dguerri

<?php
/*
	Updated version, 2016-12-02: fixed shellcode so it *actually* works on QEMU
	usermode emulation (seems I pushed an old version), and removed debug output.
	
	-------------------------
	
	NB: THIS PoC ONLY WORKS IN QEMU USERMODE EMULATION!
	If anyone wants to fix this, go ahead (no pun intended).
	However, I don't have a vulnerable product and am unwilling to acquire one.

dguerri

          // Read current external display brightness
          data[0] = 0x82;
          data[1] = 0x01;
          data[2] = BRIGHTNESS;

          err = IOAVServiceWriteI2C(avService, 0x37, 0x00, data, 3);
          if (err) {
            NSLog(@"Something went wrong: %s", mach_error_string(err));
            return 1;
          }

dguerri

/******************************************************************************************************
 DISCLAIMER: I am not responsible of any damage caused by running this script, use it at your own risk!
*******************************************************************************************************/

@import Darwin;
@import Foundation;
@import IOKit;

// clang -fmodules -o ddc-test ddc-test.m && ./ddc-test 50 0

dguerri

// clang -Wall -fmodules -framework Foundation i2c-rw.m -o ./i2c-rw && sudo ./i2c-rw 

@import Darwin;
@import Foundation;
@import IOKit;

typedef CFTypeRef IOAVServiceRef;
extern IOAVServiceRef IOAVServiceCreate(CFAllocatorRef allocator);
extern IOReturn IOAVServiceReadI2C(IOAVServiceRef service, uint32_t chipAddress,
                                   uint32_t offset, void *outputBuffer,

dguerri

#!/bin/sh

set -ue

[ "$#" -lt 2 ] && { echo "Syntax: $0 <filename> <key>"; exit 1; } 

filename="$1"
key="$2"

# Compose the key by repeating the user input until we have 32 characters (64 hex digits) 

dguerri

#!/bin/bash
#
# Copy applications and their dependencies (e.g. for chroot envs)
#
#
# Copyright Davide Guerri <davide.guerri@gmail.com>
#
# Licensed to the Apache Software Foundation (ASF) under one
# or more contributor license agreements.  See the NOTICE file
# distributed with this work for additional information

dguerri

Forward incremental Backup

Initial configuration. "Current image" pointer is an abstraction for the image currently used by qemu to run a given domain.

  Current image
        |
        v
+-----------------+

| disk.qcow2 |

dguerri

#!/usr/bin/python

# (c) 2013, Cove Schneider
# (c) 2014, Joshua Conner <joshua.conner@gmail.com>
# (c) 2014, Pavel Antonov <antonov@adwz.ru>
# (c) 2015, Davide Guerri <davide.guerri@gmail.com>
#
# This file is part of Ansible,
#
# Ansible is free software: you can redistribute it and/or modify

dguerri

Keybase proof

I hereby claim:

• I am dguerri on github.
• I am dguerri (https://keybase.io/dguerri) on keybase.
• I have a public key whose fingerprint is 7F4E A5B5 E85D 6EBA 9818 80DC 82F4 194D 4E56 C921

To claim this, I am signing this object:

dguerri

#!/bin/bash
#
# VirSH Simple Backup (davide.guerri@gmail.com)
#
# Version 1.0.1 - 20130301 (1362127750)
#

VIRSH="/usr/bin/virsh"
QEMU_IMG="/usr/bin/qemu-img"
backup_dir="/backups"