mirror of
https://github.com/HyperDbg/HyperDbg.git
synced 2026-08-31 01:56:24 +00:00
127 lines
3.1 KiB
C++
127 lines
3.1 KiB
C++
/**
|
|
* @file attach.cpp
|
|
* @author Sina Karvandi (sina@hyperdbg.org)
|
|
* @brief .attach command
|
|
* @details
|
|
* @version 0.1
|
|
* @date 2020-08-27
|
|
*
|
|
* @copyright This project is released under the GNU Public License v3.
|
|
*
|
|
*/
|
|
#include "pch.h"
|
|
|
|
//
|
|
// Global Variables
|
|
//
|
|
extern BOOLEAN g_IsSerialConnectedToRemoteDebuggee;
|
|
extern BOOLEAN g_IsSerialConnectedToRemoteDebugger;
|
|
|
|
/**
|
|
* @brief help of the .attach command
|
|
*
|
|
* @return VOID
|
|
*/
|
|
VOID
|
|
CommandAttachHelp()
|
|
{
|
|
ShowMessages(".attach : attaches to debug a thread in VMI Mode.\n\n");
|
|
|
|
ShowMessages("syntax : \t.attach [pid ProcessId (hex)]\n");
|
|
|
|
ShowMessages("\n");
|
|
ShowMessages("\t\te.g : .attach pid b60 \n");
|
|
}
|
|
|
|
/**
|
|
* @brief .attach command handler
|
|
*
|
|
* @param SplitCommand
|
|
* @param Command
|
|
* @return VOID
|
|
*/
|
|
VOID
|
|
CommandAttach(vector<string> SplitCommand, string Command)
|
|
{
|
|
UINT32 TargetPid = 0;
|
|
BOOLEAN NextIsPid = FALSE;
|
|
|
|
//
|
|
// Disable user-mode debugger in this version
|
|
//
|
|
#if ActivateUserModeDebugger == FALSE
|
|
|
|
if (!g_IsSerialConnectedToRemoteDebugger)
|
|
{
|
|
ShowMessages("the user-mode debugger in VMI Mode is still in the beta version and not stable. "
|
|
"we decided to exclude it from this release and release it in future versions. "
|
|
"if you want to test the user-mode debugger in VMI Mode, you should build "
|
|
"HyperDbg with special instructions. But attaching/switching to other processes\n"
|
|
"are fully supported in the Debugger Mode.\n"
|
|
"(it's not recommended to use it in VMI Mode yet!)\n");
|
|
return;
|
|
}
|
|
|
|
#endif // !ActivateUserModeDebugger
|
|
|
|
//
|
|
// It's a attach to a target PID
|
|
//
|
|
if (SplitCommand.size() >= 4)
|
|
{
|
|
ShowMessages("incorrect use of the '.attach'\n\n");
|
|
CommandAttachHelp();
|
|
return;
|
|
}
|
|
|
|
//
|
|
// .attach and .detach commands are only supported in VMI Mode
|
|
//
|
|
if (g_IsSerialConnectedToRemoteDebuggee)
|
|
{
|
|
ShowMessages("err, '.attach', and '.detach' commands are only usable "
|
|
"in VMI Mode, you can use the '.process', or the '.thread' "
|
|
"in Debugger Mode\n");
|
|
return;
|
|
}
|
|
|
|
for (auto item : SplitCommand)
|
|
{
|
|
//
|
|
// Find out whether the user enters pid or not
|
|
//
|
|
if (NextIsPid)
|
|
{
|
|
NextIsPid = FALSE;
|
|
|
|
if (!ConvertStringToUInt32(item, &TargetPid))
|
|
{
|
|
ShowMessages("please specify a correct hex value for process id\n\n");
|
|
CommandAttachHelp();
|
|
return;
|
|
}
|
|
}
|
|
else if (!item.compare("pid"))
|
|
{
|
|
//
|
|
// next item is a pid for the process
|
|
//
|
|
NextIsPid = TRUE;
|
|
}
|
|
}
|
|
|
|
//
|
|
// Check if the process id is empty or not
|
|
//
|
|
if (TargetPid == 0)
|
|
{
|
|
ShowMessages("please specify a hex value for process id\n\n");
|
|
CommandAttachHelp();
|
|
return;
|
|
}
|
|
|
|
//
|
|
// Perform attach to target process
|
|
//
|
|
UdAttachToProcess(TargetPid, NULL, NULL, FALSE);
|
|
}
|