Integrate into windows

service/essfunc.c

@@ -0,0 +1,120 @@
+// essfunc.dll for Vulnserver
+// Visit my blog for more details: http://www.thegreycorner.com/
+
+/*
+Copyright (c) 2010, Stephen Bradshaw
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
+
+    * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
+    * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
+    * Neither the name of the organization nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+*/
+
+#include <stdio.h>
+#include <string.h>
+
+#define VERSION "1.00"
+
+
+void EssentialFunc1() {
+	printf ("Called essential function dll version %s\n", VERSION);
+}
+
+void EssentialFunc2() {
+	__asm__("jmp *%esp\n\t"
+		"jmp *%eax\n\t"
+		"pop %eax\n\t"
+		"pop %eax\n\t"
+		"ret");
+}
+
+void EssentialFunc3() {
+	__asm__("jmp *%esp\n\t"
+		"jmp *%ecx\n\t"
+		"pop %ebx\n\t"
+		"pop %ebx\n\t"
+		"ret");
+}
+
+void EssentialFunc4() {
+	__asm__("jmp *%esp\n\t"
+		"jmp *%ebx\n\t"
+		"pop %ebp\n\t"
+		"pop %ebp\n\t"
+		"ret");
+}
+
+void EssentialFunc5() {
+	__asm__("jmp *%esp\n\t"
+		"jmp *%edi\n\t"
+		"pop %ebx\n\t"
+		"pop %ebx\n\t"
+		"ret");
+}
+
+void EssentialFunc6() {
+	__asm__("jmp *%esp\n\t"
+		"jmp *%edx\n\t"
+		"pop %ecx\n\t"
+		"pop %edx\n\t"
+		"ret");
+}
+
+void EssentialFunc7() {
+	__asm__("jmp *%esp\n\t"
+		"jmp *%esi\n\t"
+		"pop %ecx\n\t"
+		"pop %eax\n\t"
+		"ret");
+}
+
+
+void EssentialFunc8() {
+	__asm__("jmp *%esp\n\t"
+		"jmp *%ebp\n\t"
+		"pop %eax\n\t"
+		"pop %edx\n\t"
+		"ret");
+}
+
+
+void EssentialFunc9() {
+	__asm__("jmp *%esp\n\t"
+		"jmp *%esp\n\t"
+		"jmp *-12(%esp)\n\t"
+		"pop %ecx\n\t"
+		"pop %ecx\n\t"
+		"ret");
+}
+
+
+void EssentialFunc10(char *Input) {
+	char Buffer2S[140];
+	strcpy(Buffer2S, Input);
+}
+
+void EssentialFunc11(char *Input) {
+	char Buffer2S[60];
+	strcpy(Buffer2S, Input);
+}
+
+
+void EssentialFunc12(char *Status, char *Input) {
+	char Buffer2S[2000];
+	strcpy(Buffer2S, Input);
+	printf("%s", Status);
+}
+
+void EssentialFunc13(char *Input) {
+	char Buffer2S[2000];	
+	strcpy(Buffer2S, Input);
+}
+
+void EssentialFunc14(char *Input) {
+	char Buffer2S[1000];
+	strcpy(Buffer2S, Input);
+}

service/readme.md

@@ -0,0 +1,31 @@
+# Vulnserver Windows Service
+
+Provides that ability to allow for integration into training environments, and the automation of auto-recovery after exploitation.
+
+When run, it will only utilize the default port: ``9999``
+
+To install and uninstall the program as a service, run the following:
+
+``vulnserverService.exe install``  
+``vulnserverService.exe uninstall`` 
+- Ensure the Service is stopped prior to uninstall
+
+## Steps for Compiling the Source Code:
+A good guide to installing and setting up environmental variables:
+``https://www.ics.uci.edu/~pattis/common/handouts/mingweclipse/mingw.html``
+
+Once setup you can run the following from your powershell prompt:
+
+Builds the Essential Function DLL:
+
+``gcc.exe -c essfunc.c``  
+``gcc -shared -o essfunc.dll essfunc.o '-Wl,--out-implib=libessfunc.a' '-Wl,--image-base=0x62500000'``
+
+Builds the Vulnserver Service Executable and links to the DLL:
+
+``gcc.exe vulnserverService.c -o vulnserverService.exe -lws2_32 ./libessfunc.a``
+
+Sets the Auto Restart options for the Windows Service and Starts it:
+
+``sc.exe failure vulnserverService actions="restart/60000/restart/60000/restart/60000" reset=4000``  
+``Get-Service vulnserverService | Start-Service``