mirrors/pafish
1
0
Fork 0
mirror of https://github.com/a0rtega/pafish synced 2024-11-24 23:29:39 +03:00
Code Issues Packages Projects Releases Wiki Activity

rtt.c rename global variables and move them up, indentation fixes

Browse Source
This commit is contained in:
Alberto Ortega 2021-11-07 18:13:55 +01:00
parent 04191954f6
commit febe5028d0
1 changed files with 82 additions and 83 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

165
pafish/rtt.c
View File

@ -15,6 +15,16 @@
/* Duration of each check */ /* Duration of each check */
#define MAX_DURATION 3000 #define MAX_DURATION 3000
/* Some RTT global variables */
HHOOK rtt_hook;
BOOL rtt_is_success = FALSE;
BOOL rtt_is_timeout = FALSE;
BOOL rtt_is_within_rect = FALSE;
/* Tracks the point in time of last click */
u_int64 rtt_last = 0;
/* Default double click time in milliseconds */
u_int rtt_double_click_time = 500;
/* /*
* Checks, for the presence of a mouse device. * Checks, for the presence of a mouse device.
* *
@ -114,20 +124,17 @@ VOID CALLBACK timer_proc() {
PostMessageA(NULL, WM_CUSTOM, 0, 0); PostMessageA(NULL, WM_CUSTOM, 0, 0);
} }
HHOOK hook;
BOOL is_success = FALSE;
/* /*
* Callback for a low-level mouse hook, which checks, if a single click occurs. * Callback for a low-level mouse hook, which checks, if a single click occurs.
*/ */
LRESULT CALLBACK single_click_proc(int nCode, WPARAM wParam, LPARAM lp) { LRESULT CALLBACK single_click_proc(int nCode, WPARAM wParam, LPARAM lp) {
if (nCode >= 0) { if (nCode >= 0) {
if (wParam == WM_LBUTTONUP) { if (wParam == WM_LBUTTONUP) {
is_success = TRUE; rtt_is_success = TRUE;
PostMessageA(NULL, WM_CUSTOM, 0 , 0); PostMessageA(NULL, WM_CUSTOM, 0 , 0);
} }
} }
return CallNextHookEx(hook, nCode, wParam, lp); return CallNextHookEx(rtt_hook, nCode, wParam, lp);
} }
/* /*
@ -155,30 +162,23 @@ u_int64 get_current_time_in_millis(){
return ms; return ms;
} }
/* Tracks the point in time of last click */
u_int64 last = 0;
/* Default double click time in milliseconds */
u_int double_click_time = 500;
/* /*
* Callback for a low-level mouse hook, which checks, if a double click occurs. * Callback for a low-level mouse hook, which checks, if a double click occurs.
* The presence of a double click is assumed if two clicks are observed within * The presence of a double click is assumed if two clicks are observed within
* the time frame double_click_time. * the time frame rtt_double_click_time.
*/ */
LRESULT CALLBACK double_click_proc(int code, WPARAM wp, LPARAM lp) { LRESULT CALLBACK double_click_proc(int code, WPARAM wp, LPARAM lp) {
if (code >= 0) { if (code >= 0) {
if (wp == WM_LBUTTONDOWN) { if (wp == WM_LBUTTONDOWN) {
u_int64 now = get_current_time_in_millis();
u_int64 now = get_current_time_in_millis(); if((now - rtt_last) < rtt_double_click_time){
if((now - last) < double_click_time){ rtt_is_success = TRUE;
is_success = TRUE; PostMessageA(NULL, WM_CUSTOM, 0 , 0);
PostMessageA(NULL, WM_CUSTOM, 0 , 0); }
} rtt_last = now;
last = now;
} }
} }
return CallNextHookEx(hook, code, wp, lp); return CallNextHookEx(rtt_hook, code, wp, lp);
} }
/* /*
@ -186,7 +186,7 @@ LRESULT CALLBACK double_click_proc(int code, WPARAM wp, LPARAM lp) {
*/ */
int install_hook(LRESULT CALLBACK (*callback)(int code, WPARAM wp, LPARAM lp)){ int install_hook(LRESULT CALLBACK (*callback)(int code, WPARAM wp, LPARAM lp)){
SetTimer(NULL, 0, MAX_DURATION, (TIMERPROC) &timer_proc); SetTimer(NULL, 0, MAX_DURATION, (TIMERPROC) &timer_proc);
hook = SetWindowsHookEx(WH_MOUSE_LL, callback, NULL, 0); rtt_hook = SetWindowsHookEx(WH_MOUSE_LL, callback, NULL, 0);
MSG msg; MSG msg;
while (GetMessage(&msg, NULL, 0, 0) > 0) { while (GetMessage(&msg, NULL, 0, 0) > 0) {
@ -201,19 +201,20 @@ int install_hook(LRESULT CALLBACK (*callback)(int code, WPARAM wp, LPARAM lp)){
/* Clean up */ /* Clean up */
KillTimer(NULL, 0); KillTimer(NULL, 0);
UnhookWindowsHookEx(hook); UnhookWindowsHookEx(rtt_hook);
if (is_success) if (rtt_is_success)
return FALSE; return FALSE;
return TRUE; return TRUE;
} }
/* /*
* Checks for a single click with a technique used in the UpClicker trojan. * Checks for a single click with a technique used in the UpClicker trojan.
