alemi/pox
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

fix: convert path to absolute automatically

Browse source 
since i'm very silly it's better if vector does this automatically
before I forget about it (:
This commit is contained in:
əlemi 2023-07-08 12:45:47 +02:00
parent 4546d6b0fe
commit 859d78c7e3
Signed by: alemi
GPG key ID: A4895B84D311642C
1 changed files with 6 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
src/vector/main.rs
View file

@ -98,8 +98,11 @@ fn nasty_stuff(args: &VectorArgs) -> Result<(), Box<dyn std::error::Error>> {
return Ok(()); return Ok(());
} }
let payload_path = std::path::PathBuf::from(&args.payload).canonicalize()?;
let payload_path_str = payload_path.to_string_lossy().to_string();
// move path to our payload into target address space // move path to our payload into target address space
let payload = RemoteString::new(args.payload.clone() + "\0") let payload_ptr = RemoteString::new(payload_path_str.clone() + "\0")
.inject(pid, syscall)?; .inject(pid, syscall)?;
// find dlopen address // find dlopen address
@ -150,12 +153,12 @@ fn nasty_stuff(args: &VectorArgs) -> Result<(), Box<dyn std::error::Error>> {
// intercept our mock CALL and redirect it to dlopen real address (also fill args) // intercept our mock CALL and redirect it to dlopen real address (also fill args)
let mut regs = ptrace::getregs(pid)?; let mut regs = ptrace::getregs(pid)?;
regs.rip = dlopen_addr as u64; regs.rip = dlopen_addr as u64;
regs.rdi = payload; regs.rdi = payload_ptr;
regs.rsi = 0x1; regs.rsi = 0x1;
ptrace::setregs(pid, regs)?; ptrace::setregs(pid, regs)?;
ptrace::cont(pid, None)?; ptrace::cont(pid, None)?;
waitpid(pid, None)?; waitpid(pid, None)?;
info!("invoked dlopen('{}', 1) @ 0x{:X}", args.payload, dlopen_addr); info!("invoked dlopen('{}', 1) @ 0x{:X}", payload_path_str, dlopen_addr);
// restore original registers and detach // restore original registers and detach
// TODO clean allocated areas // TODO clean allocated areas