Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feat/new beginning #36

Merged
merged 22 commits into from
Oct 26, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
22 commits
Select commit Hold shift + click to select a range
d514576
docs: 📚 Remove old documentation
AntwortEinesLebens Sep 8, 2024
d1cd621
refactor: 🔨 Change help of the spoofing action
AntwortEinesLebens Sep 8, 2024
d2ce3fd
refactor: 🔨 Move get pid function to the windows folder because it's …
AntwortEinesLebens Sep 8, 2024
21f3253
feat: ✨ Rewrite spoofing and don't close the process that was created
AntwortEinesLebens Sep 15, 2024
2084ceb
feat: ✨ Fix the message shown for ProcessNotFound
AntwortEinesLebens Sep 15, 2024
94e2e84
refactor: 🔨 Use HSTRING instead of OsString
AntwortEinesLebens Sep 15, 2024
eb903ab
refactor: 🔨 Use None instead of an empty PCWSTR
AntwortEinesLebens Sep 15, 2024
2697d86
refactor: 🔨 Return Result directly and remove all exit code
AntwortEinesLebens Sep 16, 2024
c1ca9be
fix: 🐛 Fix PPID spoofing
AntwortEinesLebens Oct 18, 2024
8efa812
feat: ✨ Remove traces that are too specific
AntwortEinesLebens Oct 19, 2024
20973b4
refactor: 🔨 Rewrite "is_administrator" to use "Owned" type
AntwortEinesLebens Oct 19, 2024
00476ef
feat: ✨ Remove short and long for clap, make them arguments
AntwortEinesLebens Oct 19, 2024
5336264
feat: ✨ Rename the trace accordingly
AntwortEinesLebens Oct 19, 2024
ae8abfd
feat: ✨ Make them all arguments for clap because they are all required
AntwortEinesLebens Oct 19, 2024
6dee87d
refactor: 🔨 Rewrite BYOVD
AntwortEinesLebens Oct 19, 2024
04d9bf1
fix: 🐛 Fix "is_administrator" function
AntwortEinesLebens Oct 20, 2024
e5a6b60
refactor: 🔨 Move logic into their respective run function
AntwortEinesLebens Oct 20, 2024
5caee54
feat: ✨ Use better variable names and add better descriptions
AntwortEinesLebens Oct 20, 2024
d99f8a8
feat: ✨ Add basic path checking
AntwortEinesLebens Oct 20, 2024
b9b19f9
feat: ✨ Make exectuable a PathBuf and add basic path checking
AntwortEinesLebens Oct 20, 2024
f610ea2
feat: ✨ Check if the service already exists
AntwortEinesLebens Oct 22, 2024
124ba7a
build: 📦 Update MSRV
frack113 Oct 26, 2024
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion Cargo.toml
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,6 @@
name = "windows-artifacts-generator"
version = "1.0.0"
edition = "2021"
rust-version = "1.74.1"
description = "Generate malware artifacts for detection tests"
documentation = "https://frack113.github.io/WAG/"
repository = "https://github.com/frack113/WAG/"
Expand All @@ -19,6 +18,7 @@ keywords = [
"rust",
]
categories = ["command-line-utilities"]
rust-version = "1.80.1"

[[bin]]
name = "wag"
Expand Down
178 changes: 0 additions & 178 deletions docs/Artefacts.md

This file was deleted.

109 changes: 0 additions & 109 deletions docs/cli_help.md

This file was deleted.

25 changes: 4 additions & 21 deletions src/actions.rs
Original file line number Diff line number Diff line change
Expand Up @@ -2,18 +2,11 @@
//
// SPDX-License-Identifier: GPL-3.0-or-later

use crate::actions::{
ads::AlternateDataStreams, drivers::Drivers, files::Files, mutexes::Mutexes, pipes::Pipes,
processes::Processes,
};
use crate::actions::{drivers::Drivers, processes::Processes};
use clap::{Args, Subcommand};
use std::error::Error;

pub mod ads;
pub mod drivers;
pub mod files;
pub mod mutexes;
pub mod pipes;
pub mod processes;

#[derive(Debug, Args)]
Expand All @@ -24,28 +17,18 @@ pub struct Actions {

#[derive(Debug, Subcommand)]
pub enum Commands {
AlternateDataStreams(AlternateDataStreams),
Drivers(Drivers),
Files(Files),
Mutexes(Mutexes),
Pipes(Pipes),
Processes(Processes),
}

pub trait Runnable {
fn run(&self) -> Result<i32, Box<dyn Error>>;
fn run(&self) -> Result<(), Box<dyn Error>>;
}

impl Runnable for Actions {
fn run(&self) -> Result<i32, Box<dyn Error>> {
fn run(&self) -> Result<(), Box<dyn Error>> {
match &self.command {
Commands::AlternateDataStreams(alternate_data_streams) => {
alternate_data_streams as &dyn Runnable
}
Commands::Drivers(drivers) => drivers,
Commands::Files(files) => files,
Commands::Mutexes(mutexes) => mutexes,
Commands::Pipes(pipes) => pipes,
Commands::Drivers(drivers) => drivers as &dyn Runnable,
Commands::Processes(processes) => processes,
}
.run()
Expand Down
29 changes: 0 additions & 29 deletions src/actions/ads.rs

This file was deleted.

Loading
Loading