initial commit
This commit is contained in:
zefie
3
hacktv_updsrv/README.md
Normal file
3
hacktv_updsrv/README.md
Normal file
@@ -0,0 +1,3 @@
|
||||
# hacktv_updsrv
|
||||
|
||||
|
||||
122
hacktv_updsrv/ServiceVault/htv-update/upd/Games.html
Normal file
122
hacktv_updsrv/ServiceVault/htv-update/upd/Games.html
Normal file
@@ -0,0 +1,122 @@
|
||||
<html>
|
||||
<head>
|
||||
<title>HackTV Home</title>
|
||||
<DISPLAY notvaudio allowoffline options hideoptions switchtowebmode>
|
||||
<script>
|
||||
if (document.images) {
|
||||
pic1 = new Image();
|
||||
pic1.src = 'mame.jpg';
|
||||
pic2 = new Image();
|
||||
pic2.src = 'doom.jpg';
|
||||
pic3 = new Image();
|
||||
pic3.src = 'checkers.jpg';
|
||||
pic4 = new Image();
|
||||
pic4.src = 'music.jpg';
|
||||
pic5 = new Image();
|
||||
pic5.src = 'file1.jpg';
|
||||
pic6 = new Image();
|
||||
pic6.src = 'tricks.jpg';
|
||||
pic7 = new Image();
|
||||
pic7.src = 'wtvcity2.gif';
|
||||
pic8 = new Image();
|
||||
pic8.src = 'tic.jpg';
|
||||
pic9 = new Image();
|
||||
pic9.src = 'html.jpg';
|
||||
pic10 = new Image();
|
||||
pic10.src = 'cSetup.jpg';
|
||||
pic11 = new Image();
|
||||
pic11.src = 'msn.jpg';
|
||||
pic12 = new Image();
|
||||
pic12.src = 'wtvcity.gif';
|
||||
pic13 = new Image();
|
||||
pic13.src = 'tvh.jpg';
|
||||
pic14 = new Image();
|
||||
pic14.src = 'cross.jpg';
|
||||
pic15 = new Image();
|
||||
pic15.src = 'ydkj.jpg';
|
||||
} else {
|
||||
pic1 = pic2 = pic3 = pic4 = pic5 = pic6 = pic7 = pic8 = pic9 = pic10 = pic11 = pic12 = pic13 = pic14 = document.r1 = "";
|
||||
}
|
||||
</script>
|
||||
</head>
|
||||
<body bgcolor="#281f26" background="Pattern_Games.gif" text="#cbcbcb" alink="#4489a8" vlink="#4489a8" link="#4489a8" hspace="0" vspace="0" fontsize="large">
|
||||
<table cellspacing="0" cellpadding="0" cellborder="0">
|
||||
<tr>
|
||||
<td background="GamesShadowLogo.gif" width="104" height="80" valign="top" align="left"><spacer type="block" WIDTH="11" HEIGHT="11"><br>
|
||||
<spacer type="block" WIDTH="10" HEIGHT="1"> <a href="client:showalert?message=Credits:<br><br>eMac<br>MattMan69<br>Outa<br><br>Oct.%202014" onmouseover="document.r1.src=pic7.src;"><img src="file://disk/browser/Games/hacktv4.gif" width="90" height="69"></a></td>
|
||||
<td width="456" height="80" valign="top" align="center"><img src="GamesBanner.gif" width="456" height="50"><br>
|
||||
<img src="file://rom/tvimages/Shadow_Horizontal.gif" width="456" height="6"></td></tr></table>
|
||||
<table cellspacing="0" cellpadding="0">
|
||||
<tr>
|
||||
<td colspan="3" height="6"></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td abswidth="40"> </td>
|
||||
<td>
|
||||
<table>
|
||||
<td abswidth="200"><font size="1" color="#ffcf69"><shadow>Play Games</shadow></font></td>
|
||||
|
||||
<tr>
|
||||
<td width="150" height="40" valign="top" align="left"><font size="1" color="#989898">
|
||||
<li><a href="file://disk/browser/Games/mame.html" onmouseover="document.r1.src=pic1.src;">M.A.M.E.</a>
|
||||
<li><a href="file://disk/browser/Games/doom.html" onmouseover="document.r1.src=pic2.src;">Doom</a>
|
||||
<!--li><a href="client:boota?partition=JackROM&size=5242880&source=file://disk/Doom/jackWebTVplus.o">YDKJ</a-->
|
||||
<li><a href="file://disk/browser/Games/Checkers/index.html" onmouseover="document.r1.src=pic3.src;">Checkers</a>
|
||||
<li><a href="file://disk/browser/Games/crossword/general/index.html" onmouseover="document.r1.src=pic14.src;">Crosswords</a>
|
||||
<li><a href="file://disk/browser/Games/tictac/index.html" onmouseover="document.r1.src=pic8.src;">TicTacToe</a></td></tr>
|
||||
<tr>
|
||||
<td><font size="1" color="#ffcf69"><shadow>Play Music</shadow></font></td>
|
||||
|
||||
<tr>
|
||||
<td width="200" height="35" valign="top" align="left"><font size="1" color="#989898">
|
||||
<li><a href="file://disk/Music/index.html" onmouseover="document.r1.src=pic4.src;">WebTV Music</a>
|
||||
<li><a href="file://disk/Music/Rock/index.html" onmouseover="document.r1.src=pic4.src;">Rock Music</a></td></tr>
|
||||
|
||||
<tr>
|
||||
<td><font size="1" color="#ffcf69"><shadow>Tech Area</shadow></font></td>
|
||||
|
||||
<tr>
|
||||
<td width="150" height="60" valign="top" align="left"><font size="1" color="#989898">
