From 435c24ce295c1be0fb10a9578fa6145cc5967985 Mon Sep 17 00:00:00 2001
From: flux <49762827+0xflux@users.noreply.github.com>
Date: Sun, 30 Jun 2024 13:44:56 +0100
Subject: [PATCH] stash

---
 builder/output/OLD_2shellcode.bin | Bin 2560 -> 0 bytes
 builder/output/OLD_3shellcode.bin | Bin 2560 -> 0 bytes
 builder/output/OLD_4shellcode.bin | Bin 2560 -> 0 bytes
 builder/output/OLD_5shellcode.bin | Bin 1024 -> 0 bytes
 builder/output/shellcode.bin      | Bin 512 -> 512 bytes
 injector/src/main.rs              |  14 +++++++-------
 shellcode/src/main.rs             |  12 +-----------
 7 files changed, 8 insertions(+), 18 deletions(-)
 delete mode 100644 builder/output/OLD_2shellcode.bin
 delete mode 100644 builder/output/OLD_3shellcode.bin
 delete mode 100644 builder/output/OLD_4shellcode.bin
 delete mode 100644 builder/output/OLD_5shellcode.bin

diff --git a/builder/output/OLD_2shellcode.bin b/builder/output/OLD_2shellcode.bin
deleted file mode 100644
index fd2844e857f81d9e5fe6c942f818bf1c94e429d0..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 2560
zcmc&#Z)_CT5r4aPHfJzAN0^2pRGex-ri#-$qEx=bkbBM@yru6F(-`cM#Mr?$F?C|=
zZcUHMvG=q-!Sia93eifH8bKq}Pf;rcg+GxZ@7+=VlT}fu5+#-*Cxqxu8<Go6k+ExU
z=Pi_?eCU@}>O1Yu%$wiL&YL$gSNyOXq3<A+`YuAVK>Hp<=$F6?dJ>-B0xxJY&@=G7
z2v09OVqefBcX{=dBOSdxoi%%#ch=R%yOPO{LtTx1DT4MUyAqFXd!)0s7yUT)lc!@0
zgeYT(^>uWzo);4xiK7JV>e8ALeFsTrX97%-`pV(1gIZVTLrD5RFZ5q8`9Ch-x0YY5
z`@gwf2s-?}wMYxuNA{BDeJy*RrRgtHGD3_`P=1wirqohv_3O*7`|fJ6D$IgI%Ewjy
zKII=$zEGHk4V7P})}WH2{5Ive0xtuM@g%~THwD_$n7aa$N0nA;?y3?@lZVxmddhDy
zt|`GdFBO{Z8TNo7vwD?b)r?63A5qPLiY{vUH@8C=)THaFxu;4suFtDmm#9@&0}-lY
z`rSo&vqCBVfSL!|X=WCW{KJP3KEJEAJ7eRKuRx&YGeL2>_9#AIA{P)GnOaOqg{~Av
