Hostile ^100% windows Download

ads_windows_test.go

Test code for malware evasion techniques

Go reserved-name undeletable file hidingGo alternate data stream hiding tests

SHA-2569f25af5cb4801fad596068e24fd82e0f7ce61ae2b4820596b7008fe834cd155b

Evidence

Delete file (os.Remove) lines 13–21

13func tempFile(t *testing.T) string {
t.Helper()
f, err := os.CreateTemp("", "ads_test_*.txt")
require.NoError(t, err)
f.Write([]byte("main stream content"))
f.Close()
t.Cleanup(func() { os.Remove(f.Name()) })
return f.Name()
21}

Go alternate data stream hidden payload lines 23–25

23func TestWriteAndRead(t *testing.T) {
24	path := tempFile(t)
25	payload := []byte("secret ADS payload")

Go alternate data stream hiding tests lines 27–28

27	err := Write(path, "hidden", payload)
28	require.NoError(t, err)

func Test prefix lines 35–36

35func TestList(t *testing.T) {
36	path := tempFile(t)

Go reserved-name undeletable file hiding lines 115–117

path, err := CreateUndeletable(dir, []byte("hidden payload"))
require.NoError(t, err)
t.Logf("Created undeletable file: %s", path)