Malware Development Pt. 1: Dynamic Module Loading in Go

This article presents a Go-based proof of concept for a lightweight, modular agent that loads functionality on demand as shared libraries and enables two-way communication via a shared datagram specification and CGo function-pointer bridges. It explains in-memory loading on Linux using memfd_create with dlopen/dlsym, outlines module and application interfaces (main and callback exports), and provides wrapper packages for managing RAM-backed libraries. The approach aims to limit exposed capabilities, improve maintainability and versioning, support cross-language modules, and includes links to the application core and shared library POCs.