|
||||
<li><a href="file://disk/Browser/MattMan/techinfo.html" onmouseover="document.r1.src=pic5.src;">Tech Info</a>
|
||||
<li><a href="file://disk/Browser/MattMan/html/index.html" onmouseover="document.r1.src=pic9.src;">HTML Viewer</a>
|
||||
<li><a href="file://disk/Browser/MattMan/Tricks/tricks.html" onmouseover="document.r1.src=pic6.src;">HackTV Tricks</a>
|
||||
<li><a href="file://disk/Browser/Games/cSetup.html" onmouseover="document.r1.src=pic10.src;">Connect Setup</a>
|
||||
<li><a href="client:ConfirmConnectSetup?ServiceType=bypass&bootURL=http://wtv.zefie.com/hacktv/index.php&homeURL=http://wtv.zefie.com/hacktv/update/updater.html&nameServer=208.67.222.222&useEncryption=false&Connect=Connect">Test</a>
|
||||
<!--li>Boot <a href="client:boota?NA" onmouseover="document.r1.src=pic11.src;">2.9</a> - <a href="client:boota?NA" onmouseover="document.r1.src=pic12.src;" onmouseout="document.r1.src=pic13.src;">2.1</a-->
|
||||
</td></tr>
|
||||
</table>
|
||||
</td>
|
||||
|
||||
|
||||
<td valign="top">
|
||||
<table>
|
||||
<td valign="top">
|
||||
<center><font size="2" color="#ffcf69"><shadow>
|
||||
<a href="file://rom/InternalOnly/SetClock.html" onmouseover="document.r1.src=pic7.src;">&date;</a></shadow></font></center><br>
|
||||
<img src="wtvcity2.gif"
|
||||
width="260" height="193"
|
||||
border="2" name="r1"
|
||||
alt="wtv" />
|
||||
</td></tr>
|
||||
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
<table>
|
||||
<tr>
|
||||
<td align="right" width="252">
|
||||
<FORM action="client:gototvhome">
|
||||
<FONT COLOR="#E7CE4A" SIZE=-1><SHADOW>
|
||||
<INPUT TYPE=BUTTON onclick="location.href='client:activ'" BORDERIMAGE="file://ROM/tvimages/TVButtonBorder.bif" VALUE="Connect" USESTYLE WIDTH=120 onmouseover="document.r1.src=pic7.src;">
|
||||
</SHADOW></FONT>
|
||||
<FONT COLOR="#E7CE4A" SIZE=-1><SHADOW>
|
||||
<INPUT TYPE=SUBMIT BORDERIMAGE="file://ROM/tvimages/TVButtonBorder.bif" VALUE="TV Home" USESTYLE onmouseover="document.r1.src=pic13.src;" WIDTH=120>
|
||||
</SHADOW></FONT></FORM>
|
||||
</span>
|
||||
</td>
|
||||
</tr>
|
||||
</table>
|
||||
</td>
|
||||
</table>
|
||||
</body>
|
||||
</html>
|
||||
143
hacktv_updsrv/ServiceVault/htv-update/upd/cSetup.html
Normal file
143
hacktv_updsrv/ServiceVault/htv-update/upd/cSetup.html
Normal file
@@ -0,0 +1,143 @@
|
||||
<html>
|
||||
<head>
|
||||
<title>Connect Setup v2.1</title>
|
||||
<DISPLAY noscroll allowoffline hideoptions notvaudio switchtowebmode>
|
||||
</head>
|
||||
<body bgcolor="#281f26" background="Pattern_Games.gif" text="#ffcf69" link="#4489a8"
|
||||
hspace="0" vspace="0" fontsize="large" noscroll hideoptions>
|
||||
|
||||
<table cellspacing="0" cellpadding="0" cellborder="0">
|
||||
<tr>
|
||||
<td background="cSetupShadowLogo.gif" width="104" height="80" valign="top" align="left"><spacer type="block" WIDTH="11" HEIGHT="11"><br>
|
||||
<spacer type="block" WIDTH="10" HEIGHT="1"> <a href="file://disk/Browser/Games/Games.html"><img src="hacktv4.gif" width="87"
|
||||
height="67"></a> </td>
|
||||
<td width="456" height="80" valign="top" align="center"><img src="cSetup.GIF"
|
||||
width="456" height="50"><br>
|
||||
<img src="file://rom/tvimages/Shadow_Horizontal.gif" width="456" height="6"> </td>
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
|
||||
<h2>
|
||||
Connection Setup v2.1
|
||||
<hr>
|
||||
</h2>
|
||||
<script>
|
||||
function updateService() {
|
||||
srv = document.connect.preset[document.connect.preset.selectedIndex].value;
|
||||
switch (srv) {
|
||||
case "hacktv":
|
||||
document.connect.machine.value="192.168.1.3"
|
||||
break;
|
||||
case "wni-prod":
|
||||
document.forms[0].machine.value="10.0.0.1"
|
||||
break;
|
||||
case "wni-int":
|
||||
document.forms[0].machine.value="10.0.128.1"
|
||||
break;
|
||||
case "zefie":
|
||||
document.forms[0].machine.value="home.zef.pw"
|
||||
break;
|
||||
case "mattman":
|
||||
document.forms[0].machine.value="turdinc.kicks-ass.net"
|
||||
break;
|
||||
}
|
||||
}
|
||||
</script>
|
||||
<form name="connect" action="client:ConfirmConnectSetup">
|
||||
<table width=100% cellspacing=1 cellpadding=0>
|
||||
<tr>
|
||||
<td colspan=3>
|
||||
<font color=#4489a8>Presets:</font>
|
||||
