connect.cpp File Reference

.connect command More...

#include "pch.h"

Functions
VOID	CommandConnectHelp ()
	help of the .connect command
VOID	ConnectLocalDebugger ()
	Connect to local debugger.
BOOLEAN	ConnectRemoteDebugger (const CHAR *Ip, const CHAR *Port)
	Connect to remote debugger.
VOID	CommandConnect (vector< string > SplitCommand, string Command)
	.connect command handler

Variables
BOOLEAN	g_IsConnectedToHyperDbgLocally
	Shows whether the user is allowed to use 'load' command to load modules locally in VMI (virtual machine introspection) mode.
BOOLEAN	g_IsConnectedToRemoteDebuggee
	Shows whether the current debugger is the host and connected to a remote debuggee (guest)
BOOLEAN	g_IsConnectedToRemoteDebugger
	Shows whether the current system is a guest (debuggee) and a remote debugger is connected to this system.
BOOLEAN	g_IsSerialConnectedToRemoteDebuggee
	Shows if the debugger was connected to remote debuggee over (A remote guest)
BOOLEAN	g_IsSerialConnectedToRemoteDebugger
	Shows if the debugger was connected to remote debugger (A remote host)
string	g_ServerPort
	In debugger (not debuggee), we save the port of server debuggee in this variable to use it later e.g, in signature.
string	g_ServerIp
	In debugger (not debuggee), we save the port of server debuggee in this variable to use it later e.g, in signature.

Detailed Description

.connect command

Author

Sina Karvandi (sina@.nosp@m.hype.nosp@m.rdbg..nosp@m.org)

Version

0.1

Date

2020-05-27

Copyright

This project is released under the GNU Public License v3.

Function Documentation

CommandConnect()

VOID CommandConnect	(	vector< string >	SplitCommand,
		string	Command )

.connect command handler

Parameters

SplitCommand
Command

Returns

VOID

{
    string ip;
    string port;
 
    if (g_IsConnectedToHyperDbgLocally || g_IsConnectedToRemoteDebuggee ||
        g_IsConnectedToRemoteDebugger)
    {
        ShowMessages("you're connected to a debugger, please use '.disconnect' "
                     "command\n");
        return;
    }
 
    if (g_IsSerialConnectedToRemoteDebuggee ||
        g_IsSerialConnectedToRemoteDebugger)
    {
        ShowMessages("you're connected to a an instance of HyperDbg, please use "
                     "'.debug close' command\n");
        return;
    }
 
    if (SplitCommand.size() == 1)
    {
        //
        // Means that user entered just a connect so we have to
        // ask to connect to what ?
        //
        ShowMessages("incorrect use of the '.connect'\n\n");
        CommandConnectHelp();
        return;
    }
    else if (SplitCommand.at(1) == "local" && SplitCommand.size() == 2)
    {
        //
        // connect to local debugger
        //
        ShowMessages("local debugging (vmi-mode)\n");
        ConnectLocalDebugger();
        return;
    }
    else if (SplitCommand.size() == 3 || SplitCommand.size() == 2)
    {
        ip = SplitCommand.at(1);
 
        if (SplitCommand.size() == 3)
        {
            port = SplitCommand.at(2);
        }
 
        //
        // means that probably wants to connect to a remote
        // system, let's first check the if the parameters are
        // valid
        //
        if (!ValidateIP(ip))
        {
            ShowMessages("incorrect ip address\n");
            return;
        }
 
        if (SplitCommand.size() == 3)
        {
            if (!IsNumber(port) || stoi(port) > 65535 || stoi(port) < 0)
            {
                ShowMessages("incorrect port\n");
                return;
            }
 
            //
            // connect to remote debugger
            //
            ConnectRemoteDebugger(ip.c_str(), port.c_str());
        }
        else
        {
            //
            // connect to remote debugger (default port)
            //
            ConnectRemoteDebugger(ip.c_str(), NULL);
        }
    }
    else
    {
        ShowMessages("incorrect use of the '.connect'\n\n");
        CommandConnectHelp();
        return;
    }
}

CommandConnectHelp()

VOID CommandConnectHelp

(

)

help of the .connect command

Returns

VOID

{
    ShowMessages(".connect : connects to a remote or local machine to start "
                 "debugging.\n\n");
 
    ShowMessages("syntax : \t.connect [local]\n");
    ShowMessages("syntax : \t.connect [Ip (string)] [Port (decimal)]\n");
 
    ShowMessages("\n");
    ShowMessages("\t\te.g : .connect local\n");
    ShowMessages("\t\te.g : .connect 192.168.1.5 50000\n");
}

ConnectLocalDebugger()

VOID ConnectLocalDebugger

(

)

Connect to local debugger.

Returns

VOID

{
    g_IsConnectedToHyperDbgLocally = TRUE;
}

ConnectRemoteDebugger()

BOOLEAN ConnectRemoteDebugger	(	const CHAR *	Ip,
		const CHAR *	Port )

Connect to remote debugger.

Returns

BOOLEAN

{
    //
    // Validate IP and Port
 
    if (!ValidateIP(Ip))
    {
        return FALSE;
    }
 
    if (Port != NULL)
    {
        if (!IsNumber(Port) || stoi(Port) > 65535 || stoi(Port) < 0)
        {
            return FALSE;
        }
 
        //
        // connect to remote debugger
        //
        g_ServerIp   = Ip;
        g_ServerPort = Port;
        RemoteConnectionConnect(Ip, Port);
    }
    else
    {
        //
        // connect to remote debugger (default port)
        //
        g_ServerIp   = Ip;
        g_ServerPort = DEFAULT_PORT;
        RemoteConnectionConnect(Ip, DEFAULT_PORT);
    }
 
    return TRUE;
}

Variable Documentation

g_IsConnectedToHyperDbgLocally

BOOLEAN g_IsConnectedToHyperDbgLocally

extern

Shows whether the user is allowed to use 'load' command to load modules locally in VMI (virtual machine introspection) mode.

g_IsConnectedToRemoteDebuggee

BOOLEAN g_IsConnectedToRemoteDebuggee

extern

Shows whether the current debugger is the host and connected to a remote debuggee (guest)

g_IsConnectedToRemoteDebugger

BOOLEAN g_IsConnectedToRemoteDebugger

extern

Shows whether the current system is a guest (debuggee) and a remote debugger is connected to this system.

g_IsSerialConnectedToRemoteDebuggee

BOOLEAN g_IsSerialConnectedToRemoteDebuggee

extern

Shows if the debugger was connected to remote debuggee over (A remote guest)

g_IsSerialConnectedToRemoteDebugger

BOOLEAN g_IsSerialConnectedToRemoteDebugger

extern

Shows if the debugger was connected to remote debugger (A remote host)

g_ServerIp

string g_ServerIp

extern

In debugger (not debuggee), we save the port of server debuggee in this variable to use it later e.g, in signature.

g_ServerPort

string g_ServerPort

extern

In debugger (not debuggee), we save the port of server debuggee in this variable to use it later e.g, in signature.