mirror of
https://github.com/moonD4rk/HackBrowserData.git
synced 2026-10-13 03:37:12 +02:00
slimwang
8c89ac72dd
* fix(windows): harden the ABE payload injection lifecycle The browser main thread is never resumed, so no window appears and the temp user-data-dir is unnecessary. Payload memory is RW then RX, with an explicit FlushInstructionCache before the remote thread executes it. * test(windows): use US spelling in offset test * fix(windows): validate bootstrap parameter encoding
46 lines
1.0 KiB
Go
46 lines
1.0 KiB
Go
// Code generated by cmd/cgo -godefs; DO NOT EDIT.
|
|
// cgo -godefs layout_gen.go
|
|
|
|
package bootstrap
|
|
|
|
const (
|
|
MarkerOffset = 0x28
|
|
KeyStatusOffset = 0x29
|
|
KeyStatusReady = 0x1
|
|
ExtractErrCodeOffset = 0x2a
|
|
HResultOffset = 0x2c
|
|
ComErrOffset = 0x30
|
|
KeyOffset = 0x40
|
|
KeyLen = 0x20
|
|
|
|
ParamsSize = 0x30
|
|
ParamScratchBase = 0x0
|
|
ParamLoadLibraryA = 0x8
|
|
ParamGetProcAddress = 0x10
|
|
ParamVirtualAlloc = 0x18
|
|
ParamVirtualProtect = 0x20
|
|
ParamNtFlushIC = 0x28
|
|
|
|
MarkMZFound = 0x2
|
|
MarkImportsOK = 0x5
|
|
MarkAllocOK = 0x6
|
|
MarkCopied = 0x7
|
|
MarkRelocated = 0x8
|
|
MarkImportsFixed = 0x9
|
|
MarkPermissions = 0xa
|
|
MarkCacheFlushed = 0xb
|
|
MarkDone = 0xff
|
|
MarkErrImports = 0xe3
|
|
MarkErrAlloc = 0xe4
|
|
|
|
ErrOk = 0x0
|
|
ErrBasename = 0x1
|
|
ErrBrowserUnknown = 0x2
|
|
ErrEnvMissing = 0x3
|
|
ErrBase64 = 0x4
|
|
ErrBstrAlloc = 0x5
|
|
ErrComCreate = 0x6
|
|
ErrDecryptData = 0x7
|
|
ErrKeyLen = 0x8
|
|
)
|