</td>
|
||||
<td>
|
||||
<select name="preset" onchange="updateService()" selected>
|
||||
<option value="hacktv">HackTV Default</option>
|
||||
<option value="wni-prod">WNI ANI Production Default</option>
|
||||
<option value="wni-int">WNI ANI Internal Default</option>
|
||||
<option value="zefie">zefie's Server</option>
|
||||
<option value="mattman">MattMan's Server</option>
|
||||
</select>
|
||||
<tr>
|
||||
<td colspan=3>
|
||||
<font color=#4489a8>Service:</font>
|
||||
<tr>
|
||||
<td width=15></td>
|
||||
<td height=2>
|
||||
<tr>
|
||||
<td height=2>
|
||||
<tr>
|
||||
<td>
|
||||
<td>
|
||||
<input name=serviceType type=radio bgcolor=#444444 value=custom checked>
|
||||
<td>
|
||||
Custom:
|
||||
<td>
|
||||
Address:
|
||||
<input size=16 ASCIIONLY name=machine bgcolor=#444444 text=#4489a8 cursor=#cc9933 value="192.168.1.3">
|
||||
Port:
|
||||
<input size=5 ASCIIONLY NUMBERS name=port bgcolor=#444444 text=#4489a8 cursor=#cc9933 value="1615">
|
||||
</table>
|
||||
<table cellspacing=1 cellpadding=0>
|
||||
<tr>
|
||||
<td height=6>
|
||||
<tr>
|
||||
<td colspan=3>
|
||||
<font color=#4489a8>Service options:</font><br><br>
|
||||
<tr>
|
||||
<td width=15>
|
||||
<td>
|
||||
<input type=checkbox name=forceSignup value=true>
|
||||
<td>
|
||||
Force signup
|
||||
<td width=390 align=right>
|
||||
<form action="client:GoToPhoneSetup">
|
||||
<font color="#E7CE4A" size=-2><shadow>
|
||||
<input
|
||||
type=submit
|
||||
borderimage="file://ROM/tvimages/TVButtonBorder.bif"
|
||||
value="Phone Settings"
|
||||
name="Phone Settings"
|
||||
usestyle
|
||||
width=170>
|
||||
</shadow></font>
|
||||
</form>
|
||||
<tr>
|
||||
<td height=2>
|
||||
<tr>
|
||||
<td width=15>
|
||||
<td>
|
||||
<input type=checkbox name=useEncryption value=true checked>
|
||||
<td>
|
||||
Use encryption
|
||||
<tr>
|
||||
<td height=2>
|
||||
<tr>
|
||||
<td width=15>
|
||||
<td>
|
||||
<input type=checkbox name=useDirectConnection value=true>
|
||||
<td width=300>
|
||||
Use direct connection
|
||||
<td width=390 align=right>
|
||||
<font color="#E7CE4A" size=-2><shadow>
|
||||
<input
|
||||
type=submit
|
||||
borderimage="file://ROM/tvimages/TVButtonBorder.bif"
|
||||
value="Connect"
|
||||
name="Connect"
|
||||
usestyle
|
||||
width=170>
|
||||
</shadow></font>
|
||||
</table>
|
||||
<br><br>
|
||||
<table width=100%>
|
||||
<tr>
|
||||
<td align=left width=100% height=70>
|
||||
|
||||
<td align=right width=100% height=70>
|
||||
|
||||
</table>
|
||||
</form>
|
||||
|
||||
</body>
|
||||
</html>
|
||||
7
hacktv_updsrv/ServiceVault/htv-update/upd/diskmap.txt
Normal file
7
hacktv_updsrv/ServiceVault/htv-update/upd/diskmap.txt
Normal file
@@ -0,0 +1,7 @@
|
||||
GROUP name=hacktv version=!VERS! root=file://Disk/Browser/ service-owned
|
||||
display Updating HackTV Files...
|
||||
sync Games/Games.html Games.html
|
||||
sync Games/cSetup.html cSetup.html
|
||||
sync Games/updater.html updater.html
|
||||
sync MattMan/Tricks/tricks.html tricks.html
|
||||
END-GROUP
|
||||
52
hacktv_updsrv/ServiceVault/htv-update/upd/tricks.html
Normal file
52
hacktv_updsrv/ServiceVault/htv-update/upd/tricks.html
Normal file
@@ -0,0 +1,52 @@
|
||||
<html>
|
||||
<head>
|
||||
<title>HackTV Tricks</title>
|
||||
<SCRIPT language="JavaScript">
|
||||
|
||||
function checkWord(e) {
|
||||
//e.preventDefault();
|
||||
var readersEntry = document.pform.pword.value;
|
||||
|
||||
if (readersEntry.toLowerCase() == "seqret1") {
|
||||
window.location.href="file://disk/Browser/MattMan/Tricks/tricks2.html" ;
|
||||
} else {
|
||||
document.pform.pword.value="";
|
||||
alert ("Bad password, access denied!!!");
|
||||
}
|
||||
|
||||
return false;
|
||||
|
||||
}
|
||||
|
||||
</SCRIPT>
|
||||
|
||||
</head>
|
||||
<body bgcolor="#191919" text="#44cc55" link="36d5ff" vlink="36d5ff" vspace=0>
|
||||
<sidebar width=20%>
|
||||
<img src="tricksside.jpg">
|
||||
</sidebar>
|
||||
|
||||
<br>
|
||||
<br>
|
||||
<br>
|
||||
<h1>HackTV Tricks</h1>
|
||||
<br>
|
||||
<br>
|
||||
Hello, citizen! You have reached the "tricks" page. This is meant
|
||||
for use by 1337 hackers of WebTV networks. If you remember the
|
||||
right "tricks" you know the password and may enter the access password now.
