mirror of
https://github.com/HyperDbg/HyperDbg.git
synced 2026-08-23 15:34:35 +00:00
138 lines
3.6 KiB
C++
138 lines
3.6 KiB
C++
/**
|
|
* @file attach.cpp
|
|
* @author Sina Karvandi (sina@hyperdbg.org)
|
|
* @brief .attach command
|
|
* @details
|
|
* @version 0.1
|
|
* @date 2020-08-27
|
|
*
|
|
* @copyright This project is released under the GNU Public License v3.
|
|
*
|
|
*/
|
|
#include "pch.h"
|
|
|
|
//
|
|
// Global Variables
|
|
//
|
|
extern BOOLEAN g_IsSerialConnectedToRemoteDebuggee;
|
|
extern BOOLEAN g_IsSerialConnectedToRemoteDebugger;
|
|
|
|
/**
|
|
* @brief help of the .attach command
|
|
*
|
|
* @return VOID
|
|
*/
|
|
VOID
|
|
CommandAttachHelp()
|
|
{
|
|
ShowMessages(".attach : attaches to debug a thread in VMI Mode.\n\n");
|
|
|
|
ShowMessages("syntax : \t.attach [pid ProcessId (hex)]\n");
|
|
|
|
ShowMessages("\n");
|
|
ShowMessages("\t\te.g : .attach pid b60 \n");
|
|
}
|
|
|
|
/**
|
|
* @brief .attach command handler
|
|
*
|
|
* @param CommandTokens
|
|
* @param Command
|
|
*
|
|
* @return VOID
|
|
*/
|
|
VOID
|
|
CommandAttach(vector<CommandToken> CommandTokens, string Command)
|
|
{
|
|
UINT32 TargetPid = 0;
|
|
BOOLEAN NextIsPid = FALSE;
|
|
|
|
//
|
|
// Disable user-mode debugger in this version
|
|
//
|
|
#if ActivateUserModeDebugger == FALSE
|
|
|
|
if (!g_IsSerialConnectedToRemoteDebugger)
|
|
{
|
|
ShowMessages("the user-mode debugger in VMI Mode is still in the beta version and not stable. "
|
|
"we decided to exclude it from this release and release it in future versions. "
|
|
"if you want to test the user-mode debugger in VMI Mode, you should build "
|
|
"HyperDbg with special instructions. But attaching/switching to other processes\n"
|
|
"are fully supported in the Debugger Mode.\n"
|
|
"(it's not recommended to use it in VMI Mode yet!)\n");
|
|
return;
|
|
}
|
|
|
|
#endif // !ActivateUserModeDebugger
|
|
|
|
//
|
|
// It's a attach to a target PID
|
|
//
|
|
if (CommandTokens.size() >= 4)
|
|
{
|
|
ShowMessages("incorrect use of the '%s'\n\n",
|
|
GetCaseSensitiveStringFromCommandToken(CommandTokens.at(0)).c_str());
|
|
CommandAttachHelp();
|
|
return;
|
|
}
|
|
|
|
//
|
|
// .attach and .detach commands are only supported in VMI Mode
|
|
//
|
|
if (g_IsSerialConnectedToRemoteDebuggee)
|
|
{
|
|
ShowMessages("err, '.attach', and '.detach' commands are only usable "
|
|
"in VMI Mode, you can use the '.process', or the '.thread' "
|
|
"in Debugger Mode\n");
|
|
return;
|
|
}
|
|
|
|
for (auto Section = CommandTokens.begin() + 1; Section != CommandTokens.end(); Section++)
|
|
{
|
|
|
|
//
|
|
// Find out whether the user enters pid or not
|
|
//
|
|
if (NextIsPid)
|
|
{
|
|
NextIsPid = FALSE;
|
|
|
|
if (!ConvertTokenToUInt32(*Section, &TargetPid))
|
|
{
|
|
ShowMessages("please specify a correct hex value for process id\n\n");
|
|
CommandAttachHelp();
|
|
return;
|
|
}
|
|
}
|
|
else if (CompareLowerCaseStrings(*Section, "pid"))
|
|
{
|
|
//
|
|
// next item is a pid for the process
|
|
//
|
|
NextIsPid = TRUE;
|
|
}
|
|
else
|
|
{
|
|
ShowMessages("unknown parameter at '%s'\n\n",
|
|
GetCaseSensitiveStringFromCommandToken(*Section).c_str());
|
|
CommandAttachHelp();
|
|
return;
|
|
}
|
|
}
|
|
|
|
//
|
|
// Check if the process id is empty or not
|
|
//
|
|
if (TargetPid == 0)
|
|
{
|
|
ShowMessages("please specify a hex value for process id\n\n");
|
|
CommandAttachHelp();
|
|
return;
|
|
}
|
|
|
|
//
|
|
// Perform attach to target process
|
|
//
|
|
ShowMessages("Attaching to process %lld\n\n", TargetPid);
|
|
UdAttachToProcess(TargetPid, NULL, NULL, FALSE);
|
|
}
|