sELF_control.c

#include <stdio.h>
#include <stdlib.h>
#include <uuid/uuid.h>
#include <unistd.h>

#define NB_PATCHES 4

// gcc -o sELF_control sELF_control.c -luuid

int main(){
	uuid_t binuuid;
	int ch;
	long int offset;
	unsigned int value;
	char* uuid;
	char execute[100], xxd[50];
	FILE *original, *copy;

	printf( "██╗  ██╗███████╗██████╗  ██████╗  ██████╗████████╗███████╗\n"
			"██║  ██║██╔════╝██╔══██╗██╔═══██╗██╔════╝╚══██╔══╝██╔════╝\n"
			"███████║█████╗  ██████╔╝██║   ██║██║        ██║   █████╗  \n"
			"██╔══██║██╔══╝  ██╔══██╗██║   ██║██║        ██║   ██╔══╝  \n"
			"██║  ██║███████╗██║  ██║╚██████╔╝╚██████╗   ██║   ██║     \n"
			"╚═╝  ╚═╝╚══════╝╚═╝  ╚═╝ ╚═════╝  ╚═════╝   ╚═╝   ╚═╝     \n");
	printf("=============== sELF control v2 (by SoEasY) ===============\n\n");
	fflush(stdout);

	// You are judging me ? Don't. Not cool bro.
	system("bash -c \"/bin/rm /tmp/* >& /dev/null\"");

	uuid = (char*) malloc(50);
	sprintf(uuid, "/tmp/");
	// Don't do this at home kids
	uuid += 5;
	uuid_generate_random(binuuid);
	uuid_unparse(binuuid, uuid);
	// This is done by professionals
	uuid -= 5;

	original = fopen("/self/EXECUTE_ME", "rb");
	copy = fopen(uuid, "wb");

	if(original == NULL){
		printf("[-] Impossible to open the original file.\n");
		return 1;
	}

	while((ch = fgetc(original)) != EOF)
		fputc(ch, copy);

	fclose(original);
	fclose(copy);

	for(int i=0; i < NB_PATCHES; i++){
		copy = fopen(uuid, "r+");
		offset = 0;

		if(copy == NULL){
			printf("[-] Impossible to open the temporary file.\n");
			return 1;
		}
		
		printf("\n[+] Patch n°%d/%d\n", i+1, NB_PATCHES);

		printf("- Offset of the byte to patch in hex (example: %02X) : ", rand() % 32);
		fflush(stdout);
		scanf("%lx", &offset);

		printf("- Value to put at this offset in hex (example: %02X) : ", rand() % 32);
		fflush(stdout);
		scanf("%x", &value);

		fseek(copy, offset, SEEK_SET);
		fputc(value, copy);
	
		fclose(copy);
	}

	/*
	printf("\n[+] ELF header : \n");
	sprintf(xxd, "xxd %s | head\x00", uuid);
	system(xxd);
	*/

	printf("\n[+] Execution : \n");
	fflush(stdout);
	sprintf(execute, "chmod +x %s && %s", uuid, uuid);
	system(execute);
	
	remove(uuid);
	return 0;
}