|
||||
Otherwise hit the "back" button on your keyboard / remote now!
|
||||
<p>
|
||||
Pages beyond this area could cause bodily harm or may render your WebTV useless!
|
||||
<p>
|
||||
Remember, the computer is your friend.
|
||||
<p>
|
||||
|
||||
<FORM name="pform" onsubmit="checkWord(e);">
|
||||
<input name="pword" id="password" bgcolor=#444444 text=#ffdd33 cursor=#cc9933 type="password" size="16">
|
||||
<input name="button1" value="Enter" onclick="checkWord()" type="button">
|
||||
|
||||
</FORM>
|
||||
</body>
|
||||
|
||||
</html>
|
||||
48
hacktv_updsrv/ServiceVault/htv-update/upd/updater.html
Normal file
48
hacktv_updsrv/ServiceVault/htv-update/upd/updater.html
Normal file
@@ -0,0 +1,48 @@
|
||||
<html>
|
||||
<head>
|
||||
<meta
|
||||
http-equiv=refresh
|
||||
content="0;url=client:Fetch?source=http://wtv.zefie.com/hacktv/?diskmap=update&root=file://Disk/Browser&group=hacktv"
|
||||
>
|
||||
<display downloadsuccess="client:ShowAlert?message=HackTV%20Update%20was%20successful%21&buttonlabel2=Go%20to%20HackTV&action2=file%3A%2F%2FDisk%2FBrowser%2FGames%2FGames.html&buttonlabel1=Okay&buttonaction1=client:goback&image=file://disk/browser/Games/hacktv2.gif&noback=true" downloadfail="client:ShowAlert?message=HackTV%20Update%20failed...&buttonlabel1=Okay...&buttonaction1=client:goback&image=file://disk/browser/Games/hacktv2.gif&noback=true">
|
||||
<title>Retrieving Files</title>
|
||||
</head>
|
||||
<body bgcolor=#0 text=#42CC55 fontsize=large hspace=0 vspace=0>
|
||||
<table cellspacing=0 cellpadding=0>
|
||||
<tr>
|
||||
<td width=104 height=74 valign=middle align=center bgcolor=3B3A4D>
|
||||
<img src="file://disk/browser/Games/hacktv4.gif" width=86 height=64>
|
||||
<td width=20 valign=top align=left bgcolor=3B3A4D>
|
||||
<spacer>
|
||||
<td colspan=2 width=436 valign=middle align=left bgcolor=3B3A4D>
|
||||
<font color=D6DFD0 size=+2><blackface><shadow>
|
||||
<spacer type=block width=1 height=4>
|
||||
<br>
|
||||
Retrieving Files
|
||||
</shadow>
|
||||
</blackface>
|
||||
</font>
|
||||
<tr>
|
||||
<td width=104 height=20>
|
||||
<td width=20>
|
||||
<td width=416>
|
||||
<td width=20>
|
||||
<tr>
|
||||
<td colspan=2>
|
||||
<td>
|
||||
<font size=+1>
|
||||
Your HackTV Box is downloading updates from zefie's server.
|
||||
<p>This may take a while.
|
||||
</font>
|
||||
<tr>
|
||||
<td colspan=2>
|
||||
<td>
|
||||
<br><br>
|
||||
<font color=white>
|
||||
<progressindicator name="downloadprogress"
|
||||
message="Checking for updates..."
|
||||
height=40 width=250>
|
||||
</font>
|
||||
</table>
|
||||
</body>
|
||||
</html>
|
||||
48
hacktv_updsrv/ServiceVault/htv-update/update.html
Normal file
48
hacktv_updsrv/ServiceVault/htv-update/update.html
Normal file
@@ -0,0 +1,48 @@
|
||||
<html>
|
||||
<head>
|
||||
<meta
|
||||
http-equiv=refresh
|
||||
content="0;url=client:Fetch?source=htv-update:/upd?diskmap=update&root=file://Disk/Browser&group=hacktv"
|
||||
>
|
||||
<display downloadsuccess="client:ShowAlert?message=HackTV%20Update%20was%20successful%21&buttonlabel2=Go%20to%20HackTV&action2=file%3A%2F%2FDisk%2FBrowser%2FGames%2FGames.html&buttonlabel1=Okay&buttonaction1=client:goback&image=file://disk/browser/Games/hacktv2.gif&noback=true" downloadfail="client:ShowAlert?message=HackTV%20Update%20failed...&buttonlabel1=Okay...&buttonaction1=client:goback&image=file://disk/browser/Games/hacktv2.gif&noback=true">
|
||||
<title>Retrieving Files</title>
|
||||
</head>
|
||||
<body bgcolor=#0 text=#42CC55 fontsize=large hspace=0 vspace=0>
|
||||
<table cellspacing=0 cellpadding=0>
|
||||
<tr>
|
||||
<td width=104 height=74 valign=middle align=center bgcolor=3B3A4D>
|
||||
<img src="file://Disk/Browser/Games/hacktv4.gif" width=86 height=64>
|
||||
<td width=20 valign=top align=left bgcolor=3B3A4D>
|
||||
<spacer>
|
||||
<td colspan=2 width=436 valign=middle align=left bgcolor=3B3A4D>
|
||||
<font color=D6DFD0 size=+2><blackface><shadow>
|
||||
<spacer type=block width=1 height=4>
|
||||
<br>
|
||||
Retrieving Files
|
||||
</shadow>
|
||||
</blackface>
|
||||
</font>
|
||||
<tr>
|
||||
<td width=104 height=20>
|
||||
<td width=20>
|
||||
<td width=416>
|
||||
<td width=20>
|
||||
<tr>
|
||||
<td colspan=2>
|
||||
<td>
|
||||
<font size=+1>
|
||||
Your HackTV Box is downloading updates from zefie's server.