zp@@m``EtmPXKrbA_<ZG4-I*y(=}zBv5k6KYpxa#u93FcJ_~Xo<qOPqP<IB#UDbG@)
zh~E_nrnqrBbcKd<*suT{#pjx<Q?ZdNsYr|$$kxl`mc0UJ4ui_^QzKVJ!_&zJnK@Fe
zgE3nbtxm-=^V)UCN8KEFNxq{GR;SR>ubsDI_}s=HkPBdm$VCK%7>lxY1l~T4z}t^A
zzkpq4?U&SW9vdwn>>Pc5V@gdgl)wm}>4k5A!I`&(4}I}<{F)71@u~aGYVI?e1FaSW
zvm3w+#K7d#P<yc&5O<=(#!XO&2*>bizXrBA4=<u$n*-=+?XhCf6Z8Eb1`{pCkA!IL
z-=r^ACe{%B(`BMBe2Fu854C7x>mqQF71_(5aOn9S+EF~=L2?)jWPI$7Bn*zjKC^bq
zYB-zhY19WRQ)9zD;K3(y*D9>-S34ls;$bM2#LF~X8h9yWGm|M18XngYqi~O8v|56@
zj9O%j=<^#0K4BAku8agGt=(h#?G5-u*8Zd{@E1})sZCQ}a<;@mQ?Zcktbu!gT5!sN
zLUpO>&k%Cmc*Ui7#SG(f)O=Fqm*^9N3dNa2ORih|nV0BJCB^tB)NEGjnHg1rg{Q%Z
zYBVTtGu;9Ko9*2sT_4|%Gxe~c9*i`QbOUONiObs}(r-0G<C(jmy%^NIxf|LGjzr86
zBr-xw4Xr08LmP=Xh-!!#MGBL$0#nbV2`1U1yMm$F_e6U$YrDSSx-|SZJTe8c%0D)%
zPcbQ{PS`FiNUJQNxD}BGzVX_n@P-J%fZm5#&nVs<;MjF$zNP43AIGt;$VJaHFEajV
zoX;0_g2jkE@Um*PNzB_7r)(7$(Nx&#DZOLkkpcK36=`Y2=l%T@0QIInEkXviR%8u&
z`~g8Dl<x@$rWKef!N7dkvz~EMLpiB+DukO_YSbW_z9h!mb1xidBhQl;NE<nj7bkhC
z@H^O^p?oql1&ye!(HjCtE2D1KDN#P1-`7HoFIwqD7EXoeM9w4DI^#BkXlY6<xgbtS
z`PYR%iUb-vkhb4bP;&?-=(<AyBp2{qjQKCjkEp3Ztk&x9gWmlBfUAW^o^{`+#%Cpv
zw}Tv-f(Z+iMvY6Y2imARS6GHT%|Jx8EId81j`GWl=TvSN{tEjr;!fI*9I^pkn<x9k
zREJr{vnos`h8rhgF04?EYcM&lQtPqL=i!6*CMOHq*mxGaz=)AYW>b&H_(x=Gj@-(v
z&?=xcoR6ttSF!M9axF8P<p5h%EvuOYttiHn4c5u`^adFnz3IGz&prGod0R4;WUb#=
z@@YGaB^XQr@Xf4#DIOlj#x2N4<LJZNXnN6`OMU6ZJ7eiLpor*8FqYl`u6Pw*_l&at
zHkt!gdnCPh1L(jGFgP{TRQx>%_rNDXXw)0Fjh&T-wBoNois;wp0C`&5;tWUhKlKA2
zOg!!+qgHYg(U&U|0sY#tzWC)p2Wae9p95Di1e=U|Zias7#PvMZ7v-N5PyYn9T4ff_
zC+qZv4P(PWfcpgedmemPQQdLIOT{xVbVQLtNmjwU*c1z0aaNv{obt1>BcJs_l?I~6
z_f#GK=>y(ar(E(%v@P#${sa6UxtmYJ+gTP@Uidqdig)>i8-kmek=Cw6Yo%vUWpGu~
x%KnP>fL(ssKPQ)@avv&xQ|_1A5t958@;3r4FGJ<QvL=7OuU(#leEbjBKLJ1>JyZYy

