GadgetCache

wraith::manipulation::spoof

Struct GadgetCache 

Source 
pub struct GadgetCache { /* private fields */ }
Expand description

cache of found gadgets organized by type and module

Implementations§

Source§

impl GadgetCache

Source

pub fn build() -> Result<Self>

build gadget cache by scanning system modules

Source

pub fn jmp_rbx(&self) -> Option<&Gadget>

get preferred jmp rbx gadget (in ntdll)

Source

pub fn jmp_rax(&self) -> Option<&Gadget>

get preferred jmp rax gadget (in ntdll)

Source

pub fn ret_gadget(&self) -> Option<&Gadget>

get preferred ret gadget (in kernel32)

Source

pub fn get_by_type(&self, gadget_type: GadgetType) -> &[Gadget]

get all gadgets of a specific type

Source

pub fn get_by_module(&self, module_name: &str) -> &[Gadget]

get all gadgets in a specific module

Source

pub fn any_jmp_gadget(&self) -> Option<&Gadget>

get first available jmp gadget (tries rbx, then rax)

Source

pub fn find_by_pattern(&self, pattern: &GadgetPattern) -> Vec<&Gadget>

search gadgets using a pattern

Trait Implementations§

Source§

impl Debug for GadgetCache

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.