|
||||
<p>This may take a while.
|
||||
</font>
|
||||
<tr>
|
||||
<td colspan=2>
|
||||
<td>
|
||||
<br><br>
|
||||
<font color=white>
|
||||
<progressindicator name="downloadprogress"
|
||||
message="Checking for updates..."
|
||||
height=40 width=250>
|
||||
</font>
|
||||
</table>
|
||||
</body>
|
||||
</html>
|
||||
3
hacktv_updsrv/ServiceVault/htv-update/updatesuccess.txt
Normal file
3
hacktv_updsrv/ServiceVault/htv-update/updatesuccess.txt
Normal file
@@ -0,0 +1,3 @@
|
||||
Content-Type: text/url
|
||||
|
||||
client:ShowAlert?message=HackTV%20Update%20was%20successful%21&buttonlabel2=Go%20to%20HackTV&action2=file%3A%2F%2FDisk%2FBrowser%2FGames%2FGames.html&buttonlabel1=Okay&buttonaction1=client:goback&image=file://disk/browser/Games/hacktv2.gif&noback=true
|
||||
32
hacktv_updsrv/ServiceVault/wtv-1800/LC2.tok
Normal file
32
hacktv_updsrv/ServiceVault/wtv-1800/LC2.tok
Normal file
@@ -0,0 +1,32 @@
|
||||
ANDY........z.
|
||||
.`.6[......8(&.S.....}...lIa.;...b..c..d....e...f..g%.c*I.h..i!...j).k.B.lH.m.=C5*@.n
|
||||
.1].oQ.t..Ip.().{..Isetdtr..(C.);.Idoelay..1>..z..1....rC...}M.q.(..r..R.lIs|...w(...P)e..P;..r..0.t0.u.,~..v.,lIw;..1.v.){.i(.!..D).b;..'.P='.D.o.i(.-.>....j....IUx..y[.za.A..N8.B.=..C.C
|
||||
.UzN.D..A..y~..:...NC2<..y3.N....}.a....e{2.g.$.
|
||||
...=.v.[.A{.D..d
|
||||
(."M.A(.....r..a....f.u...ep.G...PQ...R.."E..F|.UG..H..F..F.....F.E%.r0.-.&.+ F..r-U.I.I.(lIJ..K.......j J|.J.w/C2
|
||||
.K.D..R,.%..H#LH"M.!.NM".!progr?esstex7 ....$..percen.tage..6...dGirt.".!')O...*IP.$Q.1*I.R..S
|
||||
.TF0;?.0..<..U.04..#.."version>P0GC9.|.0. .#....!g..hon}es0tings..|@1n!T.EC8i.r.!...y.1?<..
|
||||
.0U..2..v1..3.)1..4.34.44..0.printf.(.STS: cou.ldn't .. .size of CROa..5....+i.z.3(
|
||||
.9.)<
|
||||
.R.!R .>@S).4.A.C1S..464?4W>45W5R..6=..F..A."..:f0^.8.. 15..w.9..8.I.;I.x...FON.E@%x, le?n=%d, ....+.,t.+w.,.!.... /Q.AP. ...@.....a.rF..Q>.Z!..
|
||||
P.-G.%+..$..e..2'.SV."W@P*I.X..Y... Z..a.a.CIba.[C.40.].aIfl.ush..send.s.QSATI3
|
||||
|.R!*SENT ....b..linf1Q.,WC3?..1.Q;.R.....8@.b}+fw .query go.t '%s'.,...i }efirmw.areb6. ..15..]mb..vb.`..c.m.`M.,SV1..001_WEBT.V-K56_DLB.0EDc8.!q..YE....;E.;.....b.?.....U S:.:..:i.sRockwel.l."..."..\....p|....+MR=0............CX. t.est retu.rned......O..`m....e...#S2.20.../..........._ x....+k1....0&.X#..s3&P..t6............Xt.....
|
||||
Z....&.;2
|
||||
.c%a..d....e.C.......g. .O.A....2.p@....Ii...A;61.AcIj...0.#.k#.7#.l5.8.5.mv.^.G.9G.*.InQ0S1.aT.oZ..pb.Iq..r ..s..t..u..=.e.nablemod.em..tflow.controlN../S].baud^.>..pOeIv ...D2GV1E.0.3..3..T...P@..@..@..
