renamed the project and added added a try/catch in

nasa::injector_ctx::translate so if the pml4 index isnt in the std::map
then go and get the pml4e, insert it into map_into's pml4 and also
insert the index into the std::map

reverse-injector.sln

@@ -3,24 +3,15 @@ Microsoft Visual Studio Solution File, Format Version 12.00
 # Visual Studio Version 16
 VisualStudioVersion = 16.0.30503.244
 MinimumVisualStudioVersion = 10.0.40219.1
-Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "nasa-injector", "nasa-injector\nasa-injector.vcxproj", "{ED392663-3AF3-40DE-8AC7-2F373B3E9B45}"
+Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "reverse-injector", "reverse-injector\reverse-injector.vcxproj", "{ED392663-3AF3-40DE-8AC7-2F373B3E9B45}"
 EndProject
 Global
 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
-		Debug|x64 = Debug|x64
-		Debug|x86 = Debug|x86
 		Release|x64 = Release|x64
-		Release|x86 = Release|x86
 	EndGlobalSection
 	GlobalSection(ProjectConfigurationPlatforms) = postSolution
-		{ED392663-3AF3-40DE-8AC7-2F373B3E9B45}.Debug|x64.ActiveCfg = Debug|x64
-		{ED392663-3AF3-40DE-8AC7-2F373B3E9B45}.Debug|x64.Build.0 = Debug|x64
-		{ED392663-3AF3-40DE-8AC7-2F373B3E9B45}.Debug|x86.ActiveCfg = Debug|Win32
-		{ED392663-3AF3-40DE-8AC7-2F373B3E9B45}.Debug|x86.Build.0 = Debug|Win32
 		{ED392663-3AF3-40DE-8AC7-2F373B3E9B45}.Release|x64.ActiveCfg = Release|x64
 		{ED392663-3AF3-40DE-8AC7-2F373B3E9B45}.Release|x64.Build.0 = Release|x64
-		{ED392663-3AF3-40DE-8AC7-2F373B3E9B45}.Release|x86.ActiveCfg = Release|Win32
-		{ED392663-3AF3-40DE-8AC7-2F373B3E9B45}.Release|x86.Build.0 = Release|Win32
 	EndGlobalSection
 	GlobalSection(SolutionProperties) = preSolution
 		HideSolutionNode = FALSE

reverse-injector/icon.rc

@@ -0,0 +1,3 @@
+// Icon Resource Definition
+#define MAIN_ICON                       102
+MAIN_ICON               ICON                    "small.ico"

reverse-injector/injector_ctx/injector_ctx.cpp

@@ -5,17 +5,18 @@ namespace nasa
 	injector_ctx::injector_ctx(nasa::mem_ctx* map_into, nasa::mem_ctx* map_from)
 		: 
 		map_into(map_into),
-		map_from(map_from)
+		map_from(map_from),
+		pml4_index_map{}
 	{}
 
 	injector_ctx::~injector_ctx()
 	{
 		const auto pml4 = reinterpret_cast<ppml4e>(
-			this->map_into->set_page(
+			map_into->set_page(
-				this->map_into->get_dirbase()));
+				map_into->get_dirbase()));
-		
+
 		// zero inserted pml4e's...
-		for (const auto [real_idx, inserted_idx] : this->pml4_index_map)
+		for (const auto [real_idx, inserted_idx] : pml4_index_map)
 			pml4[inserted_idx] = pml4e{ NULL };
 
 		while (!SwitchToThread());
@@ -36,13 +37,13 @@ namespace nasa
 		std::vector<std::pair<std::uint8_t, pml4e>> present_pml4es;
 		std::vector<std::uint8_t> empty_pml4es;
 
-		// find present pml4e's in usermode, and also find empty pml4e's in usermode...
+		// find present pml4e's in map_from, and also find empty pml4e's in map_into...
-		for (auto idx = 0u; idx < 256; ++idx)
+		for (auto idx = 100u; idx < 256; ++idx)
 		{
 			if (source_pml4[idx].present)
 				present_pml4es.push_back({ idx, source_pml4[idx] });
 
-			if (!target_pml4[idx].present)
+			if (!target_pml4[idx].value)
 				empty_pml4es.push_back(idx);
 		}
 