diff --git a/builder/output/OLD_3shellcode.bin b/builder/output/OLD_3shellcode.bin
deleted file mode 100644
index 765f4e06639e919fd699643811b0e9cf9b5b8662..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 2560
zcmds1Yiv|S6rQ_}c4>jT2*t`HRK1O@3D7N=bWOod*@ao0g$jKEEwuDOfeK~!E-bO&
zUAG$<ZY~&ufBd5{{!(KwjTA`?mlg^%L<$&@U`RnAcU_S32my+FJ+rhbX!zp~6VGP$
zeCNzJ=bSk+bK@862t9+)KsG`jfIgCikO6oA^g9y~LeC-e9_SCjmkoF?XdT9Az+Cqa
zW3G7&?&lH=G}Hu|f*V^mHw9({f~eYwN(AtWsac2xdNzzF{k7oB{Re*w`0`-*Hf*kM
zUE7#bQ9gfq(d*tNi@bDJ;S3L@h;FQJq-$3P>H}LbPe1d``n4N)>Xe)v&Y$_nL?xg%
z!C25FmjyO9;KoL%7PwFHFmM7eLcyj0Bx-DJMSdXGuW2gX7{*Y}x~2xXsquLv{Ko<{
z{!6huRjf~ljmzU1`I#aGeoqk+y_QGaeW5JE`YG%7G2IxShEPlw_vi_WODEC8c|Eua
zSK<m>URhPKltiwDEeKI|l&~{|eMhu0_M~YZ7z0TRs}*hp>-Dj-gq<VofpH6{KGsjP
zb}3BQeZsnp&wxXsuOTt^6-*K)OL<gll)^sMBRL53NQ5INM<tY9q(CU5>=tG1Qh}e{
zGuH7O(P9Y#Y~_VKS}RKqpV}@tn}}-5t%F*KO0ucC$w}F5s=ig{kC|e}i@+DV=2bVt
z_Btl=?CSagkJx44{fLKR7hR`~N$>!1^h(m}(*3dP@=No?F53cFAx~|dW1=mxFLKX>
zm$PMk=?;%A>@#&=^hh%CJ<+ICM%g8!kH?L+OJyiTh`U{?3t<8qs&*YG?vwKTof90M
zowl*WJmk?99>mK1NmzXU5Y{i+y;>RA54hcp^-Ff_IOTP8dy7uVy+oZ%-M7V9p=p}&
zTF9Q-HPlPga_A0(FEExs-r>Hi14eUX8}cs~V>1Dh25)hs-Hyt<u>aUp?$OHOK-7iM
za4Ho6fPPb{K<%*afZnOHJzJ&rDQdetNA=hxBE<Q08xd|0!Qdy;;&t7n+MMK&Y5LrE
z#g5~!3OZe?PUs@SFTSHX6l#_#?G^#~wGtt8hqotee92QoZ^DSGpGrK{etvJL=pCTy
z7m@<lFM4m_Z&F?shko)Sulmh2JM_>Rss#m_^71Vcs#2-Mcr`UCcF2&CH@XGRtD3-6
zn`(>jaslS0`b5|`t_uiz!@&Uo;N+kLKsI4(a|pwEiBUXC9*O245;@H8`ik0BD{&33
z#Vhfu9-?La_`oz1P5@mTqyxABAawzZhrmBU*fD<EeezhP*nwm_9Cl)mu)dx|va$+Z
zTs1j*2)2sI(e9MevQDM~z*E4fh7fksc=sX1jLt=J1<_!FsN3@((@#Le`}tR!a~eiC
zbBHQSW$+d+!@PMGh*x<;cF6pJL@y75eF<#Wad?Yf*KxBykpylST*eA081NpB7xUsD
zmkR#&E31|gb_Etv1|I}Nq~g3|e*T8OhV!J_l5}76(mh}PY4}`duS9v`gUYZZrZ#h#
zAx`VyTSY#zm$E_X*2QQT7K{6)SUS#!mwDM4oZo}*_N2?>h^Z$ojPOZRcT)GU;8?2G
zSR6ESip3WjlH(8{ctD(1f|Ozl3h#v_KDQpa6_+69WBEMdzS*;Ir+}kLn_LV3RyiO3
zEn+MqRePJ@clV0Xdr(@bQe1ejQxJDmLkr_K!9%s->2qMrhe(AaGBf~K#*v}xphM+Y
zNq)4wIsPpef3QCXV}w1(*)K$f?u@W^Z?B2(1_LWs2Vn8Xa(-M%nZ0db76j%dWRLdN
zG_07T0}kcqq%!ntXf@2}+iD<z1*#1$N>wWE+6&*^#6qP<RE8{D=B7ABM60$?cTezT
zrFhc8x2MArD_=5sc*!<c(rHaR%bx&c*y+*}lfAC<iL_23Vd=EM{dahFEOYKyHf}$(
z2kw}#0`5NC``R8ew<R4RGj}=s|9M9$;5z3JtyRh~rolrz@fZ6dwDE7YU=xt76d_@J
z1{yCcMxzTd%QD(V)j9OEe%pX$P)M_)v`;K;LLG22thpIhd!bMUI5XXzX>}B&x24tD
M2dsnK_kWb%0kg#FK>z>%