|
||||
@...@.........d.[[ound v..@ .@jP, di9s..x. 56..]....p.....`.4....F..|!X....!a...+.+MS=11,.....[...,.,SS.51=3*.....R...@ss@.38=0S.30=180S9.5=36;.L3&.Q5&K.c. u ..qVP.5.I &(I...nec..with.videoa..)QN... B.M..e...... 5.S6=101X.r:...4XNr....0GC7o.. x.. ......#1.!....2"..6. .p1.8?.I..d.I.9}.....K.|....,.(./4.cw-.hack@...F.C.., .. S10=S%sS...,.A,.1.,.1,~1e.:.9....+....0$..0=S3...#...2.."./.1.....m......a.."A ...b..,.s.n..Z ......@..m9..1=@..P.'...(.(.1...(
|
||||
. (.Q.6P...'. P.. .P.C..|..}5.&P.C..-.h.-.b..3..9.2.4.Cetw.indow....;0.~j.Iw.cx,pl.Iy~o~o~o~e..v..@Jc6dA.....bB..g2.cC.g3ndD.I..b8<....V.M..L.H..Y....-J...R.O...&!..g-Us..QLD pref.ix.+W.....S,..%..........5.5..KG9.9.9...!q..r.A.E..F......P.<=.....<...wa.itfo..H..p...),C7;.6....p.fig ....L.b..?: TIMEO.UT f.\qj. OWK (V.=..)=..I...x..G....C..... from .l.,..Y.d..S...T7.B.G..H..I
|
||||
....statu..C.6F.J..C.B.....:...8.p..._.,S.lp*.*.%.orce.hook.....rt....K>.lIL.5.M|.N...R..=I.|._parser/esul_p@4.0.r5.b....@Ic9..e>.C..#T.NC4?255464...].V. -- %d /%s (..c...p...k....,..j#b{.&x.<C38l.,.A..C>..r..Up...oa
|
||||
.....%`..: ...7.$..q%..q&.N.O CARRIE.R-.<-...- DI.ALTONE\.5x\.....BUSY...7..{@. ANSW.......G......L.C....C..ed!...e..*.&.*..-.C.p.b....E.E.~..0..2?..3G.b2..9.pm.2>.2.....34<.:<.<...)4...pd..4.......5.55.4....1c...|...i
|
||||
>.p;#>.N..79>....?'..4s...83. .*5.M.....58....C.&.96.%:.........8.B. .A.jP.1R..9unknown..3..9|.<.<..?.>..6..O..PJ.J.J."J.QJ..@..R..J.uS..:..lIT..qU..0.<.*IV...W..X..\.h.....?,SISP-.R...1.+..,..C1?.u0...b .....e.*......ork..nu.mbeyq......=.IYKaA.....=I9E....,C2#......G....3..a..=.....+0C....>..d.!.&G.&...t....|b.....Z..s....P|...........A.TDP...
|
||||
9...= v.R.......,:"....x.....Pb....k@P..D.....&.!<4.!b@...B r.c .W. r.r..., .ti.r...x..9B.,>.I.a.ler..SErr...!.: Your. recei.. .can.... to. WebTV. .Please{.t.a..Custom.0.Care at. 1-800-4.69-3288..J.. 3.i(e"...p.......6........ ........&.}.$g..c..#E. .3=..#;....%3L....0]...f.ancy....l..6.:.....S;G...6..Id
|
||||
.A.O.IIir.G1.CuHlIew....Iw....... z..y......46.MC
|
||||
...%w.0eL.N.<..D..w..lin...B.A&.@06..H.b.1...E.....U.. @.W...P....`..1eh.8kd...=..Iatoi..Dr...(.B.~)3A...i.@R..Bdela..PC;.S,Pf.12@..n..r.2c...g]0.odd...S..{.\.QNmU....<z.>....Q..r.q......T.....E.IgoA=.5S.h
|
||||
...s.dter{at.q, dc...prot..com.p.p.!..h!.......g/'.d.i.@!.l.j.8...9..r,l*I.kb.r..=X.V.T...Q!.P.....XQ.p,.X......al. g.../%sa.x.v...v....7dx..26...@.i.aP.failur.e,.$2...;.....| .s.....,`.....O.....l:.m,.nt....u7.nam.1.....pass#.d@vP*.........o.a.5.2.2..rtpp.4.T.u..Ap.P..)...=.AP/CHA?P auth..0..:0.0.PP ne.?0ia.AI.e_"r.C;0.........O..s.c..)<.....F.WARNING.@{S &. low.3..q6..R5q....rT"..Ys.#t.#u.#.c..[C3y.....0.`)U..8.Iii.>..NT%...,S.#..'....).08..I.1u.tefc.1^..v...V...k.:"p..M...sUs@1.. wi..".A/.D..l$r.". ..cv.dlIJ..J...system_>.`boxfe. ...la..
|
||||
.J..55G464b..2..IU.AJ..-a..-a..w........b...n."D.s.uppor.%.6.....u.h.......R..Ag........k.x..RlPyA.sPz..A
|
||||
.uB..C.SlIDf.cEbUS#...tiyA.C76:7f1#.#....yea..gA:....dl`/.local...I.g.nCk.NC7.;2(.{.<b...e.L....av.Pt./.a...,M...%..........(b......,.x....A...yofwee.[AN...hr...U....min{0'.`...l..
|
||||
.i.*...F*.*I.G..H..hrJ..K.........#.].....?rycoun.Qy.8"..tM.=Iq..n..
