[Advanced] CLI injection in WE using Grimoire

using System;
using System.Collections.Generic;
using System.Text;
using Shared;
using System.Windows.Forms;

namespace pluginTest
{
    public class MyCoolPlugin : IWePlugin
    {
        private Version version;
        private String author;
        private IWeNotify notifier;
        public String PluginAuthor { get { return author; } }
        public Version PluginVersion { get { return version; } }
        public IWeNotify Notifier { get { return notifier; } }

        public MyCoolPlugin()
        {
            //set some properties
            author = "Risc";
            version = new Version("1.0");
        }

        public IWeNotify RegisterNotify()
        {
            notifier = new PluginNotifier();
            notifier.OnRegisterPlugin += new delegateRegisterPlugin(notifier_OnRegisterPlugin);
            notifier.WindowCreated += new delegateWindowCreated(notifier_WindowCreated);
            //the return-type is reserved for further use.
            return notifier;
        }

        void notifier_WindowCreated(string className, string windowText, IntPtr hWnd)
        {
            if(windowText == "About Warcraft III World Editor UMS")
                MessageBox.Show("Cool");
        }

        void notifier_OnRegisterPlugin()
        {
            MessageBox.Show("Hello WorldEdit!");
        }
    }
}

-- CLILoader
loaddll("bin\\PELoader.dll")

using System;
using System.Collections.Generic;
using System.Text;

namespace NewCoolPlugin
{
    public interface IWePlugin
    {
        void RegisterPlugin();
        void UnRegisterPlugin();
    }

    public class Plugin : IWePlugin
    {
        public void RegisterPlugin()
        {
            //called whenever a plugin is loaded
            System.Windows.Forms.MessageBox.Show("Hello WE!");
        }

        public void UnRegisterPlugin()
        {
        }

        public static void CLILoad()
        {
            //create a new instance of this plugin
            Plugin p = new Plugin();
            //register the plugin
            p.RegisterPlugin();
        }
    }
}

// crapZilla.h

#pragma once

using namespace System;
using namespace System::Reflection;
using namespace System::IO;
using namespace System::Diagnostics;

struct __declspec(dllexport) CrapLoader
{
public:
	CrapLoader()
	{
		DirectoryInfo ^dirInfo = gcnew DirectoryInfo(
			Assembly::GetExecutingAssembly()->Location);

		if (dirInfo->Exists)
		{
			for each (FileInfo^ fileInfo in dirInfo->GetFiles("*.dll"))
			{
				try
				{
					Assembly ^currAssembly = Assembly::LoadFrom(fileInfo->DirectoryName);
					for each (Type^ exportedType in currAssembly->GetExportedTypes())
					{
						if (exportedType->IsInstanceOfType(crapZilla::IWePlugin::typeid))
						{
							crapZilla::IWePlugin ^plugin = (crapZilla::IWePlugin^) Activator::CreateInstance(exportedType);
							plugin->RegisterPlugin();
						}
					}
				} catch (Exception ^ex)
				{
					Debug::WriteLine(ex->Message);
				}
			}
		}
	}
};

// PELoader
// Loads a .Net assembly
// Copyright (c) 2008, E.Sandberg (Risc/Ion)

#include "stdafx.h"
#include <windows.h>

typedef int (*fCall)(void);
typedef int (*LPLOAD)(void);
HINSTANCE hDLL = 0;
LPLOAD lpLoad;
EXTERN_C IMAGE_DOS_HEADER __ImageBase;
LPTSTR  strDLLPath = new TCHAR[255];

BOOL APIENTRY DllMain( HANDLE hModule, 
                       DWORD  ul_reason_for_call, 
                       LPVOID lpReserved
					 )
{
	if(ul_reason_for_call == DLL_PROCESS_ATTACH)
	{
		GetModuleFileName((HINSTANCE)&__ImageBase, strDLLPath, 255);
		int found = 0;
		int i = strlen(strDLLPath);
		while(!found)
		{
			if(strDLLPath[i] == '\\')
			{
				strDLLPath[i+1] = '\0';
				found = 1;	
			}
			i--;
		}

		hDLL = LoadLibrary(strcat(strDLLPath,"CLILoader.dll"));

		if( hDLL == NULL )
			MessageBoxA(0, strcat("Could not load ", strDLLPath), "PELoader", 0);
		else
		{
			lpLoad = (LPLOAD)GetProcAddress(hDLL, "load");
			lpLoad();
		}
	}
    return TRUE;
}