From ae3567847c06a54e02d06df7c3eadb2e2e193cd9 Mon Sep 17 00:00:00 2001
From: Dobin Rutishauser <dobin.rutishauser@gmail.com>
Date: Tue, 18 Jun 2024 16:05:37 +0200
Subject: [PATCH] feature: guardrail data

---
 app/templates/project.html   | 14 ++++++++++++++
 app/views_project.py         |  2 ++
 data/source/guardrails/env.c |  2 +-
 model/settings.py            |  1 +
 phases/templater.py          |  3 +++
 5 files changed, 21 insertions(+), 1 deletion(-)

diff --git a/app/templates/project.html b/app/templates/project.html
index fc0d4c6..755cca4 100644
--- a/app/templates/project.html
+++ b/app/templates/project.html
@@ -239,6 +239,20 @@
                     </div>
                 </div>
 
+                {% if project.settings.plugin_guardrail != "none" %}
+                <div class="form-group row">
+                    <label for="guardrail" class="col-sm-5 col-form-label">
+                        Guard Data
+                    </label>
+                    <div class="col-sm-7">
+                        <input type="text" name="guardrail_data" class="hidden form-control" 
+                        placeholder="" value="{{project.settings.plugin_guardrail_data}}"
+                        aria-label="guardrail_data" aria-describedby="basic-addon1"
+                        onchange="this.form.submit()">
+                    </div>
+                </div>
+                {% endif %}
+
                 <div class="form-group row">
                     <label for="antiemulation_style" class="col-sm-5 col-form-label">
                         AntiEmulation
diff --git a/app/views_project.py b/app/views_project.py
index 61f1962..5e2277a 100644
--- a/app/views_project.py
+++ b/app/views_project.py
@@ -215,6 +215,8 @@ def add_project():
             payload_location = request.form['payload_location']
             settings.payload_location = PayloadLocation[payload_location]
 
+            settings.plugin_guardrail_data = request.form['guardrail_data']
+
             # overwrite project
             project = storage.get_project(project_name)
             project.settings = settings
diff --git a/data/source/guardrails/env.c b/data/source/guardrails/env.c
index d98755c..251f942 100644
--- a/data/source/guardrails/env.c
+++ b/data/source/guardrails/env.c
@@ -15,7 +15,7 @@ int mystrcmp(wchar_t* str1, wchar_t* str2) {
 int executionguardrail() {
 	// Execution Guardrail: Env Check
 	wchar_t envVarName[] = L"USERPROFILE";
-	wchar_t tocheck[] = L"C:\\Users\\";
+	wchar_t tocheck[] = L"{{guardrail_data}}";
 	WCHAR buffer[1024];  // NOTE: Do not make it bigger, or we have a __chkstack() dependency!
 	DWORD result = GetEnvironmentVariableW(envVarName, buffer, 1024);
 	if (result == 0) {
diff --git a/model/settings.py b/model/settings.py
index 3bd9355..e715f20 100644
--- a/model/settings.py
+++ b/model/settings.py
@@ -17,6 +17,7 @@ class Settings():
         self.plugin_antiemulation = "none"
         self.plugin_decoy = "none"
         self.plugin_guardrail = "none"
+        self.plugin_guardrail_data = "C:\\Users\\"
 
         self.dllfunc: str = ""  # For DLL injection
 
diff --git a/phases/templater.py b/phases/templater.py
index e76da2b..4d4c280 100644
--- a/phases/templater.py
+++ b/phases/templater.py
@@ -32,6 +32,9 @@ def create_c_from_template(settings: Settings, payload_len: int):
         settings.plugin_guardrail)
     with open(filepath_guardrails, "r", encoding='utf-8') as file:
         plugin_guardrails = file.read()
+        plugin_guardrails = Template(plugin_guardrails).render({
+            'guardrail_data': settings.plugin_guardrail_data,
+        })
 
     # Plugin: Decoder
     filepath_decoder = PATH_DECODER + "{}.c".format(