From a696300aab30823b1220ea467338bcf337f3b847 Mon Sep 17 00:00:00 2001
From: Dejan Lukan <dejan@proteansec.com>
Date: Wed, 15 Feb 2017 13:58:52 +0100
Subject: [PATCH] The allocated memory should be RWX to be able to execute the
 shellcode.

---
 injector/injector/injector.cpp | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/injector/injector/injector.cpp b/injector/injector/injector.cpp
index e8a5581..87144f9 100644
--- a/injector/injector/injector.cpp
+++ b/injector/injector/injector.cpp
@@ -27,7 +27,7 @@ int _tmain(int argc, _TCHAR* argv[])
 	int option = 0;
 	DWORD PID;
 	SetPriv SeDebug;
-	
+
 	if (argc != 4)
 		usage(argv[0]);
 
@@ -40,7 +40,7 @@ int _tmain(int argc, _TCHAR* argv[])
 
 	if (!PathFileExists(argv[2]))
 		usage(argv[0]);
-	
+
 	PID = _ttoi(argv[3]);
 
 	//Set SeDebugPriviliege
@@ -56,19 +56,19 @@ int _tmain(int argc, _TCHAR* argv[])
 		exit(1);
 	}
 	cout << "OK" << endl;
-	
+
 	if (option == 1) {
 		//DLL injection
 		HANDLE hProcess;
 		HMODULE hKernel32;
-		HANDLE hLoadLibrary; 
+		HANDLE hLoadLibrary;
 		LPVOID hAllocatedMem;
 		HANDLE hThread;
 		char dllpath[1024];
 		size_t i;
-		
+
 		wcstombs_s(&i, dllpath, 1024, argv[2], 1024);
-		
+
 		hProcess = OpenProcess(PROCESS_ALL_ACCESS, FALSE, PID);
 		if (hProcess == NULL)
 		{
@@ -76,7 +76,7 @@ int _tmain(int argc, _TCHAR* argv[])
 			exit(1);
 		}
 		wcout << "Open process " << PID << ": OK" << endl;
-		
+
 		hKernel32 = GetModuleHandle(L"Kernel32");
 		if (hKernel32 == NULL)
 		{
@@ -129,7 +129,7 @@ int _tmain(int argc, _TCHAR* argv[])
 		char *sc;
 
 		file.open(argv[2], ios::binary);
-		if (!file.is_open()) 
+		if (!file.is_open())
 		{
 			wcerr << "Cannot open the file " << argv[2] << endl;
 			exit(1);
@@ -138,7 +138,7 @@ int _tmain(int argc, _TCHAR* argv[])
 		file.close();
 		sc = new char[line.size()+1];
 		sc = (char*)line.c_str();
-		
+
 		hProcess = OpenProcess(PROCESS_ALL_ACCESS, FALSE, PID);
 		if (hProcess == NULL)
 		{
@@ -147,7 +147,7 @@ int _tmain(int argc, _TCHAR* argv[])
 		}
 		wcout << "Open process " << PID << ": OK" << endl;
 
-		hAllocatedMem = VirtualAllocEx(hProcess, NULL, sizeof(sc), MEM_COMMIT | MEM_RESERVE, PAGE_READWRITE);
+		hAllocatedMem = VirtualAllocEx(hProcess, NULL, sizeof(sc), MEM_COMMIT | MEM_RESERVE, PAGE_EXECUTE_READWRITE);
 		if (hAllocatedMem == NULL)
 		{
 			wcerr << "Cannot allocate memory in " << PID << ", error: " << GetLastError() << endl;
@@ -172,4 +172,4 @@ int _tmain(int argc, _TCHAR* argv[])
 	}
 
     return 0;
-}
\ No newline at end of file
+}