parent
8216613d11
commit
b76e33d526
32
inject.sh
32
inject.sh
|
@ -3,16 +3,40 @@
|
||||||
pid=$(pidof "hl_linux")
|
pid=$(pidof "hl_linux")
|
||||||
libpath=$(realpath "libhlcheat.so")
|
libpath=$(realpath "libhlcheat.so")
|
||||||
|
|
||||||
# 0x2 -> RTLD_NOW
|
# Used to echo the command. For debugging.
|
||||||
sudo gdb -n -q -batch \
|
#set -x
|
||||||
|
|
||||||
|
if grep -q "$libpath" "/proc/$pid/maps"; then
|
||||||
|
echo -e "hl-cheat already loaded. Reloading...\n";
|
||||||
|
|
||||||
|
# 0x2 -> RTLD_NOW
|
||||||
|
# 0x6 -> RTLD_LAZY | RTLD_NOLOAD
|
||||||
|
# For more info on the 3 mid lines, see self_unload() in main.c
|
||||||
|
sudo gdb -n -q -batch \
|
||||||
-ex "attach $pid" \
|
-ex "attach $pid" \
|
||||||
-ex "set \$dlopen = (void* (*)(char*, int))dlopen" \
|
-ex "set \$dlopen = (void* (*)(char*, int))dlopen" \
|
||||||
|
-ex "set \$dlclose = (int (*)(void*))dlclose" \
|
||||||
|
-ex "set \$dlerror = (char* (*)(void))dlerror" \
|
||||||
|
\
|
||||||
|
-ex "set \$self = \$dlopen(\"$libpath\", 6)" \
|
||||||
|
-ex "call \$dlclose(\$self)" \
|
||||||
|
-ex "call \$dlclose(\$self)" \
|
||||||
|
\
|
||||||
|
-ex "call \$dlopen(\"$libpath\", 2)" \
|
||||||
|
-ex "call \$dlerror()" \
|
||||||
|
-ex "detach" \
|
||||||
|
-ex "quit"
|
||||||
|
else
|
||||||
|
sudo gdb -n -q -batch \
|
||||||
|
-ex "attach $pid" \
|
||||||
|
-ex "set \$dlopen = (void* (*)(char*, int))dlopen" \
|
||||||
|
-ex "set \$dlclose = (int (*)(void*))dlclose" \
|
||||||
-ex "set \$dlerror = (char* (*)(void))dlerror" \
|
-ex "set \$dlerror = (char* (*)(void))dlerror" \
|
||||||
-ex "call \$dlopen(\"$libpath\", 2)" \
|
-ex "call \$dlopen(\"$libpath\", 2)" \
|
||||||
-ex "call \$dlerror()" \
|
-ex "call \$dlerror()" \
|
||||||
-ex "detach" \
|
-ex "detach" \
|
||||||
-ex "quit"
|
-ex "quit"
|
||||||
|
fi
|
||||||
|
|
||||||
# -ex "set \$dlclose = (int (*)(void*))dlclose" \
|
set +x
|
||||||
|
|
||||||
echo -e "\nDone."
|
echo -e "\nDone."
|
||||||
|
|
Loading…
Reference in New Issue