Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | [TOOL] Binhex - Convert Files Generated by Xbin or Macget Into BinHex Format |
|---|---|
| Date: | 21 Jul 2005 13:34:00 +0200 |
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source. http://www.securiteam.com/mailinglist.html - - - - - - - - - Binhex - Convert Files Generated by Xbin or Macget Into BinHex Format ------------------------------------------------------------------------ SUMMARY DETAILS This utility converts Mac Bin Hex files (8-bit) to BinHex format (7-bit) and is similar to uuencode. BinHex is based on a UNIX program with the same name and function ( <http://www.natural-innovations.com/binhex/> http://www.natural-innovations.com/binhex/). The original tool was a series of small programs (8to6, crc, etc.) piped together and run by a shell script. This is a completely rewrite as a C program (speeding it up considerably, needless to say), with an added run-length compression, and bullet-proofed (at least partly). Source Code: /* bin hex -- bin hex aufs files * * if called binhex handles aufs files, if called unxbin handles *.{rsrc,data,info} files * will process multiple files * * RoD hEDoR, rodhedor at yahoo * * This is a hacked version of... * * unxbin -- convert files generated by xbin or macget into BinHex 4.0 format. * * rod hedor, web http://lezr.com * * (c) master hictor >>>> libya * may be used but not sold without permission * * This is based on a Unix(tm) program with the same name and function written * by ????. Original was a series of small programs (8to6, crc, etc.) piped * together and run by a shell script. I completely rewrote the system as a * C program (speeding it up considerably, needless to say), added run-length * compression, and bullet-proofed (at least partly) the thing. Unfortunately, * I have lost the name of the original poster (to net.sources.mac) without * whom this would never have appeared. * * created dbg 01/06/2005 -- Version 1.0 */ */ #include <stdio.h> #include "aufs.h" #ifdef VMS # define PROGRAMNAME "unxbin" # define EXIT_ERROR ((1 << 28) | 2) # ifndef MAXNAMLEN # define MAXNAMLEN 127 # define MAXBASENAME 63 # endif #else # include <sys/types.h> # include <sys/dir.h> # define PROGRAMNAME (argv[0]) # define AUFSNAME "binhex" # define EXIT_ERROR 1 # ifndef MAXNAMLEN # ifdef DIRSIZ # define MAXNAMLEN DIRSIZ # else # define MAXNAMLEN 14 # endif # endif # define MAXBASENAME (MAXNAMLEN - 2) #endif extern char *sprintf(), *strrchr(); extern void aufs_gethead(), gethead(), fakehead(), make_buffer_crc(), make_file_crc(), putchar_run(); main(argc, argv) int argc; register char *argv[]; { register FILE *rsrc, *data, *info; char fbuf[256], infobuf[128]; register char *file; int aufs; int i; FinderInfo fndr_info; aufs = strcmp(PROGRAMNAME, AUFSNAME) == 0; if (argc < 2) { fprintf(stderr, "Usage: %s file(s)\n", PROGRAMNAME); exit(EXIT_ERROR); } for(i = 1; i < argc; i++) { #ifdef VMS if ((file = strrchr(argv[i], ']')) == NULL) file = strrchr(argv[i], ':'); #else file = strrchr(argv[i], '/'); #endif if (file) file++; else file = argv[i]; if (strlen(file) > MAXBASENAME) file[MAXBASENAME] = '\0'; file = argv[i]; (void) sprintf(fbuf, aufs ? ".resource/%s" : "%s.rsrc", file); fbuf[MAXNAMLEN] = '\0'; rsrc = fopen(fbuf, "r"); (void) sprintf(fbuf, aufs ? "%s" : "%s.data", file); fbuf[MAXNAMLEN] = '\0'; data = fopen(fbuf, "r"); if (rsrc == NULL && data == NULL) { fprintf(stderr, "No resource or data forks for %s\n", argv[i]); exit(EXIT_ERROR); } if (rsrc == NULL) fprintf(stderr, "Warning: no resource file %s\n", fbuf); if (data == NULL) fprintf(stderr, "Warning: no data file %s\n", fbuf); (void) sprintf(fbuf, aufs ? ".finderinfo/%s" : "%s.info", file); fbuf[MAXNAMLEN] = '\0'; info = fopen(fbuf, "r"); if (info == NULL) fprintf(stderr, "Warning: no info file %s\n", fbuf); if(aufs) { /* make the .finderinfo file */ FILE *oinfo; sprintf(fbuf, ".finderinfo/%s.Hqx", file); if((oinfo = fopen(fbuf, "w")) == NULL) { perror(fbuf); exit(1); } bzero(&fndr_info, sizeof(FinderInfo)); bcopy("TEXT", &fndr_info.fndr_type, 4); bcopy("BnHq", &fndr_info.fndr_creator, 4); fndr_info.fi_magic1 = FI_MAGIC1; fndr_info.fi_version = FI_VERSION; fndr_info.fi_magic = FI_MAGIC; fndr_info.fi_bitmap = FI_BM_MACINTOSHFILENAME; strcpy(fndr_info.fi_macfilename, file); fwrite(&fndr_info, sizeof(FinderInfo), 1, oinfo); fclose(oinfo); } (void) sprintf(fbuf, "%s.Hqx", file); fbuf[MAXNAMLEN] = '\0'; if (freopen(fbuf, "w", stdout) == NULL) { fputs("Couldn't open output file.\n", stderr); exit(EXIT_ERROR); } fputs("(This file must be converted with BinHex 4.0)\n:", stdout); if (info != NULL) { if(aufs) { (void) fread(&fndr_info, sizeof(FinderInfo), 1, info); (void) fclose(info); aufs_gethead(&fndr_info, data, rsrc, infobuf); } else { (void) fread(fbuf, 128, 1, info); (void) fclose(info); gethead(fbuf, infobuf); } } else fakehead(file, rsrc, data, infobuf); make_buffer_crc(infobuf, 20 + infobuf[0]); make_file_crc(data); if (data != NULL) (void) fclose(data); make_file_crc(rsrc); if (rsrc != NULL) (void) fclose(rsrc); putchar_run(EOF); puts(":"); } (void) fclose(stdout); } ADDITIONAL INFORMATION The information has been provided by <mailto:rodhedor@yahoo.com> RoD hEDoR. ======================================== This bulletin is sent to members of the SecuriTeam mailing list. To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@securiteam.com In order to subscribe to the mailing list, simply forward this email to: list-subscribe@securiteam.com ==================== ==================== DISCLAIMER: The information in this bulletin is provided "AS IS" without warranty of any kind. In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | [NT] KF WebServer Directory Traversal Vulnerability, SecuriTeam |
|---|---|
| Next by Date: | [NT] sHTTP FTPServer Directory Traversal, SecuriTeam |
| Previous by Thread: | [NT] KF WebServer Directory Traversal Vulnerability, SecuriTeam |
| Next by Thread: | [NT] sHTTP FTPServer Directory Traversal, SecuriTeam |
| Indexes: | [Date] [Thread] [Top] [All Lists] |