diff --git a/builder/output/OLD_4shellcode.bin b/builder/output/OLD_4shellcode.bin
deleted file mode 100644
index 202dc4a7401da891ac9a5144cecdbcb1051bd2df..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 2560
zcmd^9YfKbZ6uz?$SV5h&ilsgxX@?Y=s4Uu)ZO}5ft9R{PrOL|+3i9wp1$Sq4jc8}H
zY|3>qnwb8tY5dhTjSW$#Ny7jZgcyt3)Ebi(Y;9({J`jyju}se$p;g=TPk;1BPjcrx
z?sp#d+;b;>-j2`<2o0tq6a#)T4WaKr9t0kkjnD|lGVnvd9WNnt4EPCHk0-b`Av4Zm
zFgv4Qpr#^F7i?_UQx{ki2%>T)D&WA*o4W`x*iu-}+bhAA`8W1$V9SE#+qI{<VS8;x
zN%6{sd2f5yt?`m2xr;o6AktV}OSW$bR0sBnEdAp5s<-cAsZF{(kw5i`irxUe8`i2i
zsVLA`Bi7bJwSavdmj{>ttWdBn0EucF8jv4=)m!Td8^a=$v!kv?s;foZe@sx~za+~)
zlJz;VF?uSadF?WipE8*uj^4;3?txGmrh|lb`>3YROoCC<_z$&&#iilsnXDeMOe_^k
z#NyJjlJz)pBWyv4&^}BrVR{~`)6&Kb<McELr(3Ns0kqdgFJpQI(?|L!Kz(!&tIa|f
z(}$RL>z@DyN8dtx><ie$R1&g?S}TNoibrr@>Jc!LoJ=YpbeI4jkI+#<n}r-deW34P
zIimRj1lY$4dEzSx4xiF2IP0)t%dCQ0u!7TxvfD}MU83x-^2ZFm<rTp5?JLUb;dm{x
zS$1V-j)!m8#SX+m(P7s`eGWW0F?xO6>(czOo6@T*_;%YW@Q~)$FEh|y$rpKGz)RV?
zv#`};3;PVs7yWuX@hw(~P(<i8eSpP{HVZ{4gt5C>s0xV~4pi>y$L?>Wm4{|IJcn%4
zvC-vGS9gl?!#N^<v`f^6?OwGA^hZqZ7PV`3(Q(1+==SDakb1E)m$>ipv0TG2;+2ry
zJT=sdm15`)gwN5}LEeeJ>;Oc4<N)%&%f}XjjBC94k!Cw8^1}IJ^O;30h6_<vL&J%X
z2Lkk)2suiNy%l<=NcMDv*ykzD_6)^i7cduR+fA6ejX9m&%r>v<K2euVe{2{&_kF&l
zAH1N`h03gU%>C-?)1XkJP;Rzx$gdV~p?j=7Vf}NK8hR5(L^&?7R2^(?2=5&t%4dQM
zvY+?f7QZyDG!Fe_S6=p;VYFzWtwarS#I&*_W1<kDK!4NR<Xa@j$Qr#3?yDTbR+D0j
zuyR4nGW&$-490UXeaFEB41$vh1t6qjx;+C^F)J~JMaja^41^<R*sO1?+`LJw5G%z^
z;^rQ#rs<CiBjE(0j|s^j+ycQI0R1uG&tZC&-S&VqUCwtP$qtvD7{PR)Cox`H1~0B0
z_jSQh5$@|YnVR;a833MwXf_1XJNgIETO3`Eq!O&c238JcL8co36g${onqg`tG0U(b
z2}ST0@4>!t8G!d$MA~J1hoe7_fIbSks~_H?*VS(fCdL8V3MPFc6b$llCa-11KT9R-
z?U$CV$MiZl5(+;AohST?vwrr5PQrZ>bzQPAdhLNP`y%`<)Yp%)#GUd4CFa*NTEs7C
zVMj$iqnFST;@0?R7@YZ2^DHe_!yCNxl9=5i-tS44W?(~0{4j~fQO!x*XM@v;QeknB
z)Oi+PY)pznfZ%C<K>?EUEhu~fTzqaVG#VEm<}>*`{Hdi&#5PWhj@zV4_*$iG_*(c_
zidlOT=Xdw=(Fagkp`4%F*~amQ%b|twJ76K|#P$_XRzjp)92pw|SrQ{-H-U$WMS1+A
zgZ1&RK=}jxDJYZZ5r%#_GInngedJ(8{0Jzb{L2tHACt1<vZ?kqftnLoo{&81{sp3J
zObs~XpT^~}TcItmqaCP#1Qw_^xW=rMKYRlIyNT6u4=;~d_AWOuc~~vC5O+`TH93Dy
z=lcu6#mZdfPPiNZmo{tSMfL;;6`d|EG1u$5nn-Hn5|%a#%)i6ay207HVMYhE2WE`h
z2(u4!U)f`1hLaI8GIzlD&lxF!an8VMgOH&wfQNYQDSa5)_!phCamZGP5H~Xg&E(di
zsX3`dDNR$V99q(#ZOAghC0S9@$Cf6p3NR_w%oM9Vmn#A}HQAnOb>t*BB~{sntRu|!
Hf1uw1qSWlV

