feature: resolve dll imports

This commit is contained in:
Dobin
2024-04-21 15:22:47 +01:00
parent 1f768f0f15
commit e6f3de18b4
6 changed files with 109 additions and 4 deletions
+10 -3
View File
@@ -14,17 +14,24 @@
<div class="col-6">
{% if iat|length > 0 %}
<h2> Imports - IAT </h2>
<h2> IAT Imports DLLs</h2>
<ul>
{% for dll_resolve in resolved_dlls %}
<li> {{ dll_resolve.dllname }}: {{ dll_resolve.cdll_res }} : {{ dll_resolve.path_res }}</li>
{% endfor%}
</ul>
<h2> IAT Imports functions</h2>
{% for dll in iat %}
<ul>
{% for entry in iat[dll] %}
<li> {{ entry.dll_name }}: {{ entry.func_name }} ({{ entry.iat_vaddr | hexint }})</li>
<li> {{ entry.dll_name }}: {{ entry.func_name }} </li>
{% endfor%}
</ul>
{% endfor %}
{% endif %}
</div>
<div class="col-6">
+4
View File
@@ -125,6 +125,10 @@
Data Section largest: {{ data_sect_largest_gap_size}} <br>
-> Payload len: {{ payload_len}} <br>
{{ project_dir }} <br>
Unresolved dlls: <br>
{% for dll in unresolved_dlls %}
{{ dll }} <br>
{% endfor %}
<a href="/exes/{{project.settings.inject_exe_in | basename}}">EXE INFO</a>
</div>
</div>
+3
View File
@@ -6,6 +6,7 @@ from typing import List, Tuple
from pe.superpe import SuperPe
from model.defs import *
from pe.dllresolver import resolve_dlls
views = Blueprint('views', __name__)
logger = logging.getLogger("Views")
@@ -20,8 +21,10 @@ def index():
def exe_view(exe_name):
path = "{}/{}".format(PATH_EXES, exe_name)
superpe = SuperPe(path)
return render_template('exe.html',
superpe=superpe,
resolved_dlls=resolve_dlls(superpe),
iat=superpe.get_iat_entries(),
exports=superpe.get_exports_full(),
)
+7 -1
View File
@@ -20,8 +20,10 @@ from sender import scannerDetectsBytes
from phases.injector import verify_injected_exe
from helper import run_process_checkret, run_exe
from model.project import prepare_project
from pe.superpe import SuperPe
from pe.superpe import SuperPe
from model.exehost import ExeHost
import pe.dllresolver
logger = logging.getLogger("ViewsProjects")
@@ -56,6 +58,7 @@ def project(name):
data_sect_size = 0
data_sect_largest_gap_size = 0
payload_len = 0
unresolved_dlls = []
# when we select a shellcode
if project.settings.payload_path != "":
@@ -73,6 +76,8 @@ def project(name):
exehost = ExeHost(project.settings.inject_exe_in)
exehost.init()
data_sect_largest_gap_size = exehost.get_rdata_relocmanager().find_largest_gap()
unresolved_dlls = pe.dllresolver.unresolved_dlls(superpe)
project_dir = os.path.dirname(os.path.abspath(project.settings.inject_exe_out))
log_files = get_logfiles(project.settings.main_dir)
@@ -109,6 +114,7 @@ def project(name):
data_sect_size=data_sect_size,
data_sect_largest_gap_size=data_sect_largest_gap_size,
payload_len=payload_len,
unresolved_dlls=unresolved_dlls,
)
def list_files_and_sizes(directory, prepend=""):