Пример #1
0
    def test_sourceCodeGenerator(self):
        testFolder = "/home/gbt/Developpements/DLL_Injection/got_netzob"
        
        # create the parasite generator
        parasiteGenerator = ParasiteGenerator(testFolder)
        
        # register the two following functions to hijack
        # int     SSL_read(void *ssl,char *buf,int num);
        # int     SSL_write(void *ssl,char *buf,int num);        
#        sslReadFunc = HijackedFunction("SSL_read", "int", ["void *", "char *", "int"])
#        sslWriteFunc = HijackedFunction("SSL_write", "int", ["void *", "char *", "int"])
        putsFunc = HijackedFunction("puts", "int", [ ["char *", "param0"]])
        putsFunc.setSource('''''')

#        parasiteGenerator.addAnHijackedFunctions(sslReadFunc)
#        parasiteGenerator.addAnHijackedFunctions(sslWriteFunc)
        parasiteGenerator.addAnHijackedFunctions(putsFunc)
        
        parasiteGenerator.writeParasiteToFile()
        parasiteGenerator.compileParasite()
        parasiteGenerator.linkParasite()
        
        injectorGenerator = InjectorGenerator("/home/gbt/Developpements/DLL_Injection/got_netzob", parasiteGenerator)
        injectorGenerator.writeInjectorToFile()    
        injectorGenerator.compileInjector()
        
        poisoner = GOTPoisoner(parasiteGenerator, injectorGenerator) 
        poisoner.injectProcess(20121)
Пример #2
0
    def startCaptureFunction(self, button):
        if self.selectedProcess == None:
            self.log.warning(_("You have to select a process if you want to capture it"))
            return
        if self.selectedDLL == None:
            self.log.warning(_("You have to select a DLL if you want to capture it"))
            return
        if self.selectedFunction == None:
            self.log.warning(_("You have to select a function if you want to capture it"))
            return

        # Create a temporary folder (secure way) <- hihihihi
        tmpFolder = tempfile.mkdtemp()
        self.log.info(_("Temporary folder: {0}").format(tmpFolder))

        parasiteGenerator = ParasiteGenerator(tmpFolder)
        parasiteGenerator.addAnHijackedFunctions(self.selectedFunction)

        parasiteGenerator.writeParasiteToFile()
        parasiteGenerator.compileParasite()
        parasiteGenerator.linkParasite()

        injectorGenerator = InjectorGenerator(tmpFolder, parasiteGenerator)
        injectorGenerator.writeInjectorToFile()
        injectorGenerator.compileInjector()

        poisoner = GOTPoisoner(parasiteGenerator, injectorGenerator)
        poisoner.injectProcess(self.selectedProcess.getPid())

        self.fifoFile = parasiteGenerator.getFifoFile()

        self.aSniffThread = threading.Thread(None, self.sniffThread, None, (), {})
        self.aSniffThread.start()

        self.log.info(_("Starting the capture of [{0}]").format(self.selectedProcess.getPid()))
        self.log.info(_("DLL [{0}]").format(self.selectedDLL.getName()))
        self.log.info(_("Function [{0}]").format(self.selectedFunction.getPrototype()))
Пример #3
0
    def startCaptureFunction(self, button):
        if self.selectedProcess is None:
            self.log.warning(
                "You have to select a process if you want to capture it")
            return
        if self.selectedDLL is None:
            self.log.warning(
                "You have to select a DLL if you want to capture it")
            return
        if self.selectedFunction is None:
            self.log.warning(
                "You have to select a function if you want to capture it")
            return

        # Create a temporary folder (secure way) <- hihihihi
        tmpFolder = tempfile.mkdtemp()
        self.log.info("Temporary folder: {0}".format(tmpFolder))

        parasiteGenerator = ParasiteGenerator(tmpFolder)
        parasiteGenerator.addAnHijackedFunctions(self.selectedFunction)

        parasiteGenerator.writeParasiteToFile()
        parasiteGenerator.compileParasite()
        parasiteGenerator.linkParasite()

        injectorGenerator = InjectorGenerator(tmpFolder, parasiteGenerator)
        injectorGenerator.writeInjectorToFile()
        injectorGenerator.compileInjector()

        poisoner = GOTPoisoner(parasiteGenerator, injectorGenerator)
        poisoner.injectProcess(self.selectedProcess.getPid())

        self.fifoFile = parasiteGenerator.getFifoFile()

        self.aSniffThread = threading.Thread(None, self.sniffThread, None, (),
                                             {})
        self.aSniffThread.start()

        self.log.info("Starting the capture of [{0}]".format(
            self.selectedProcess.getPid()))
        self.log.info("DLL [{0}]".format(self.selectedDLL.getName()))
        self.log.info("Function [{0}]".format(
            self.selectedFunction.getPrototype()))