mirror of
https://github.com/rapid7/metasploit-payloads
synced 2025-04-12 04:12:05 +02:00
c74376fb69
This updates the packet header so that the encryption byte flag is now 32 bits. This also updates the powershell and python extensions so that both of the bindings work correctly as a result of the TLV packet header changes.
45 lines
1.6 KiB
C++
Executable File
45 lines
1.6 KiB
C++
Executable File
/*!
|
|
* @file powershell_bindings.cpp
|
|
* @brief Wrapper functions for bridging native meterp calls to powershell
|
|
*/
|
|
extern "C" {
|
|
#include "../../common/common.h"
|
|
#include "powershell_bindings.h"
|
|
}
|
|
|
|
Remote* gRemote = NULL;
|
|
|
|
VOID MeterpreterInvoke(unsigned int isLocal, unsigned char* input, unsigned int inputLength, unsigned char** output, unsigned int* outputLength)
|
|
{
|
|
dprintf("[PSH BINDING] Input %p of %d bytes received", input, inputLength);
|
|
|
|
Packet packet = { 0 };
|
|
packet.header = *(PacketHeader*)input;
|
|
packet.header.length = ntohl(packet.header.length);
|
|
packet.payload = (PUCHAR)(input + sizeof(PacketHeader));
|
|
packet.payloadLength = (ULONG)inputLength - sizeof(PacketHeader);
|
|
packet.local = isLocal == 1;
|
|
|
|
dprintf("[PSH BINDING] Packet header length: %u", packet.header.length);
|
|
dprintf("[PSH BINDING] Packet header type: %u", packet.header.type);
|
|
dprintf("[PSH BINDING] Packet payload length: %u", packet.payloadLength);
|
|
dprintf("[PSH BINDING] Packet local flag: %u", isLocal);
|
|
|
|
command_handle(gRemote, &packet);
|
|
|
|
if (packet.partner != NULL)
|
|
{
|
|
dprintf("[PSH BINDING] Response packet generated");
|
|
// This memory is deliberately left allocated, because the .NET side will clean it up
|
|
*output = (unsigned char*)LocalAlloc(LPTR, packet.partner->payloadLength);
|
|
*outputLength = packet.partner->payloadLength;
|
|
memcpy(*output, packet.partner->payload, packet.partner->payloadLength);
|
|
packet_destroy(packet.partner);
|
|
}
|
|
else
|
|
{
|
|
dprintf("[PSH BINDING] Response packet not generated");
|
|
*output = NULL;
|
|
*outputLength = 0;
|
|
}
|
|
} |