v1.6.0
func Float64() float64
Float64 returns a uniform float64 in [0.0, 1.0). Panics if crypto/rand fails.
func Int63n ¶ added in v1.6.0
Int63n returns a uniform int64 in [0, n). Panics if n <= 0 or if crypto/rand fails.
func Intn ¶ added in v1.6.0
Intn returns, like math/rand.Intn, a uniform int in [0, n). Panics if n <= 0 or if the OS CSPRNG fails.
func Keys ¶ added in v1.6.0
func Keys[M ~map[K]V, K comparable, V any](m M) []K
From the x/exp source code - gets a slice of keys for a map
func PreludeDecrypt ¶ added in v1.5.16
PreludeDecrypt a command
func PreludeEncrypt ¶ added in v1.5.16
PreludeEncrypt the results
func RC4EncryptUnsafe ¶ added in v1.5.44
RC4 encryption - Cryptographically insecure! Added for stage-listener shellcode obfuscation Dont use for anything else!
func ReadFileFromTarGz ¶ added in v1.5.0
ReadFileFromTarGz - Read a file from a tar.gz file in-memory
func RemoveElement ¶ added in v1.6.0
func ResolvePath ¶ added in v1.5.0
ResolvePath - Resolve a path from an assumed root path
Types ¶
This section is empty.
Source Files
¶
Directories
¶
| Path | Synopsis |
|---|---|
|
cmd
|
|
|
assets
command
|
|
|
basex
Package basex provides fast base encoding / decoding of any given alphabet using bitcoin style leading zero compression.
|
Package basex provides fast base encoding / decoding of any given alphabet using bitcoin style leading zero compression. |
|
Package lib leakbuf.go is stolen form ss
|
Package lib leakbuf.go is stolen form ss |
|
Package minisign implements the minisign signature scheme.
|
Package minisign implements the minisign signature scheme. |