mirror of
https://github.com/rapid7/metasploit-payloads
synced 2025-05-18 22:02:23 +02:00
4ffe127f04
The 'common' library has been removed. The only project that actually used it was metsrv, so the code that metsrv required from common is now directly compiled in as part of that project. The common folder now contains files that are importanta cross all of the projects, with a primary focus on the new "API" style function. What this means is that MetSrv has an API that it exposes through a function pointer that is passed to the extension when it's initialised. This pointer references a structure with all the API functions wired in. This means that: * Extensions don't need to know anything about metsrv at compile time. * The delay loading code can be removed, which was one of the last instances of "metsrv.dll" as a string. * Metsrv.dll no longer exports any functions. More to come.
130 lines
3.2 KiB
C
130 lines
3.2 KiB
C
#include "precomp.h"
|
|
#include "common_metapi.h"
|
|
|
|
extern HMODULE hookLibrary;
|
|
|
|
/*
|
|
* Enables or disables mouse input
|
|
*/
|
|
DWORD request_ui_enable_mouse(Remote *remote, Packet *request)
|
|
{
|
|
Packet *response = met_api->packet.create_response(request);
|
|
BOOLEAN enable = FALSE;
|
|
DWORD result = ERROR_SUCCESS;
|
|
|
|
enable = met_api->packet.get_tlv_value_bool(request, TLV_TYPE_BOOL);
|
|
|
|
// If there's no hook library loaded yet
|
|
if (!hookLibrary)
|
|
extract_hook_library();
|
|
|
|
// If the hook library is loaded successfully...
|
|
if (hookLibrary)
|
|
{
|
|
DWORD (*enableMouseInput)(BOOL enable) = (DWORD (*)(BOOL))GetProcAddress(
|
|
hookLibrary, "enable_mouse_input");
|
|
|
|
if (enableMouseInput)
|
|
result = enableMouseInput(enable);
|
|
}
|
|
else
|
|
result = GetLastError();
|
|
|
|
// Transmit the response
|
|
met_api->packet.transmit_response(result, remote, response);
|
|
|
|
return ERROR_SUCCESS;
|
|
}
|
|
|
|
|
|
/*
|
|
* Send keystrokes
|
|
*/
|
|
|
|
DWORD request_ui_send_mouse(Remote *remote, Packet *request)
|
|
{
|
|
Packet *response = met_api->packet.create_response(request);
|
|
DWORD result = ERROR_SUCCESS;
|
|
|
|
DWORD action = met_api->packet.get_tlv_value_uint(request, TLV_TYPE_MOUSE_ACTION);
|
|
DWORD x = met_api->packet.get_tlv_value_uint(request, TLV_TYPE_MOUSE_X);
|
|
DWORD y = met_api->packet.get_tlv_value_uint(request, TLV_TYPE_MOUSE_Y);
|
|
|
|
INPUT input = {0};
|
|
input.type = INPUT_MOUSE;
|
|
input.mi.mouseData = 0;
|
|
if (action == 0)
|
|
{
|
|
input.mi.dwFlags = MOUSEEVENTF_MOVE;
|
|
}
|
|
else if (action == 1)
|
|
{
|
|
input.mi.dwFlags = MOUSEEVENTF_LEFTDOWN;
|
|
}
|
|
else if (action == 2)
|
|
{
|
|
input.mi.dwFlags = MOUSEEVENTF_LEFTDOWN;
|
|
}
|
|
else if (action == 3)
|
|
{
|
|
input.mi.dwFlags = MOUSEEVENTF_LEFTUP;
|
|
}
|
|
else if (action == 4)
|
|
{
|
|
input.mi.dwFlags = MOUSEEVENTF_RIGHTDOWN;
|
|
}
|
|
else if (action == 5)
|
|
{
|
|
input.mi.dwFlags = MOUSEEVENTF_RIGHTDOWN;
|
|
}
|
|
else if (action == 6)
|
|
{
|
|
input.mi.dwFlags = MOUSEEVENTF_RIGHTUP;
|
|
}
|
|
else if (action == 7)
|
|
{
|
|
input.mi.dwFlags = MOUSEEVENTF_LEFTDOWN;
|
|
}
|
|
if (x != -1 || y != -1)
|
|
{
|
|
double width = GetSystemMetrics(SM_CXSCREEN)-1;
|
|
double height = GetSystemMetrics(SM_CYSCREEN)-1;
|
|
double dx = x*(65535.0f / width);
|
|
double dy = y*(65535.0f / height);
|
|
input.mi.dx = (LONG)dx;
|
|
input.mi.dy = (LONG)dy;
|
|
input.mi.dwFlags |= MOUSEEVENTF_ABSOLUTE | MOUSEEVENTF_MOVE;
|
|
}
|
|
SendInput(1, &input, sizeof(INPUT));
|
|
if (action == 1)
|
|
{
|
|
input.mi.dwFlags &= ~(MOUSEEVENTF_LEFTDOWN);
|
|
input.mi.dwFlags |= MOUSEEVENTF_LEFTUP;
|
|
SendInput(1, &input, sizeof(INPUT));
|
|
}
|
|
else if (action == 4)
|
|
{
|
|
input.mi.dwFlags &= ~(MOUSEEVENTF_RIGHTDOWN);
|
|
input.mi.dwFlags |= MOUSEEVENTF_RIGHTUP;
|
|
SendInput(1, &input, sizeof(INPUT));
|
|
}
|
|
else if (action == 7)
|
|
{
|
|
input.mi.dwFlags &= ~(MOUSEEVENTF_LEFTDOWN);
|
|
input.mi.dwFlags |= MOUSEEVENTF_LEFTUP;
|
|
SendInput(1, &input, sizeof(INPUT));
|
|
input.mi.dwFlags &= ~(MOUSEEVENTF_LEFTUP);
|
|
input.mi.dwFlags |= MOUSEEVENTF_LEFTDOWN;
|
|
SendInput(1, &input, sizeof(INPUT));
|
|
input.mi.dwFlags &= ~(MOUSEEVENTF_LEFTDOWN);
|
|
input.mi.dwFlags |= MOUSEEVENTF_LEFTUP;
|
|
SendInput(1, &input, sizeof(INPUT));
|
|
}
|
|
|
|
// Transmit the response
|
|
met_api->packet.transmit_response(result, remote, response);
|
|
return ERROR_SUCCESS;
|
|
}
|
|
|
|
|