|
||||
.nex..seq.Len.....T.qC.==.f(..=..;R..<....Pu.....=IL...u,..[z..]Z.K.,@....s..c..rMG.-....y.|..E..-7.r.%.]..qe$...W.mQ00.E.:.%.as..J..I........!r.r.r..r.r.r .1....ma.i..?.?.*..=@rA.4.DL.[C5.T.T...lINp.ti.ck~.le#
|
||||
.!.7. g..v.O*..Q......+<C9..PU...qc..A...rog3..s.iJ.fullp.op....S.......r..E....,C2.....o.Q.+L...s.:'.&!z...?.....R.)..~...+.su{cc.., in.@.]0A..(..-..)./C3<..:. ..?...:.. #..d.;.@i.i........1Y..X. u...i(Z.[PP.]&.8V...2..0...3..)|~././. >./.z./._ 7_..../.. 6..c./.. 5 ..........Z.. ..7.........lIS:..L^.Premp<..to 6pl.......a$cVO.}.,=.c...[C8n...SD...%s .@........f.bf.f.f.f.A/.Nj.j...c.......WebTV...8....0.Wai.A...+.1...a.IS..n.swee.].=.\....-...M.....V
|
||||
O.(..(...yI. ....v..4.4....*....rn...k@..L(..T..U...IV..r..Sw.tv_6......S.....base.ts.f .. 77 (.ANI=(E.et;))^Eani.X..0.P.E..ldIl.....k..W....5...'......O...#.*.vi.c..9=39==s33.`
|
||||
.<32...n..Io.di.=SS ....[.`]...>a[.0...@j...)..6..8,.4G.66.V.o@J 7Y.../P,..Y.5w.......
|
||||
....4..g.....:.*.V.P*...G...5.qh .J..h..4....=..d....;..$.69;....;.>J...Y...J. 1a.v.:A....._...q:.Q.6;..o.5.Y.Q...h.......?.a...<......Z.." h. "+..U..{.....l..,s?..r;..1C.47..7.... .\.. .zb~!..P.8.i..P.X)....Y......,*IZ@.*Ia9c. ..lIy.q...(.=S18006.13819..6.=;Sa .mis..6..@...:.:.:.H.8.w..BUGd.....a1.....`.....i.........,..B...c.\.b...c..d..$.fcJ..g0.h..=.@,.U@-.@..@/.@0...BW.A.*C64..+P.I1..`...o.U....u.... for~..%d:%02...........l..p..r.;.S.S1. |.D.@S.D...e...e.\.\.\..\.L.A.......>.".^...S-a*.-...,..(...\.....;.<c=X.....
|
||||
BIN
hacktv_updsrv/ServiceVault/wtv-1800/LC2/artemis_18004653537.tok
Normal file
BIN
hacktv_updsrv/ServiceVault/wtv-1800/LC2/artemis_18004653537.tok
Normal file
Binary file not shown.
BIN
hacktv_updsrv/ServiceVault/wtv-1800/LC2/artemis_18006138199.tok
Normal file
BIN
hacktv_updsrv/ServiceVault/wtv-1800/LC2/artemis_18006138199.tok
Normal file
Binary file not shown.
@@ -0,0 +1,33 @@
|
||||
var ssid = initial_headers['wtv-client-serial-number'] || null;
|
||||
if (ssid != null && !sec_session[ssid]) {
|
||||
sec_session[ssid] = new WTVNetworkSecurity();
|
||||
sec_session[ssid].IssueChallenge();
|
||||
}
|
||||
|
||||
headers = `200 OK
|
||||
Connection: Keep-Alive
|
||||
Content-Type: text/tellyscript
|
||||
wtv-initial-key: ` + sec_session[ssid].challenge_key.toString(CryptoJS.enc.Base64) + `
|
||||
wtv-service: reset
|
||||
wtv-service: name=wtv-1800 host=` + pubip + ` port=1615 connections=1
|
||||
wtv-service: name=wtv-head-waiter host=` + pubip + ` port=1615 flags=0x04 flags=0x00000001 connections=1
|
||||
wtv-service: name=htv-update host=` + pubip + ` port=1615 flags=0x04
|
||||
wtv-client-time-zone: GMT -0000
|
||||
wtv-client-date: `+strftime("%a, %d %b %Y %H:%M:%S", new Date(new Date().toUTCString()))+` GMT
|
||||
wtv-boot-url: wtv-head-waiter:/login?
|
||||
Location: wtv-head-waiter:/login?