* See https://webcache.googleusercontent.com/search?q=cache:NeVZ4J1Y-cQJ:https://www.fireeye.com/blog/threat-research/2012/12/dont-click-the-left-mouse-button-trojan-upclicker.html+&cd=1&hl=en&ct=clnk&gl=de * See https://webcache.googleusercontent.com/search?q=cache:NeVZ4J1Y-cQJ:https://www.fireeye.com/blog/threat-research/2012/12/dont-click-the-left-mouse-button-trojan-upclicker.html+&cd=1&hl=en&ct=clnk&gl=de
*/ */
int rtt_mouse_click() { int rtt_mouse_click() {
return install_hook(&single_click_proc); return install_hook(&single_click_proc);
} }
/* /*
@ -230,81 +231,79 @@ int rtt_mouse_click() {
*/ */
int rtt_mouse_double_click() { int rtt_mouse_double_click() {
/* Determines double click time set on system */ /* Determines double click time set on system */
double_click_time = GetDoubleClickTime(); rtt_double_click_time = GetDoubleClickTime();
/* Checks, if a double click occurs */ /* Checks, if a double click occurs */
return install_hook(&double_click_proc); return install_hook(&double_click_proc);
} }
BOOL is_timeout = FALSE;
BOOL is_within_rect = FALSE;
LRESULT CALLBACK timed_dialog_proc(HWND hwnd, UINT msg, WPARAM wp, LPARAM lp) { LRESULT CALLBACK timed_dialog_proc(HWND hwnd, UINT msg, WPARAM wp, LPARAM lp) {
RECT rect; RECT rect;
int btn_w, btn_h; int btn_w, btn_h;
switch (msg) { switch (msg) {
case WM_CREATE: case WM_CREATE:
SetTimer(hwnd, 1, MAX_DURATION, NULL); SetTimer(hwnd, 1, MAX_DURATION, NULL);
/* Determines "usable" size inside of the current window */ /* Determines "usable" size inside of the current window */
GetClientRect(hwnd, &rect); GetClientRect(hwnd, &rect);
/* Calculates button size */ /* Calculates button size */
btn_w = (rect.right - rect.left) / 2; btn_w = (rect.right - rect.left) / 2;
btn_h = (rect.bottom - rect.top) / 2; btn_h = (rect.bottom - rect.top) / 2;
/* Create two buttons - randomly chosen and "Quit" */ /* Create two buttons - randomly chosen and "Quit" */
CreateWindowW(L"Button", L"OK", WS_VISIBLE | WS_CHILD, 0, TEXT_OFF, CreateWindowW(L"Button", L"OK", WS_VISIBLE | WS_CHILD, 0, TEXT_OFF,
btn_w, btn_h, hwnd, (HMENU) ID_OK, NULL, NULL); btn_w, btn_h, hwnd, (HMENU) ID_OK, NULL, NULL);
CreateWindowW(L"Button", L"Quit", WS_VISIBLE | WS_CHILD, 0 + btn_w, CreateWindowW(L"Button", L"Quit", WS_VISIBLE | WS_CHILD, 0 + btn_w,
TEXT_OFF, btn_w, btn_h, hwnd, (HMENU) ID_QUIT, NULL, NULL); TEXT_OFF, btn_w, btn_h, hwnd, (HMENU) ID_QUIT, NULL, NULL);
/* Ensure dialog is displayed at the very top */ /* Ensure dialog is displayed at the very top */
/* SetWindowPos(hwnd, HWND_TOP, 0, 0, 0, 0, SWP_NOMOVE | SWP_NOSIZE | */ /* SetWindowPos(hwnd, HWND_TOP, 0, 0, 0, 0, SWP_NOMOVE | SWP_NOSIZE | */
/* SWP_SHOWWINDOW); */ /* SWP_SHOWWINDOW); */
break; break;
case WM_TIMER: case WM_TIMER:
is_timeout = TRUE; rtt_is_timeout = TRUE;
DestroyWindow(hwnd);
break;
case WM_COMMAND:
{
/*
* Plausibility check, whether cursor is still within rect.
