Gilbert Röhrbein payload

How to capture WebGL/Canvas by piping data over a websocket.

This Gist builds on https://gist.github.com/unconed/4370822 from @unconed.

Instead of the original method which writes to the browsers sandboxed filesystem here we use a websocket connection provided by websocketd to pipe image data to a short python script that writes out the .png files to disk.

	import AVFoundation
	import Cocoa

	var greeting = "Hello, playground"

	var camera_type = AVCaptureDevice.DeviceType.builtInWideAngleCamera
	var unknown_type = AVCaptureDevice.DeviceType.externalUnknown

	var discovery = AVCaptureDevice.DiscoverySession(
	deviceTypes: [camera_type, unknown_type],

	use bevy::prelude::*;

	fn main() {
	App::new()
	.add_plugins(DefaultPlugins)
	.add_startup_system(setup)
	.add_system(update)
	.run();
	}

	extends Area2D

	func _ready():
	connect("area_shape_entered", self, "area_shape_entered")

	func area_shape_entered(area_id: int, area: Area2D, area_shape: int, self_shape: int):
	var trans = Physics2DServer.area_get_shape_transform(area.get_rid(), area_shape)
	var tilemap = area.get_node("Items") as TileMap
	var offset = 2 * tilemap.cell_size if tilemap.centered_textures else Vector2.ZERO
	var orig = trans.xform(offset)

	extends Camera

	export var speed = 5
	export var max_speed = 20
	export var wheel_speed = 5
	export var fov_speed = 20
	export var size_factor = 0.1
	export var rotate_speed_x = 0.01
	export var rotate_speed_y = 0.01

	#![feature(if_let)]

	#[phase(plugin,link)]
	extern crate syntax;
	#[phase(plugin, link)]
	extern crate rustc;

	use syntax::ast::{Expr, ExprMatch, PatWild, PatWildSingle, ExprTup};
	use rustc::lint::{Context, LintPass, LintArray};
	use syntax::codemap::NO_EXPANSION;

	Array.from(document.querySelectorAll(".aui-avatar [alt]")).map(
	e => e.parentElement.parentElement.appendChild(
	(() => { const p = document.createElement('p'); p.innerHTML = e.alt; return p })()
	)
	)

	#!/usr/bin/env python
	# -- coding: utf-8 --

	from libavg import avg, app, player


	class RemoteTestDiv(app.MainDiv):
	def onInit(self):
	self.canvas1 = player.createCanvas(id="1", size=(400,300))
	self.canvas2 = player.createCanvas(id="2", size=(400,300))

	<!DOCTYPE html>
	<html>
	<head>
	<meta charset="utf-8" />
	<title>Meine erste Videoapplikation</title>
	<script src="https://code.jquery.com/jquery-1.10.1.min.js"></script>
	<script src="https://raw.github.com/Wolfy87/EventEmitter/master/EventEmitter.min.js"></script>
	<script src="https://raw.github.com/palavatv/palava-client/master/palava.min.js"></script>
	<script type="text/coffeescript">

	#!/bin/sh
	perl -ne'/END:/ && $i--; print "\t" x $i . "$_\n"; /BEGIN:/ && $i++;'

Gilbert Röhrbein payload

How to capture WebGL/Canvas by piping data over a websocket.

Install websocketd