dguerri

/******************************************************************************************************
 DISCLAIMER: I am not responsible of any damage caused by running this script, use it at your own risk!
*******************************************************************************************************/

@import Darwin;
@import Foundation;
@import IOKit;

// clang -fmodules -o ddc-test ddc-test.m && ./ddc-test 50 0

dguerri

          // Read current external display brightness
          data[0] = 0x82;
          data[1] = 0x01;
          data[2] = BRIGHTNESS;

          err = IOAVServiceWriteI2C(avService, 0x37, 0x00, data, 3);
          if (err) {
            NSLog(@"Something went wrong: %s", mach_error_string(err));
            return 1;
          }

dguerri

<?php
/*
	Updated version, 2016-12-02: fixed shellcode so it *actually* works on QEMU
	usermode emulation (seems I pushed an old version), and removed debug output.
	
	-------------------------
	
	NB: THIS PoC ONLY WORKS IN QEMU USERMODE EMULATION!
	If anyone wants to fix this, go ahead (no pun intended).
	However, I don't have a vulnerable product and am unwilling to acquire one.