151 lines
3.8 KiB
C++
151 lines
3.8 KiB
C++
#include "utils.h"
|
|
|
|
namespace utils
|
|
{
|
|
// 读取二进制文件到内存
|
|
BYTE* ReadBinaryFile(const char* filePath, DWORD* outSize) {
|
|
HANDLE hFile = CreateFileA(
|
|
filePath,
|
|
GENERIC_READ,
|
|
FILE_SHARE_READ,
|
|
NULL,
|
|
OPEN_EXISTING,
|
|
FILE_ATTRIBUTE_NORMAL,
|
|
NULL
|
|
);
|
|
|
|
if (hFile == INVALID_HANDLE_VALUE) {
|
|
printf("打开文件失败: %s\n", filePath);
|
|
return NULL;
|
|
}
|
|
|
|
DWORD fileSize = GetFileSize(hFile, NULL);
|
|
if (fileSize == INVALID_FILE_SIZE) {
|
|
printf("获取文件大小失败\n");
|
|
CloseHandle(hFile);
|
|
return NULL;
|
|
}
|
|
|
|
BYTE* buffer = (BYTE*)malloc(fileSize);
|
|
if (!buffer) {
|
|
printf("内存分配失败\n");
|
|
CloseHandle(hFile);
|
|
return NULL;
|
|
}
|
|
|
|
DWORD bytesRead = 0;
|
|
BOOL result = ReadFile(hFile, buffer, fileSize, &bytesRead, NULL);
|
|
CloseHandle(hFile);
|
|
|
|
if (!result || bytesRead != fileSize) {
|
|
printf("读取文件失败\n");
|
|
free(buffer);
|
|
return NULL;
|
|
}
|
|
|
|
*outSize = bytesRead;
|
|
return buffer;
|
|
}
|
|
BOOL WriteShellcodeToFile(const char* filePath, const BYTE* shellcode, SIZE_T shellcodeSize) {
|
|
// 1. 创建文件
|
|
HANDLE hFile = CreateFileA(
|
|
filePath,
|
|
GENERIC_WRITE,
|
|
0, // 独占访问
|
|
NULL,
|
|
CREATE_ALWAYS, // 总是创建新文件
|
|
FILE_ATTRIBUTE_NORMAL, // 普通文件
|
|
NULL
|
|
);
|
|
|
|
if (hFile == INVALID_HANDLE_VALUE) {
|
|
//printf("CreateFile 失败: %d\n", GetLastError());
|
|
return FALSE;
|
|
}
|
|
|
|
// 2. 写入 shellcode
|
|
DWORD bytesWritten = 0;
|
|
BOOL result = WriteFile(hFile, shellcode, (DWORD)shellcodeSize, &bytesWritten, NULL);
|
|
|
|
if (!result || bytesWritten != shellcodeSize) {
|
|
//printf("WriteFile 失败: %d\n", GetLastError());
|
|
CloseHandle(hFile);
|
|
return FALSE;
|
|
}
|
|
|
|
// 3. 刷新缓冲区并关闭
|
|
FlushFileBuffers(hFile);
|
|
CloseHandle(hFile);
|
|
|
|
//printf("Shellcode 写入成功: %s (大小: %d 字节)\n", filePath, bytesWritten);
|
|
return TRUE;
|
|
}
|
|
// 创建多级目录（递归创建）
|
|
BOOL CreateDirectoryRecursive(const char* path) {
|
|
char tempPath[MAX_PATH];
|
|
strcpy_s(tempPath, path);
|
|
|
|
// 去掉末尾的反斜杠
|
|
size_t len = strlen(tempPath);
|
|
if (len > 0 && tempPath[len - 1] == '\\') {
|
|
tempPath[len - 1] = '\0';
|
|
}
|
|
|
|
// 检查目录是否已存在
|
|
DWORD attrs = GetFileAttributesA(tempPath);
|
|
if (attrs != INVALID_FILE_ATTRIBUTES && (attrs & FILE_ATTRIBUTE_DIRECTORY)) {
|
|
return TRUE; // 目录已存在
|
|
}
|
|
|
|
// 递归创建父目录
|
|
char* lastSlash = strrchr(tempPath, '\\');
|
|
if (lastSlash) {
|
|
*lastSlash = '\0';
|
|
if (!CreateDirectoryRecursive(tempPath)) {
|
|
return FALSE;
|
|
}
|
|
*lastSlash = '\\';
|
|
}
|
|
|
|
// 创建当前目录
|
|
if (!CreateDirectoryA(tempPath, NULL)) {
|
|
if (GetLastError() == ERROR_ALREADY_EXISTS) {
|
|
return TRUE;
|
|
}
|
|
//printf("创建目录失败: %s (错误: %d)\n", tempPath, GetLastError());
|
|
return FALSE;
|
|
}
|
|
|
|
//printf("创建目录成功: %s\n", tempPath);
|
|
return TRUE;
|
|
}
|
|
auto GetProcessByName(CONST wchar_t* Name) -> DWORD
|
|
{
|
|
DWORD Pid = 0;
|
|
|
|
auto SnapshotHandle = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0);
|
|
if (SnapshotHandle == INVALID_HANDLE_VALUE)
|
|
return Pid;
|
|
|
|
PROCESSENTRY32 pe32{ 0 };
|
|
pe32.dwSize = sizeof(pe32);
|
|
|
|
if (Process32First(SnapshotHandle, &pe32))
|
|
{
|
|
do
|
|
{
|
|
if (!wcscmp(pe32.szExeFile, Name))
|
|
{
|
|
Pid = pe32.th32ProcessID;
|
|
break;
|
|
}
|
|
|
|
} while (Process32Next(SnapshotHandle, &pe32));
|
|
}
|
|
|
|
CloseHandle(SnapshotHandle);
|
|
|
|
return Pid;
|
|
|
|
}
|
|
} |