The highest tagged major version is
Documentation
¶
Index ¶
- func CLR(cmd jobs.Command) jobs.Results
- func CreateProcess(cmd jobs.Command) jobs.Results
- func Download(transfer jobs.FileTransfer) (result jobs.Results)
- func ExecuteCommand(cmd jobs.Command) jobs.Results
- func ExecuteShellcode(cmd jobs.Shellcode) jobs.Results
- func ExecuteShellcodeCreateProcessWithPipe(sc string, spawnto string, args string) (stdout string, stderr string, err error)
- func ExecuteShellcodeQueueUserAPC(shellcode []byte, pid uint32) error
- func ExecuteShellcodeRemote(shellcode []byte, pid uint32) error
- func ExecuteShellcodeRtlCreateUserThread(shellcode []byte, pid uint32) error
- func ExecuteShellcodeSelf(shellcode []byte) error
- func Memfd(cmd jobs.Command) (result jobs.Results)
- func Memory(cmd jobs.Command) (results jobs.Results)
- func MiniDump(cmd jobs.Command) (jobs.FileTransfer, error)
- func Native(cmd jobs.Command) jobs.Results
- func Netstat(cmd jobs.Command) jobs.Results
- func PS() jobs.Results
- func Pipes() jobs.Results
- func RunAs(cmd jobs.Command) (results jobs.Results)
- func SSH(command jobs.Command) (results jobs.Results)
- func Setup() error
- func TearDown() error
- func Token(cmd jobs.Command) jobs.Results
- func Upload(transfer jobs.FileTransfer) (jobs.FileTransfer, error)
- func Uptime() jobs.Results
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func CLR ¶
CLR is the entrypoint for Jobs that are processed to determine which CLR function should be executed
func CreateProcess ¶
CreateProcess spawns a child process with anonymous pipes, executes shellcode in it, and returns the output from the executed shellcode
func Download ¶
func Download(transfer jobs.FileTransfer) (result jobs.Results)
Download receives a job from the server to download a file to host where the Agent is running
func ExecuteCommand ¶
ExecuteCommand runs the provided input program and arguments, returning results in a message base
func ExecuteShellcode ¶
ExecuteShellcode instructs the agent to load and run shellcode according to the input job
func ExecuteShellcodeCreateProcessWithPipe ¶
func ExecuteShellcodeCreateProcessWithPipe(sc string, spawnto string, args string) (stdout string, stderr string, err error)
ExecuteShellcodeCreateProcessWithPipe creates a child process, redirects STDOUT/STDERR to an anonymous pipe, injects/executes shellcode, and retrieves output
func ExecuteShellcodeQueueUserAPC ¶
ExecuteShellcodeQueueUserAPC executes provided shellcode in the provided target process using the Windows QueueUserAPC API call
func ExecuteShellcodeRemote ¶
ExecuteShellcodeRemote executes provided shellcode in the provided target process
func ExecuteShellcodeRtlCreateUserThread ¶
ExecuteShellcodeRtlCreateUserThread executes provided shellcode in the provided target process using the Windows RtlCreateUserThread call
func ExecuteShellcodeSelf ¶
ExecuteShellcodeSelf executes provided shellcode in the current process
func Memfd ¶
Memfd places a linux executable file in-memory, executes it, and returns the results Uses the linux memfd_create API call to create an anonymous file https://man7.org/linux/man-pages/man2/memfd_create.2.html http://manpages.ubuntu.com/manpages/bionic/man2/memfd_create.2.html
func Memory ¶ added in v1.4.0
Memory is a handler for working with virtual memory on the host operating system
func MiniDump ¶
func MiniDump(cmd jobs.Command) (jobs.FileTransfer, error)
MiniDump is the top-level function used to receive a job and subsequently execute a Windows memory dump on the target process The function returns the memory dump as a file upload to the server
func SSH ¶ added in v1.2.0
SSH executes a command on a remote host using the SSH protocol and does not provide an interactive session
func Setup ¶ added in v1.2.0
func Setup() error
Setup is used to prepare the environment or context for subsequent commands and is specific to each operating system
func TearDown ¶ added in v1.2.0
func TearDown() error
TearDown is the opposite of Setup and removes and environment or context applications
func Token ¶ added in v1.2.0
Token is the entrypoint for Jobs that are processed to determine which Token function should be executed
func Upload ¶
func Upload(transfer jobs.FileTransfer) (jobs.FileTransfer, error)
Upload receives a job from the server to upload a file from the host to the Merlin server
Types ¶
This section is empty.
Source Files