Sys dll reflection#205

Merged

hulto merged 165 commits intomainfrom

sys-dll-reflection

Nov 16, 2023

Collaborator

hulto commented Jun 1, 2023 •

edited

Loading

What type of PR is this?

/kind feature
/kind eldritch-function

What this PR does / why we need it:

This PR implements sys.dll_reflect(dll_bytes, target_pid, dll_exported_function)
This will allow users to inject DLLs into a remote process without writing to disk.

Which issue(s) this PR fixes:

Fixes #187

hulto added feature eldritch labels

hulto commented

View reviewed changes

.vscode/settings.json Show resolved Hide resolved

hulto commented

View reviewed changes

bin/create_file_dll/src/lib.rs Show resolved Hide resolved

hulto commented

View reviewed changes

bin/create_file_dll/src/main.rs Show resolved Hide resolved

hulto commented

View reviewed changes

bin/reflective_loader/Cargo.toml Show resolved Hide resolved

hulto commented

View reviewed changes

bin/reflective_loader/Cargo.toml Show resolved Hide resolved

hulto commented

View reviewed changes

bin/reflective_loader/src/lib.rs Show resolved Hide resolved

hulto commented

View reviewed changes

bin/reflective_loader/src/loader.rs Show resolved Hide resolved

hulto commented

View reviewed changes

implants/eldritch/src/sys/dll_reflect_impl.rs Outdated Show resolved Hide resolved

hulto commented

View reviewed changes

Collaborator Author

hulto left a comment

Yay it's finally done!
Please help me clean it up <3

hulto added 19 commits

May 31, 2023 20:25


          Stubbed out.

eb1f51a


          Saving changes.

c57b0ba


          Added header parsing and write to alloc'd mem.

21ee34e


          Rewrote header parsing.

91d9953


          Switched to common header struct.

bc4519d


          Dll section relocation looking good.

f14219d


          Switching to use a crate

4f918a5


          remove reloc from strcut

06bdc20


          image relocation is maybe working....

aa6611c


          removing dead line

a56d3b3


          Add import address table.

0d0eb60


          Cleanup and better testing.

5e25f6d


          Fixed relocation entry parsing.

55f1b24


          Updating base reloc doesn't throw access error.

71dc800


          Updated with comment.

b19a2eb


          self reflection works

db48f99


          Export demo_init function.

be413fe


          Renamed test to bin


          Updated to use bin not tests.

48c4869

hulto added 27 commits

October 20, 2023 19:29


          Tests pass.

fedebfb


          Merge branch 'main' into sys-dll-reflection

bb03d18


          Cleanup

34ebef0


          Cleanup.

d08dce4


          Adding results.

7006b04


          Remove panics.

2e0a735


          Fix test.

10e1c4a


          Trying to get tests to build.

e2d4b8b


          Win?

62362f0


          Tests pass?

43007c8


          Tests pass

96c08b4


          Fix tests?

a8d0f3d


          Fix tests?


          Empty-Commit

4a8d389


          Fix syntax.

da91f7e


          Merge branch 'main' into sys-dll-reflection

faf83ab


          Fix binding test.

53f5f15


          Merge branch 'main' into sys-dll-reflection

6f5e227


          Add toolchain to create file dll.

c50abe5


          Consolidate rust version.

a71848a


          Try removing extra cargo llvm cov install.

1a7e4dc


          Remove conditionals.

f3dcd2a


          Put it backt.

80f92cf


          Just trying things now.

86678de


          Force disable profiler.

957c340


          Maybe codecov sets the flag.

eb3fe7e


          Trying again

114bc8e

hulto merged commit b19f297 into main

hulto deleted the sys-dll-reflection branch

November 16, 2023 04:00

KCarretto pushed a commit that referenced this pull request

467c474

 
Sys dll reflection (#205)

* implement, document,  and test sys dll reflect

* Implement reflective loader for remote process injection

* Move tests -> bin

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

eldritch feature