/*! * @file common.h * @brief Declarations for various common components used across the Meterpreter suite. */ #ifndef _METERPRETER_SOURCE_COMMON_COMMON_H #define _METERPRETER_SOURCE_COMMON_COMMON_H /*! @brief Set to 0 for "normal", and 1 to "verbose", comment out to disable completely. */ //#define DEBUGTRACE 0 #include <stdlib.h> #include <stdio.h> #include <time.h> #define SAFE_FREE(x) if(x){free(x);x=NULL;} #include <winsock2.h> #include <windows.h> typedef DWORD __u32; typedef struct ___u128 { __u32 a1; __u32 a2; __u32 a3; __u32 a4; }__u128; /* * Avoid conflicts with Windows crypto API defines */ #undef OCSP_RESPONSE #undef PKCS7_SIGNER_INFO #undef X509_EXTENSIONS #undef X509_CERT_PAIR #undef X509_NAME #include "linkage.h" #include "args.h" #include "buffer.h" #include "base.h" #include "core.h" #include "remote.h" #include "channel.h" #include "scheduler.h" #include "thread.h" #include "unicode.h" #include "list.h" #include "zlib/zlib.h" /*! @brief Indication that the Meterpreter transport is using TCP. */ #define METERPRETER_TRANSPORT_TCP 0x1 /*! @brief Indication that the Meterpreter transport is using HTTP. */ #define METERPRETER_TRANSPORT_HTTP 0x2 /*! @brief Indication that the Meterpreter transport is using HTTPS. */ #define METERPRETER_TRANSPORT_HTTPS (0x4 | METERPRETER_TRANSPORT_HTTP) /*! @brief Indication that the Meterpreter transport is using named pipes. */ #define METERPRETER_TRANSPORT_PIPE 0x8 VOID sleep(DWORD seconds); #ifdef DEBUGTRACE #define dprintf(...) real_dprintf(__VA_ARGS__) #if DEBUGTRACE == 1 #define vdprintf dprintf #else #define vdprintf(...) do{}while(0); #endif #else #define dprintf(...) do{}while(0); #define vdprintf(...) do{}while(0); #endif /*! @brief Sets `dwResult` to the return value of `GetLastError()`, prints debug output, then does `break;` */ #define BREAK_ON_ERROR( str ) { dwResult = GetLastError(); dprintf( "%s. error=%d (0x%x)", str, dwResult, (ULONG_PTR)dwResult ); break; } /*! @brief Sets `dwResult` to `error`, prints debug output, then `break;` */ #define BREAK_WITH_ERROR( str, err ) { dwResult = err; dprintf( "%s. error=%d (0x%x)", str, dwResult, (ULONG_PTR)dwResult ); break; } /*! @brief Sets `dwResult` to the return value of `WASGetLastError()`, prints debug output, then does `break;` */ #define BREAK_ON_WSAERROR( str ) { dwResult = WSAGetLastError(); dprintf( "%s. error=%d (0x%x)", str, dwResult, (ULONG_PTR)dwResult ); break; } /*! @brief Sets `dwResult` to the return value of `GetLastError()`, prints debug output, then does `continue;` */ #define CONTINUE_ON_ERROR( str ) { dwResult = GetLastError(); dprintf( "%s. error=%d (0x%x)", str, dwResult, (ULONG_PTR)dwResult ); continue; } /*! @brief Close a service handle if not already closed and set the handle to NULL. */ #define CLOSE_SERVICE_HANDLE( h ) if( h ) { CloseServiceHandle( h ); h = NULL; } /*! @brief Close a handle if not already closed and set the handle to NULL. */ #define CLOSE_HANDLE( h ) if( h ) { DWORD dwHandleFlags; if(GetHandleInformation( h , &dwHandleFlags)) CloseHandle( h ); h = NULL; } /*! * @brief Output a debug string to the debug console. * @details The function emits debug strings via `OutputDebugStringA`, hence all messages can be viewed * using Visual Studio's _Output_ window, _DebugView_ from _SysInternals_, or _Windbg_. */ static _inline void real_dprintf(char *format, ...) { va_list args; char buffer[1024]; size_t len; _snprintf_s(buffer, sizeof(buffer), sizeof(buffer)-1, "[%x] ", GetCurrentThreadId()); len = strlen(buffer); va_start(args, format); vsnprintf_s(buffer + len, sizeof(buffer)-len, sizeof(buffer)-len - 3, format, args); strcat_s(buffer, sizeof(buffer), "\r\n"); OutputDebugStringA(buffer); va_end(args); } #endif int current_unix_timestamp(void); VOID xor_bytes(BYTE xorKey[4], LPBYTE buffer, DWORD bufferSize); BOOL is_null_guid(BYTE guid[sizeof(GUID)]); VOID rand_xor_key(BYTE buffer[4]);