dguerri

<?php
/*
	Updated version, 2016-12-02: fixed shellcode so it *actually* works on QEMU
	usermode emulation (seems I pushed an old version), and removed debug output.
	
	-------------------------
	
	NB: THIS PoC ONLY WORKS IN QEMU USERMODE EMULATION!
	If anyone wants to fix this, go ahead (no pun intended).
	However, I don't have a vulnerable product and am unwilling to acquire one.

dguerri

#!/bin/sh

set -ue

[ "$#" -lt 2 ] && { echo "Syntax: $0 <filename> <key>"; exit 1; } 

filename="$1"
key="$2"

# Compose the key by repeating the user input until we have 32 characters (64 hex digits) 

dguerri

#!/bin/bash
#
# VirSH Simple Backup (davide.guerri@gmail.com)
#
# Version 1.0.1 - 20130301 (1362127750)
#

VIRSH="/usr/bin/virsh"
QEMU_IMG="/usr/bin/qemu-img"
backup_dir="/backups"

dguerri

          // Read current external display brightness
          data[0] = 0x82;
          data[1] = 0x01;
          data[2] = BRIGHTNESS;

          err = IOAVServiceWriteI2C(avService, 0x37, 0x00, data, 3);
          if (err) {
            NSLog(@"Something went wrong: %s", mach_error_string(err));
            return 1;
          }

dguerri

/******************************************************************************************************
 DISCLAIMER: I am not responsible of any damage caused by running this script, use it at your own risk!
*******************************************************************************************************/

@import Darwin;
@import Foundation;
@import IOKit;

// clang -fmodules -o ddc-test ddc-test.m && ./ddc-test 50 0

dguerri

// clang -Wall -fmodules -framework Foundation i2c-rw.m -o ./i2c-rw && sudo ./i2c-rw 

@import Darwin;
@import Foundation;
@import IOKit;

typedef CFTypeRef IOAVServiceRef;
extern IOAVServiceRef IOAVServiceCreate(CFAllocatorRef allocator);
extern IOReturn IOAVServiceReadI2C(IOAVServiceRef service, uint32_t chipAddress,
                                   uint32_t offset, void *outputBuffer,

dguerri

#!/bin/bash
#
# This file is part of the UniCloud project
#
# Copyright (C) 2013 Unidata S.p.A. (Davide Guerri - d.guerri@rd.unidata.it)
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.

dguerri

#!/bin/bash
#
# Copy applications and their dependencies (e.g. for chroot envs)
#
#
# Copyright Davide Guerri <davide.guerri@gmail.com>
#
# Licensed to the Apache Software Foundation (ASF) under one
# or more contributor license agreements.  See the NOTICE file
# distributed with this work for additional information

dguerri

#!/bin/bash
#
# This file is part of fi-backup.
# 
# fi-backup is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
# 
# fi-backup is distributed in the hope that it will be useful,

dguerri

{
  "AWSTemplateFormatVersion": "2010-09-09",
  "Description": "AWS CloudFormation template for Unifi beta 3.",
  "Parameters": {
    "KeyName": {
      "Type": "String",
      "Description": "Name of an existing EC2 KeyPair to enable SSH access to the instances"
    },
    "InstanceType": {
      "Description": "WebServer EC2 instance type",