@@ -53,7 +54,7 @@ namespace nasa
 		// setup translation table and insert pml4e's...
 		for (auto idx = 0u; idx < present_pml4es.size(); ++idx)
 		{
-			this->pml4_index_map.insert({ present_pml4es[idx].first, empty_pml4es[idx] });
+			pml4_index_map.insert({ present_pml4es[idx].first, empty_pml4es[idx] });
 			target_pml4[empty_pml4es[idx]] = present_pml4es[idx].second;
 		}
 		return true;
@@ -63,7 +64,40 @@ namespace nasa
 	std::uintptr_t injector_ctx::translate(std::uintptr_t translate) const
 	{
 		virt_addr_t virt_addr{ reinterpret_cast<void*>(translate) };
-		virt_addr.pml4_index = pml4_index_map[virt_addr.pml4_index];
+		try
+		{
+			virt_addr.pml4_index = pml4_index_map.at(virt_addr.pml4_index);
+		}
+		catch (const std::out_of_range& e)
+		{
+			// the pml4e is not in the map so we need to go get it
+			// and put it inside of the map. also put it inside of
+			// map_into's pml4...
+
+			const auto map_into_pml4 =
+				reinterpret_cast<ppml4e>(
+					map_into->set_page(
+						map_into->get_dirbase()));
+
+			const auto map_from_pml4 =
+				reinterpret_cast<ppml4e>(
+					map_from->set_page(
+						map_from->get_dirbase()));
+
+			const auto new_pml4e = 
+				map_from_pml4[virt_addr.pml4_index];
+
+			for (auto idx = 100u; idx < 256; ++idx)
+			{
+				if (!map_into_pml4[idx].value)
+				{
+					map_into_pml4[idx] = new_pml4e;
+					pml4_index_map[virt_addr.pml4_index] = idx;
+					virt_addr.pml4_index = idx;
+					break;
+				}
+			}
+		}
 		return reinterpret_cast<std::uintptr_t>(virt_addr.value);
 	}
 }

reverse-injector/main.cpp

@@ -4,6 +4,12 @@
 
 int __cdecl main(int argc, char** argv)
 {
+	if (argc < 3 || strcmp(argv[1], "--pid"))
+	{
+		std::printf("[!] please provide a process id... (--pid X)\n");
+		return false;
+	}
+
 	const auto [drv_handle, drv_key] = vdm::load_drv();
 	if (!drv_handle || drv_key.empty())
 	{
@@ -49,7 +55,7 @@ int __cdecl main(int argc, char** argv)
 	vdm.set_read(_read_phys);
 	vdm.set_write(_write_phys);
 
-	nasa::mem_ctx notepad_proc(vdm, util::get_pid("notepad.exe"));
+	nasa::mem_ctx notepad_proc(vdm, std::atoi(argv[2]));
 	nasa::injector_ctx injector(&my_proc, &notepad_proc);
 
 	if (!injector.init())

reverse-injector/mem_ctx/mem_ctx.cpp

@@ -75,31 +75,30 @@ namespace nasa
 
 	mem_ctx::~mem_ctx()
 	{
-		set_pml4e(reinterpret_cast<::ppml4e>(get_dirbase()) + this->pml4e_index, pml4e{NULL});
+		const auto pml4 =
-		while (!SwitchToThread());
+			reinterpret_cast<ppml4e>(
+				set_page(dirbase))[pml4e_index] = pml4e{ NULL };
 	}
 
 	void* mem_ctx::set_page(void* addr)
 	{
 		// table entry change.
+		++pte_index;
+		if (pte_index >= 511)
 		{
-			++pte_index;
+			++pde_index;
-			if (pte_index >= 511)
+			pte_index = 0;
-			{
+		}
-				++pde_index;
-				pte_index = 0;
-			}
-
-			if (pde_index >= 511)
-			{
-				++pdpte_index;
-				pde_index = 0;
-			}
 
-			if (pdpte_index >= 511)
+		if (pde_index >= 511)
-				pdpte_index = 0;
+		{
+			++pdpte_index;
+			pde_index = 0;
 		}
 
+		if (pdpte_index >= 511)
+			pdpte_index = 0;
+
 		pdpte new_pdpte = { NULL };
 		new_pdpte.present = true;
 		new_pdpte.rw = true;

