Skip to content

Agent Stealth:

Latest

Choose a tag to compare

@wadecalvin9 wadecalvin9 released this 26 Apr 12:48

1. Created a Windows-specific helper:
Added a HideConsole function to the internal/windows package. This function sets the syscall.SysProcAttr{HideWindow: true} flag on Windows and does nothing on other platforms, ensuring the code remains cross-platform.

2. Updated all execution points:
Applied this helper to every location where external commands are called:
executor.go: Fixed the main execute_command handler and system info gathering (whoami).
privs.go: Fixed privilege enumeration and the powershell task handler.
network.go: Fixed netstat and arp command execution.
persist_windows.go: Fixed scheduled task creation and startup folder shortcut generation.

3. Agent Stealth:
Added logic to main.go to hide the agent's own console window on startup if it's not running in debug mode.