QRouland/injectionforge
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Split the frida handler to a separte handler and add a test

Browse Source
This commit is contained in:
Dimitris Zervas
2023-06-03 01:52:10 +03:00
parent 85c4aef520
commit 9180d62d67
12 changed files with 295 additions and 108 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
src/lib.rs
View File

@ -1,11 +1,13 @@
pub mod injector;
#[cfg(feature = "frida")]
pub mod frida_handler;
pub use injector::{attach, attach_self};
#[cfg(unix)]
#[cfg(all(unix, not(test)))]
use ctor::ctor;
#[cfg(unix)]
#[cfg(all(unix, not(test)))]
#[ctor]
fn _start() {
println!("[+] frida-deepfreeze-rs library injected");
@ -16,21 +18,26 @@ fn _start() {
// during DeviceManager::obtain. DllMain works fine though.
#[cfg(windows)]
use std::ffi::c_void;
#[cfg(windows)]
use winapi::um::winnt::DLL_PROCESS_ATTACH;
#[cfg(windows)]
#[cfg(all(windows, feature = "dll_proxy"))]
use winapi::um::libloaderapi::LoadLibraryA;
#[cfg(windows)]
#[cfg(all(windows, not(test)))]
#[no_mangle]
#[allow(non_snake_case, unused_variables)]
extern "system" fn DllMain(dll_module: *mut c_void, call_reason: u32, _: *mut ()) -> bool {
match call_reason {
DLL_PROCESS_ATTACH => {
println!("[+] frida-deepfreeze-rs DLL injected");
unsafe { LoadLibraryA(env!("LIB_NAME").as_ptr() as *const i8); }
println!("[+] Original DLL {} loaded", env!("LIB_NAME"));
#[cfg(feature = "dll_proxy")]
{
unsafe { LoadLibraryA(env!("LIB_NAME").as_ptr() as *const i8); }
println!("[+] Original DLL {} loaded", env!("LIB_NAME"));
}
attach_self();
}
// Maybe we should detach? Is it useful?