#include "mainwindow.h" #include "ui_mainwindow.h" #include #include "QTextBrowser" #include "QMessageBox" #include "QComboBox" #include "QLineEdit" #include "QInputDialog" #include #include #include #include #include #include #include #include #include #include #include #include "extensions.h" #include "../vnrhook/include/const.h" #include "misc.h" QMainWindow* mainWindow; QComboBox* processCombo; QComboBox* ttCombo; QComboBox* extenCombo; QPlainTextEdit* textOutput; QString ProcessString(DWORD processId) { return QString("%1: %2").arg(QString::number(processId), GetModuleName(processId)); } QString TextThreadString(TextThread* thread) { ThreadParameter tp = thread->GetThreadParameter(); return QString("%1:%2:%3:%4:%5: ").arg( QString::number(thread->Number()), QString::number(tp.pid), QString::number(tp.hook, 16), QString::number(tp.retn, 16), QString::number(tp.spl, 16) ).toUpper(); } MainWindow::MainWindow(QWidget *parent) : QMainWindow(parent), ui(new Ui::MainWindow), hostSignaller(new HostSignaller) { ui->setupUi(this); mainWindow = this; processCombo = mainWindow->findChild("processCombo"); processCombo->lineEdit()->setAlignment(Qt::AlignHCenter); processCombo->lineEdit()->setReadOnly(true); ttCombo = mainWindow->findChild("ttCombo"); ttCombo->lineEdit()->setAlignment(Qt::AlignHCenter); ttCombo->lineEdit()->setReadOnly(true); extenCombo = mainWindow->findChild("extenCombo"); extenCombo->lineEdit()->setAlignment(Qt::AlignHCenter); extenCombo->lineEdit()->setReadOnly(true); textOutput = mainWindow->findChild("textOutput"); hostSignaller->Initialize(); connect(hostSignaller, &HostSignaller::AddProcess, this, &MainWindow::AddProcess); connect(hostSignaller, &HostSignaller::RemoveProcess, this, &MainWindow::RemoveProcess); connect(hostSignaller, &HostSignaller::AddThread, this, &MainWindow::AddThread); connect(hostSignaller, &HostSignaller::RemoveThread, this, &MainWindow::RemoveThread); connect(this, &MainWindow::ThreadOutputReceived, this, &MainWindow::ThreadOutput); std::map extensions = LoadExtensions(); for (auto i : extensions) extenCombo->addItem(QString::number(i.first) + ":" + i.second); Host::Open(); Host::AddConsoleOutput(L"NextHooker beta v2.1.0 by Artikash\r\nSource code and more information available under GPLv3 at https://github.com/Artikash/NextHooker"); } MainWindow::~MainWindow() { delete ui; } void MainWindow::AddProcess(unsigned int processId) { processCombo->addItem(ProcessString(processId)); QFile file("SavedHooks.txt"); if (!file.open(QIODevice::ReadOnly)) return; QString processName = GetFullModuleName(processId); QString allData = file.readAll(); QStringList allProcesses = allData.split("\r", QString::SkipEmptyParts); for (int i = allProcesses.length() - 1; i >= 0; --i) if (allProcesses.at(i).contains(processName)) { Sleep(50); QStringList hooks = allProcesses.at(i).split(" , "); for (int j = 1; j < hooks.length(); ++j) { Sleep(10); Host::InsertHook(processId, ParseCode(hooks.at(j))); } return; } } void MainWindow::RemoveProcess(unsigned int processId) { processCombo->removeItem(processCombo->findText(QString::number(processId) + ":", Qt::MatchStartsWith)); } void MainWindow::AddThread(TextThread* thread) { ttCombo->addItem( TextThreadString(thread) + QString::fromWCharArray(Host::GetHookName(thread->GetThreadParameter().pid, thread->GetThreadParameter().hook).c_str()) + " (" + GenerateCode(Host::GetHookParam(thread->GetThreadParameter().pid, thread->GetThreadParameter().hook), thread->GetThreadParameter().pid) + ")" ); thread->RegisterOutputCallBack([&](TextThread* thread, std::wstring output) { output = DispatchSentenceToExtensions(output, GetInfoForExtensions(thread)); emit ThreadOutputReceived(thread, QString::fromWCharArray(output.c_str())); return output; }); } void MainWindow::RemoveThread(TextThread* thread) { int threadIndex = ttCombo->findText(QString::number(thread->Number()) + ":", Qt::MatchStartsWith); if (threadIndex == ttCombo->currentIndex()) { ttCombo->setCurrentIndex(0); on_ttCombo_activated(0); } ttCombo->removeItem(threadIndex); } void MainWindow::ThreadOutput(TextThread* thread, QString output) { if (ttCombo->currentText().startsWith(TextThreadString(thread))) { textOutput->moveCursor(QTextCursor::End); textOutput->insertPlainText(output); textOutput->moveCursor(QTextCursor::End); } } std::unordered_map MainWindow::GetInfoForExtensions(TextThread* thread) { return { { "current select", ttCombo->currentText().split(":")[0].toInt() == thread->Number() ? 