diff --git a/builder/output/OLD_5shellcode.bin b/builder/output/OLD_5shellcode.bin
deleted file mode 100644
index 8087679d71883b0512dd40debd4d217dab010860..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 1024
zcmdsz&rj1}7{}jtR6)c*G(<3vlw`!jkY$6!WI)t+>F`}>bz!h2%8w1&jme-(*9J^T
zoDLFeQxAIAgD1}(z}qI#igF+^k%I?45EMrYiC#>U`m}QLPw;J;=lOoV&-?W0v-<%d
zbP^%v6hfU4YalkkdsS2On#xI&S|+9{*|`isyqpsG?4*)XZW44^QlpAIMMP1N3I(JU
zB&Da@C+2cU0G-N6A$ftIgv8FKM2XF+9c)1Y0qGp;c8zDHc~(~bij1VxBVJO^7TCO;
z*Ya!%O5HY-@<KgIWamVAzQD$&rCe@GhKBQ5b($U03Tg*}DP{_&1%3k+;rZvp6ERxa
zi&CrN7}R><hSfn7MnmWdqB`gG(bX{GQ4i{N<$1d5LmU9!l^4<_(K~=7YA~Hir-eaV
zXsOafP0mZHUPqVL)!~R$w&8>W>%9IZ9V#sn4-(8vSTG}4+lyEg$8|XG2M+AJ5UgnJ
z;Xs*|zG9_)pmBv~e1aMEqzC#Mu%K_MJJfK#m8?FZ#)6-k%{LBgo9aKm$j%V@D<Ct6
zWXvUNK+=a~&?OcvZSPa_!~{_L9oQ+?uGm{tw}6j3{5>Rh4wL4GknrY_rw{_`<hdW(
z*jv>Dk|1$1LWbjsky!e6P`K8({1_~Q^czd~E@Yg+;}*`~a2scgVwN+8u{Tf-2eyUa
zM&r_bsEC-0Ud-t`#B6(Jw6zxdTTw*+rGBLNZN##i^*Gh~PN=xphhayzV0WU|UEWK_
z1%A%qvsn897lq(&?MXObM@rwYawc@It5+~HIMmzKC+MHmU8txo1<KXa#AKAl6$W?O
z7ZCzcG#E_r>+53^<7AYKk#RDywt;IIRQsUD@5$pNZm2^I{^Qa5{IO(R`RFF|$+HjR
H|F`E4rr9er

