OperatorsKit/KIT/LoadLib/loadlib.cna

# author REDMED-X

beacon_command_register(
	"loadlib", "Load DLL from disk in remote process via RPC call.",
	"INFO:\nLoad a on disk present DLL via RtlRemoteCall API in a remote process.\nDepending on the process from which you run this tool, it may or may not work.\n\nOPTIONS:\n[pid]: target process to load the DLL into\n[path]: full path to the on disk present DLL\n\n" .
	"USAGE:\nloadlib <pid> <path to dll>\n\n");


alias loadlib {
    $bid = $1;
    $pid = $2;
    $path = $3;
	
	if ($pid eq "" || $path eq "") {
		berror($bid, "Please make sure that both the PID and PATH are specified.");
		return;
	}
	
	
    # Read in the right BOF file
    $handle = openf(script_resource("loadlib.o"));
    $data   = readb($handle, -1);
    closef($handle);
	
	
    # Pack our arguments
    $arg_data  = bof_pack($bid, "iz", $pid, $path);
    
	blog($bid, "Tasked to load DLL in remote process..");
	
    beacon_inline_execute($bid, $data, "go", $arg_data);
}