reverse-injector/reverse-injector.vcxproj

@@ -1,14 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
   <ItemGroup Label="ProjectConfigurations">
-    <ProjectConfiguration Include="Debug|Win32">
-      <Configuration>Debug</Configuration>
-      <Platform>Win32</Platform>
-    </ProjectConfiguration>
-    <ProjectConfiguration Include="Release|Win32">
-      <Configuration>Release</Configuration>
-      <Platform>Win32</Platform>
-    </ProjectConfiguration>
     <ProjectConfiguration Include="Debug|x64">
       <Configuration>Debug</Configuration>
       <Platform>x64</Platform>
@@ -24,21 +16,9 @@
     <ProjectGuid>{ed392663-3af3-40de-8ac7-2f373b3e9b45}</ProjectGuid>
     <RootNamespace>nasainjector</RootNamespace>
     <WindowsTargetPlatformVersion>10.0</WindowsTargetPlatformVersion>
+    <ProjectName>reverse-injector</ProjectName>
   </PropertyGroup>
   <Import Project="$(VCTargetsPath)\Microsoft.Cpp.Default.props" />
-  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'" Label="Configuration">
-    <ConfigurationType>Application</ConfigurationType>
-    <UseDebugLibraries>true</UseDebugLibraries>
-    <PlatformToolset>v142</PlatformToolset>
-    <CharacterSet>Unicode</CharacterSet>
-  </PropertyGroup>
-  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'" Label="Configuration">
-    <ConfigurationType>Application</ConfigurationType>
-    <UseDebugLibraries>false</UseDebugLibraries>
-    <PlatformToolset>v142</PlatformToolset>
-    <WholeProgramOptimization>true</WholeProgramOptimization>
-    <CharacterSet>Unicode</CharacterSet>
-  </PropertyGroup>
   <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'" Label="Configuration">
     <ConfigurationType>Application</ConfigurationType>
     <UseDebugLibraries>true</UseDebugLibraries>
@@ -57,12 +37,6 @@
   </ImportGroup>
   <ImportGroup Label="Shared">
   </ImportGroup>
-  <ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'">
-    <Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
-  </ImportGroup>
-  <ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Release|Win32'">
-    <Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
-  </ImportGroup>
   <ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">
     <Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
   </ImportGroup>
@@ -70,46 +44,12 @@
     <Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
   </ImportGroup>
   <PropertyGroup Label="UserMacros" />
-  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'">
-    <LinkIncremental>true</LinkIncremental>
-  </PropertyGroup>
-  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'">
-    <LinkIncremental>false</LinkIncremental>
-  </PropertyGroup>
   <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">
     <LinkIncremental>true</LinkIncremental>
   </PropertyGroup>
   <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
     <LinkIncremental>false</LinkIncremental>
   </PropertyGroup>
-  <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'">
-    <ClCompile>
-      <WarningLevel>Level3</WarningLevel>
-      <SDLCheck>true</SDLCheck>
-      <PreprocessorDefinitions>WIN32;_DEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
-      <ConformanceMode>true</ConformanceMode>
-    </ClCompile>
-    <Link>
-      <SubSystem>Console</SubSystem>
-      <GenerateDebugInformation>true</GenerateDebugInformation>
-    </Link>
-  </ItemDefinitionGroup>
-  <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'">
-    <ClCompile>
-      <WarningLevel>Level3</WarningLevel>
-      <FunctionLevelLinking>true</FunctionLevelLinking>
-      <IntrinsicFunctions>true</IntrinsicFunctions>
-      <SDLCheck>true</SDLCheck>
-      <PreprocessorDefinitions>WIN32;NDEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
-      <ConformanceMode>true</ConformanceMode>
-    </ClCompile>
-    <Link>
-      <SubSystem>Console</SubSystem>
-      <EnableCOMDATFolding>true</EnableCOMDATFolding>
-      <OptimizeReferences>true</OptimizeReferences>
-      <GenerateDebugInformation>true</GenerateDebugInformation>
-    </Link>
-  </ItemDefinitionGroup>
   <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">
     <ClCompile>
       <WarningLevel>Level3</WarningLevel>
@@ -158,6 +98,9 @@
     <ClInclude Include="vdm\vdm.hpp" />
     <ClInclude Include="vdm_ctx\vdm_ctx.hpp" />
   </ItemGroup>
+  <ItemGroup>
+    <ResourceCompile Include="icon.rc" />
+  </ItemGroup>
   <Import Project="$(VCTargetsPath)\Microsoft.Cpp.targets" />
   <ImportGroup Label="ExtensionTargets">
   </ImportGroup>

reverse-injector/reverse-injector.vcxproj.filters

@@ -56,4 +56,9 @@
       <Filter>Header Files</Filter>
     </ClInclude>
   </ItemGroup>
+  <ItemGroup>
+    <ResourceCompile Include="icon.rc">
+      <Filter>Header Files</Filter>
+    </ResourceCompile>
+  </ItemGroup>
 </Project>