| 225 | |
| 226 | |
| 227 | def test_dll_data(): |
| 228 | print("Testing: DLLs data") |
| 229 | settings = Settings("unittest") |
| 230 | settings.injectable_base = "libbz2.dll" |
| 231 | settings.payload_base = "createfile.bin" |
| 232 | settings.verify = True |
| 233 | settings.try_start_final_infected_exe = False |
| 234 | settings.payload_location = PayloadLocation.DATA |
| 235 | settings.carrier_name = "peb_walk" |
| 236 | ###########settings.fix_missing_iat = True |
| 237 | |
| 238 | # func = "" |
| 239 | |
| 240 | print("Test DLL 1/4: libbz2.dll, overwrite-dllMain") |
| 241 | settings.carrier_invoke_style = CarrierInvokeStyle.OverwriteFunc |
| 242 | if not start(settings): |
| 243 | return |
| 244 | |
| 245 | print("Test DLL 1/4: libbz2.dll, backdoor-dllMain") |
| 246 | settings.carrier_invoke_style = CarrierInvokeStyle.BackdoorFunc |
| 247 | if not start(settings): |
| 248 | return |
| 249 | |
| 250 | |
| 251 | # func = "BZ2_bzDecompressInit" |
| 252 | settings.dllfunc = "BZ2_bzDecompressInit" |
| 253 | |
| 254 | print("Test DLL 3/4: libbz2.dll, overwrite=BZ2_bzDecompress") |
| 255 | settings.carrier_invoke_style = CarrierInvokeStyle.OverwriteFunc |
| 256 | if not start(settings): |
| 257 | return |
| 258 | |
| 259 | print("Test DLL 4/4: libbz2.dll, backdoor=BZ2_bzDecompress") |
| 260 | settings.carrier_invoke_style = CarrierInvokeStyle.BackdoorFunc |
| 261 | if not start(settings): |
| 262 | return |
| 263 | |
| 264 | |
| 265 | def test_dll_loader(): |