mirror of
https://github.com/monoxgas/sRDI
synced 2026-06-06 16:14:36 +00:00
Nick Landers
53 lines
2.4 KiB
Python
53 lines
2.4 KiB
Python
import argparse
|
|
from ShellcodeRDI import *
|
|
|
|
__version__ = '1.2'
|
|
|
|
def main():
|
|
parser = argparse.ArgumentParser(description='RDI Shellcode Converter', conflict_handler='resolve')
|
|
parser.add_argument('-v', '--version', action='version', version='%(prog)s Version: ' + __version__)
|
|
parser.add_argument('input_dll', help='DLL to convert to shellcode')
|
|
parser.add_argument('-f', '--function-name', dest='function_name', help='The function to call after DllMain', default='SayHello')
|
|
parser.add_argument('-u', '--user-data', dest='user_data', help='Data to pass to the target function', default='dave')
|
|
parser.add_argument('-c', '--clear-header', dest='clear_header', action='store_true', help='Clear the PE header on load')
|
|
parser.add_argument('-b', '--pass-shellcode-base', dest='pass_shellcode_base', action='store_true', help='Pass shellcode base address to exported function')
|
|
parser.add_argument('-i', '--obfuscate-imports', dest='obfuscate_imports', action='store_true', help='Randomize import dependency load order', default=False)
|
|
parser.add_argument('-d', '--import-delay', dest='import_delay', help='Number of seconds to pause between loading imports', type=int, default=0)
|
|
parser.add_argument('-of', '--output-format', dest='output_format', help='Output format of the shellcode (e.g. raw,string)', type=str, default="raw")
|
|
|
|
arguments = parser.parse_args()
|
|
|
|
input_dll = arguments.input_dll
|
|
output_bin = input_dll.replace('.dll', '.bin')
|
|
|
|
dll = open(arguments.input_dll, 'rb').read()
|
|
|
|
flags = 0
|
|
|
|
if arguments.clear_header:
|
|
flags |= 0x1
|
|
|
|
if arguments.obfuscate_imports:
|
|
flags = flags | 0x4 | arguments.import_delay << 16
|
|
|
|
if arguments.pass_shellcode_base:
|
|
flags |= 0x8
|
|
|
|
converted_dll = ConvertToShellcode(dll, HashFunctionName(arguments.function_name), arguments.user_data.encode(), flags)
|
|
|
|
if arguments.output_format=="raw":
|
|
print('Creating Shellcode: {}'.format(output_bin))
|
|
with open(output_bin, 'wb') as f:
|
|
f.write(converted_dll)
|
|
|
|
elif arguments.output_format=="string":
|
|
output_bin = input_dll.replace('.dll', '.txt')
|
|
converted_dll_text ="".join([r"\x{}".format(str(format(c,'02x'))) for c in converted_dll])
|
|
|
|
print('Creating Shellcode: {}'.format(output_bin))
|
|
with open(output_bin, 'w') as f:
|
|
f.write(converted_dll_text)
|
|
|
|
if __name__ == '__main__':
|
|
main()
|