1 : 0 }, { "text number", thread->Number() }, { "process id", thread->GetThreadParameter().pid }, { "hook address", (int)thread->GetThreadParameter().hook }, { "hook address (upper 32 bits)", (int)(thread->GetThreadParameter().hook >> 32) } }; } QVector MainWindow::GetAllHooks(DWORD processId) { std::unordered_set addresses; QVector hooks; for (int i = 0; i < ttCombo->count(); ++i) if (ttCombo->itemText(i).split(":")[1].toInt() == processId && !addresses.count(ttCombo->itemText(i).split(":")[2].toInt(nullptr, 16))) { addresses.insert(ttCombo->itemText(i).split(":")[2].toInt(nullptr, 16)); hooks.push_back(Host::GetHookParam(ttCombo->itemText(i).split(":")[1].toInt(), ttCombo->itemText(i).split(":")[2].toInt(nullptr, 16))); } return hooks; } void MainWindow::on_attachButton_clicked() { bool ok; QString process = QInputDialog::getItem(this, "Select Process", "If you don't see the process you want to inject, try running with admin rights", GetAllProcesses(), 0, true, &ok); if (!ok) return; if (!Host::InjectProcess(process.split(":")[1].toInt())) Host::AddConsoleOutput(L"Failed to attach"); } void MainWindow::on_detachButton_clicked() { Host::DetachProcess(processCombo->currentText().split(":")[0].toInt()); } void MainWindow::on_hookButton_clicked() { bool ok; QString hookCode = QInputDialog::getText(this, "Add Hook", CodeInfoDump, QLineEdit::Normal, "", &ok); if (!ok) return; HookParam toInsert = ParseCode(hookCode); if (toInsert.type == 0 && toInsert.length_offset == 0) { Host::AddConsoleOutput(L"invalid code"); return; } Host::InsertHook(processCombo->currentText().split(":")[0].toInt(), ParseCode(hookCode)); } void MainWindow::on_unhookButton_clicked() { QVector hooks = GetAllHooks(processCombo->currentText().split(":")[0].toInt()); QStringList hookList; for (auto i : hooks) hookList.push_back( QString::fromWCharArray(Host::GetHookName(processCombo->currentText().split(":")[0].toInt(), i.address).c_str()) + ": " + GenerateCode(i, processCombo->currentText().split(":")[0].toInt()) ); bool ok; QString hook = QInputDialog::getItem(this, "Unhook", "Which hook to remove?", hookList, 0, false, &ok); if (ok) Host::RemoveHook(processCombo->currentText().split(":")[0].toInt(), hooks.at(hookList.indexOf(hook)).address); } void MainWindow::on_saveButton_clicked() { QVector hooks = GetAllHooks(processCombo->currentText().split(":")[0].toInt()); QString hookList = GetFullModuleName(processCombo->currentText().split(":")[0].toInt());; for (auto i : hooks) if (!(i.type & HOOK_ENGINE)) hookList += " , " + GenerateCode(i, processCombo->currentText().split(":")[0].toInt()); QFile file("SavedHooks.txt"); if (!file.open(QIODevice::Append | QIODevice::Text)) return; file.write((hookList + "\r\n").toUtf8()); } void MainWindow::on_ttCombo_activated(int index) { textOutput->setPlainText(QString::fromWCharArray(Host::GetThread(ttCombo->itemText(index).split(":")[0].toInt())->GetStore().c_str())); textOutput->moveCursor(QTextCursor::End); } void MainWindow::on_addExtenButton_clicked() { QString extenFileName = QFileDialog::getOpenFileName(this, "Select Extension dll", "C:\\", "Extensions (*.dll)"); if (!extenFileName.length()) return; QString extenName = extenFileName.split("/")[extenFileName.split("/").count() - 1]; extenName.chop(4); QString copyTo = QString::number(extenCombo->itemText(extenCombo->count() - 1).split(":")[0].toInt() + 1) + "_" + extenName + "_nexthooker_extension.dll"; QFile::copy(extenFileName, copyTo); extenCombo->clear(); std::map extensions = LoadExtensions(); for (auto i : extensions) extenCombo->addItem(QString::number(i.first) + ":" + i.second); } void MainWindow::on_rmvExtenButton_clicked() { if (extenCombo->currentText().size() == 0) return; QString extenFileName = extenCombo->currentText().split(":")[0] + "_" + extenCombo->currentText().split(":")[1] + "_nexthooker_extension.dll"; FreeLibrary(GetModuleHandleW(extenFileName.toStdWString().c_str())); DeleteFileW(extenFileName.toStdWString().c_str()); extenCombo->clear(); std::map extensions = LoadExtensions(); for (auto i : extensions) extenCombo->addItem(QString::number(i.first) + ":" + i.second); }