https://github.com/guitmz/gocave

Finding code caves in ELF files with GoLang
https://github.com/guitmz/gocave

elf go golang malware

Last synced: about 1 year ago
JSON representation

Finding code caves in ELF files with GoLang

• Host: GitHub
• URL: https://github.com/guitmz/gocave
• Owner: guitmz
• License: gpl-3.0
• Created: 2017-11-08T11:22:20.000Z (over 8 years ago)
• Default Branch: master
• Last Pushed: 2018-01-15T17:18:16.000Z (over 8 years ago)
• Last Synced: 2025-04-01T22:12:09.458Z (over 1 year ago)
• Topics: elf, go, golang, malware
• Language: Go
• Homepage: https://www.guitmz.com/more-fun-with-elf-files-and-golang-code-caves/
• Size: 19.5 KB
• Stars: 26
• Watchers: 2
• Forks: 3
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
[![Build Status](https://travis-ci.org/guitmz/gocave.svg?branch=master)](https://travis-ci.org/guitmz/gocave)

[![Go Report Card](https://goreportcard.com/badge/github.com/guitmz/gocave)](https://goreportcard.com/report/github.com/guitmz/gocave)

[![](https://images.microbadger.com/badges/image/guitmz/gocave.svg)](https://microbadger.com/images/guitmz/gocave "Get your own image badge on microbadger.com")

# gocave

Utility to find code caves in ELF files, written in Go.

# Installation

You can either run `go get -u github.com/guitmz/gocave` or clone this repository and build with `go build`.

# Usage

`$ gocave elf_file cave_size`

Or with Docker:  

```

$ docker pull guitmz/gocave

$ docker run --rm -v elf_file:/elf_file guitmz/gocave /elf_file cave_size

```

# Todo

- Add payload injection and execution;

- Add more binary types like Mach and PE.

- ?

# References

https://www.codeproject.com/Articles/20240/The-Beginners-Guide-to-Codecaves

https://github.com/Antonin-Deniau/cave_miner