Skip to content
/ GoSneak Public

DLL injector POC written currently in C++ to be wrapped with Go and CGO.

Notifications You must be signed in to change notification settings

0xflux/GoSneak

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

34 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

GoSneak

A small snippet from my private Go based malware (for red team operations NOT criminal / malicious) and server control framework, showcasing some simple process injection written in Go and C.

Note: The Go 'bridge' is not currently implemented, I will look to implement the Go wrapper after the C++ POC is done. To see my blog post about this: https://fluxsec.red/dll-injection-edr-evasion-1

Important

This is purely PROOF OF CONCEPT and simply injects a DLL into a process for it to be run. This is in NO WAY to be used for malicious purposes and I DO NOT ENDORSE this code being used for malicious purposes.

A screenshot from my blog, proof that we are in fact using the assembly, and not the Windows API:

image

Proof of injection:

image

The injector is mostly in C, wrapped in some Go for fun, showing cross compatability of classical C development with a higher level language such as Go. I have found there are actual benefits to doing this in respect of anti-detection; something I may blog about in the future!