* Buttons are not focusable, therefore pressing return is not in this case possible
*/
POINT p;
GetCursorPos(&p);
GetWindowRect(hwnd, &rect);
if (p.x >= rect.left && p.x <= rect.right && p.y >= rect.top
&& p.y <= rect.bottom)
is_within_rect = TRUE;
}
/* Destroys and recreates a new window on "Ok" */
if (LOWORD(wp) == ID_OK) {
MessageBeep(MB_OK);
DestroyWindow(hwnd); DestroyWindow(hwnd);
} break;
/* Sets stop condition, if "Quit" was clicked */ case WM_COMMAND:
if (LOWORD(wp) == ID_QUIT) {
DestroyWindow(hwnd);
}
break;
case WM_DESTROY: {
PostQuitMessage(0); /*
break; * Plausibility check, whether cursor is still within rect.
* Buttons are not focusable, therefore pressing return is not in this case possible
*/
POINT p;
GetCursorPos(&p);
GetWindowRect(hwnd, &rect);
if (p.x >= rect.left && p.x <= rect.right && p.y >= rect.top
&& p.y <= rect.bottom)
rtt_is_within_rect = TRUE;
}
/* Destroys and recreates a new window on "Ok" */
if (LOWORD(wp) == ID_OK) {
MessageBeep(MB_OK);
DestroyWindow(hwnd);
}
/* Sets stop condition, if "Quit" was clicked */
if (LOWORD(wp) == ID_QUIT) {
DestroyWindow(hwnd);
}
break;
case WM_DESTROY:
PostQuitMessage(0);
break;
} }
return DefWindowProcW(hwnd, msg, wp, lp); return DefWindowProcW(hwnd, msg, wp, lp);
} }
/* /*
* Displays a dialog and waits for interaction * Displays a dialog and waits for interaction
*/ */
@ -331,8 +330,8 @@ int confirm_dialog(BOOL is_plausibility_check) {
mh = GetSystemMetrics(SM_CYMIN) * 3; mh = GetSystemMetrics(SM_CYMIN) * 3;
/* Randomize window position */ /* Randomize window position */
rx = ((double) rand() / RAND_MAX) * (mx - (4 * mw)) + mw; rx = ((double) rand() / RAND_MAX) * (mx - (4 * mw)) + mw;
ry = ((double) rand() / RAND_MAX) * (my - (4 * mh)) + mh; ry = ((double) rand() / RAND_MAX) * (my - (4 * mh)) + mh;
RegisterClassW(&wc); RegisterClassW(&wc);
CreateWindowW(wc.lpszClassName, L"RTT window", CreateWindowW(wc.lpszClassName, L"RTT window",
@ -344,9 +343,9 @@ int confirm_dialog(BOOL is_plausibility_check) {
DispatchMessage(&msg); DispatchMessage(&msg);
} }
if (!is_timeout) { if (!rtt_is_timeout) {
if (is_plausibility_check) if (is_plausibility_check)
return !is_within_rect; return !rtt_is_within_rect;
else else
return FALSE; return FALSE;
} }