diff --git a/builder/output/shellcode.bin b/builder/output/shellcode.bin
index 41e214ea748cc315e7a812284a7ea101b1ecff18..0035655b6481f581f3b28df303fe78e1bc846d78 100644
GIT binary patch
delta 131
zcmV-}0DS*|1b_qy>rMawqY(fAq>%|uky{}Fkdb|13?V~hhh~8|O<E6yossG%Bo+Vv
z|42F04}^gL002mha{)n#+e3{!nTtF)fIK(=NQv`w;FB={9s$9VPyrnQqmym{Bp_Q|
lUtU38N&nzMxI{A|5$og30R{yC1~3Is1aJdj0^pOe0Z!8PEwumu

delta 122
zcmV-=0EPd61b_qy>rMawpAi56ppgkq1B2`!kyauBjFEX^40u*F5@vxoO<E6ynUUrv
zAQAun|42F0bbUyTa{)n#+e3{!nTtF)fIK(=NQv`w<dZQ09s$LZPyrnQr;~00Bosma
c(Chv|xI{A|5$os70SX2H3Nn+Z0ayY60Hf|Kg#Z8m

diff --git a/injector/src/main.rs b/injector/src/main.rs
index 79bfdb7..0a7f322 100644
--- a/injector/src/main.rs
+++ b/injector/src/main.rs
@@ -72,15 +72,15 @@ fn main() {
 
 
         // ####################################################
-        // CREATE REMOTE THREAD
+        // INJECT VIA CREATE REMOTE THREAD
         
-        let result_createremotethread = CreateRemoteThread(h_process, 
-            None, 0, transmute(remotememory_ptr), None, 0, None);
+        // let result_createremotethread = CreateRemoteThread(h_process, 
+        //     None, 0, transmute(remotememory_ptr), None, 0, None);
 
-        match result_createremotethread {
-            Ok(_) => println!("[+] Thread created"),
-            Err(e) => eprintln!("[-] Error creating thread {e}"),
-        }
+        // match result_createremotethread {
+        //     Ok(_) => println!("[+] Thread created"),
+        //     Err(e) => eprintln!("[-] Error creating thread {e}"),
+        // }
     }
 }
 
diff --git a/shellcode/src/main.rs b/shellcode/src/main.rs
index 05d56d8..6808dbf 100644
--- a/shellcode/src/main.rs
+++ b/shellcode/src/main.rs
@@ -15,7 +15,7 @@ fn panic(_info: &PanicInfo) -> ! {
 pub type WinExec = extern "system" fn(lpCmdLine: LPCSTR, uCmdShow: u32) -> u32;
 
 #[no_mangle]
-pub extern "system" fn main() -> ! {
+pub extern "system" fn main() {
     
     unsafe {
         // clean argc and argv
@@ -56,14 +56,4 @@ pub extern "system" fn main() -> ! {
 
     let WinExec: WinExec = unsafe { transmute(win_exec_fn_addr) };
     WinExec("calc.exe\0" as *const _ as *const i8, 1);
-
-    // black_box(b, load_library_a_addr);
-
-    loop{}
-}
-
-#[inline(never)]
-extern "system" fn black_box<T, C>(dummy: T, dummy_b: C) -> C {
-    unsafe { core::ptr::read_volatile(&dummy) };
-    unsafe { core::ptr::read_volatile(&dummy_b) }
 }
\ No newline at end of file