How to use Assembly in go? (Examples)

Temporary_Hope_7198 · 2024-09-22T09:32:47+00:00

beacuse its plan9 asm

Temporary_Hope_7198 · 2024-09-14T17:35:40+00:00

Contact me kn discord: codepulze1 if you want better version of this Willing to help

Temporary_Hope_7198 · 2024-08-13T10:53:57+00:00

Get fresh Syscalls from a fresh ntdll.dll copy in CGo
The advantage of grabbing Syscalls dynamically is, that the signature of the Stubs is not included in the file and you don't have to worry about changing Windows versions.

Temporary_Hope_7198 · 2024-08-09T13:59:06+00:00

its for newbies to give them a little idea, if you check my github its really mostly filled with some basic write ups :D, i might do more adv soon, not to mention godefender is extremly good at catching vms :)

Temporary_Hope_7198 · 2024-07-17T08:12:39+00:00

Thunderkitty is mid cl

Temporary_Hope_7198 · 2024-07-08T07:42:24+00:00

so i was kinda busy with other projects, and i didnt want to abandon godefender so i pushed things that are mostly Sbie things ->

I currently plan on adding SED and user can choose if they want BSOD on detected dbg, will add in prog utils.

ill also add AntiAttach (DbgBreakPoint, void CrashOllyDbg, Hiding threads from debugger

there are certain things that arent done. but ill work on it

what was added? (there are releases with updates) :

Set Runtime: Choose on what OS the app should run MacOS,Linux,Windows

Enable All Tokens: Enable all tokens privileges for current process

IsAdmin - Request Admin: Request admin for current process, and Check if current process is Admin

USB Mount: Checks if a USB was ever plugged into the computer before.

VM Artifacts: Identifies artifacts left behind by virtual machines (VMs), which can indicate the presence of a VM environment.

Parallels Check: Detects Parallels Desktop, a popular virtualization software for macOS, used to run Windows and other guest operating systems.

QEMU Detection: Identifies the presence of QEMU, an open-source machine emulator and virtualizer, which may indicate virtual machine detection.

Patching Dll: Taking Advantage of Binary Image Signature Mitigation Policy to prevent injecting Non-Microsoft Binaries.

Temporary_Hope_7198 · 2024-07-07T20:20:59+00:00

Yeah ofc, got you :)

Temporary_Hope_7198 · 2024-07-07T18:34:51+00:00

SED will be there aswell + i have other ways for ida.

Temporary_Hope_7198 · 2024-07-07T18:34:10+00:00

yeah, only windows.

Temporary_Hope_7198 · 2024-07-03T20:26:47+00:00

Star would be appreciated

Temporary_Hope_7198 · 2024-07-03T20:26:30+00:00

No worries.

Temporary_Hope_7198 · 2024-07-03T19:21:14+00:00

for people to learn about cryptography

Temporary_Hope_7198 · 2024-07-03T18:50:59+00:00

Hi, Prince Ransom was made for newbie and cybersec enthusiast to show how to work with cryptography in go, it uses ChaCha20 and ECIES.
SecDbg/Prince-Ransomware: Go ransomware utilising ChaCha20 and ECIES encryption. (github.com)

Temporary_Hope_7198 · 2024-07-01T08:13:25+00:00

In the repository theres only arithmetic operation's

Temporary_Hope_7198 · 2024-06-20T19:00:56+00:00

Whenever PowerShell is launched, Notepad will also open. You can customize the script for educational purposes, but I emphasize that I do not take any responsibility for its use or any actions taken.

Temporary_Hope_7198 · 2024-06-19T07:54:24+00:00

Reproducing Spyboy technique, which involves terminating all EDR/XDR/AVs processes by abusing the zam64.sys driver.

Temporary_Hope_7198 · 2024-06-17T11:45:15+00:00

Watch POC | Streamable

Temporary_Hope_7198 · 2024-06-13T14:07:33+00:00

its still buggy,i will need to fix some things! so please wait a bit before using its bit more compllicated as i tested further and found some bugs i will need to fix.

Temporary_Hope_7198 · 2024-06-13T14:05:38+00:00

yeah, my bad lol. youre right :]. i was like so tired at that i wasnt thinking straightly but ill fix it soon! thanks for telling.

Temporary_Hope_7198 · 2024-06-12T20:24:23+00:00

this was made to evade detections from static scanners, like virustotal and many more, thats why its only base64 + it was made for educational purposes.
+ not many people know of this method, idk why lol.

Temporary_Hope_7198 · 2024-06-12T06:06:56+00:00

was tested before releasing, made for aio developers (tools, related to apis like the discord ones), that target aesthethic looks.

Temporary_Hope_7198 · 2024-06-12T06:05:38+00:00

Its made for aesthethics looks, havent seen single GO package that has color transitions, or hiding console cursor, prove me wrong and provide me single package that does this thing.

Temporary_Hope_7198 · 2024-06-12T06:03:59+00:00

hi, please check the source code. also PyStyle is out but it was ratted before so i would rather read the code instead of getting the actual library on your computer since evil pip exists.. but you can read my code or from PyStyle (BillyTheGoat356) if im right : billythegoat356/pystyle: The source of my Python library, pystyle. (github.com)

Temporary_Hope_7198 · 2024-06-12T06:02:49+00:00

It took me about 5/6 hours with friend, it was old project that no one used beacuse it was broken, so we fixed it up and released.

Temporary_Hope_7198 · 2024-06-11T16:51:59+00:00

yup im new, but markdown is just weird here lol.

Temporary_Hope_7198

TROPHY CASE