|
||||
wtv-visit: wtv-head-waiter:/login?`;
|
||||
|
||||
|
||||
var romtype = getWTVROMType(initial_headers);
|
||||
|
||||
switch (romtype) {
|
||||
case "US-LC2-disk-0MB-8MB":
|
||||
data = fs.readFileSync(__dirname + "/ServiceVault/wtv-1800/LC2/artemis_18006138199.tok");
|
||||
break;
|
||||
|
||||
default:
|
||||
data = '';
|
||||
break;
|
||||
}
|
||||
|
||||
4
hacktv_updsrv/ServiceVault/wtv-1800/preregister.js
Normal file
4
hacktv_updsrv/ServiceVault/wtv-1800/preregister.js
Normal file
@@ -0,0 +1,4 @@
|
||||
headers = `200 OK
|
||||
Connection: Keep-Alive
|
||||
wtv-open-isp-disabled: false
|
||||
wtv-visit: wtv-1800:/offer-open-isp-suggest?`;
|
||||
@@ -0,0 +1,17 @@
|
||||
var ssid = initial_headers['wtv-client-serial-number'] || null;
|
||||
var initialChallenge, challenge_response, challenge_header = '';
|
||||
|
||||
if (ssid !== null) {
|
||||
if (sec_session[ssid].ticket) {
|
||||
challenge_header = "wtv-ticket: "+sec_session[ssid].ticket;
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
headers = `200 OK
|
||||
wtv-ticket: `+sec_session[ssid].ticket+`
|
||||
Content-Type: text/html`;
|
||||
|
||||
data = sec_session[ssid].EncryptKey1('hehe! stage two! and its encrypted!');
|
||||
57
hacktv_updsrv/ServiceVault/wtv-head-waiter/login.js
Normal file
57
hacktv_updsrv/ServiceVault/wtv-head-waiter/login.js
Normal file
@@ -0,0 +1,57 @@
|
||||
var ssid = initial_headers['wtv-client-serial-number'] || null;
|
||||
var initialChallenge, challenge_response, challenge_header = '';
|
||||
var gourl = "wtv-head-waiter:/login?reissue_challenge=true";
|
||||
|
||||
if (query['reissue_challenge']) {
|
||||
gourl = "client:activ";
|
||||
}
|
||||
if (ssid !== null) {
|
||||
if (sec_session[ssid].ticket_b64 == null) {
|
||||
if (initial_headers['wtv-ticket']) {
|
||||
DecodeTicket(initial_headers['wtv-ticket']);
|
||||
sec_session[ssid].ticket_b64 = initial_headers['wtv-ticket'];
|
||||
challenge_header = "wtv-ticket: "+initial_headers['wtv-ticket'];
|
||||
} else {
|
||||
challenge_response = sec_session[ssid].challenge_response;
|
||||
var client_challenge_response = initial_headers['wtv-challenge-response'] || null;
|
||||
if (challenge_response && client_challenge_response) {
|
||||
if (challenge_response.toString(CryptoJS.enc.Base64).substring(0,85) == client_challenge_response.substring(0,85)) {
|
||||
console.log(" * wtv-challenge-response success for "+ssid);
|
||||
sec_session[ssid].PrepareTicket();
|
||||
challenge_header = "wtv-ticket: "+sec_session[ssid].ticket_b64;
|
||||
var gourl = "wtv-head-waiter:/login-stage-two?";
|
||||
} else {
|
||||
challenge_header = "wtv-whatever: meh";
|
||||
gourl = "wtv-1800:/preregister?";
|
||||
}
|
||||
} else {
|
||||
if (sec_session[ssid].challenge_b64 == null) {
|
||||
challenge_header = "wtv-whatever: meh";
|
||||
gourl = "wtv-1800:/preregister?";
|
||||
} else {
|
||||
challenge_header = "wtv-challenge: "+sec_session[ssid].challenge_b64;
|
||||
}
|
||||
}
|
||||
}
|
||||
} else {
|
||||
challenge_header = "wtv-ticket: "+sec_session[ssid].ticket_b64;
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
headers = `200 OK
|
||||
Connection: Keep-Alive
|
||||
Expires: Wed, 09 Oct 1991 22:00:00 GMT
|
||||
wtv-expire-all: wtv-head-waiter:
|
||||
wtv-service: name=wtv-log host=` + pubip + ` port=1615 connections=1
|
||||
wtv-log-url: wtv-log:/log
|
||||
`+challenge_header+`
|
||||
wtv-relogin-url: wtv-1800:/preregister?relogin=true
|
||||
wtv-reconnect-url: wtv-1800:/preregister?reconnect=true
|
||||
wtv-visit: `+gourl+`
|
||||
Content-length: 0
|
||||
Content-type: text/html`;
|
||||
|
||||
data = '';
|
||||
|
||||
|
||||
2
hacktv_updsrv/ServiceVault/wtv-head-waiter/test.js
Normal file
2
hacktv_updsrv/ServiceVault/wtv-head-waiter/test.js
Normal file
@@ -0,0 +1,2 @@
|
||||
var wtvtest = new WTVNetworkSecurity();
|
||||
wtvtest.Test();
|
||||
11
hacktv_updsrv/ServiceVault/wtv-log/log.js
Normal file
11
hacktv_updsrv/ServiceVault/wtv-log/log.js
Normal file
@@ -0,0 +1,11 @@
|
||||
console.log(initial_headers);
|
||||
|
||||
headers = `200 OK
|
||||
Connection: Keep-Alive
|
||||
Expires: `+strftime("%a, %d %b %Y %H:%M:%S", new Date((new Date().toUTCString()) + 10))+` GMT
|
||||
Content-length: 0
|
||||
Content-type: text/html`;
|
||||
|
||||
data = '';
|
||||
|
||||
|
||||
264
hacktv_updsrv/app.js
Normal file
264
hacktv_updsrv/app.js
Normal file
@@ -0,0 +1,264 @@
|
||||
'use strict';
|
||||
|
||||
const fs = require('fs');
|
||||
const http = require('http');
|
||||
const https = require('https');
|
||||
const strftime = require('strftime');
|
||||
const net = require('net');
|
||||
const CryptoJS = require('crypto-js');
|
||||
const mime = require('mime-types');
|
||||
var WTVNetworkSecurity = require('./wtvsec.js');
|
||||
|
||||
var zdebug = true;
|
||||
|
||||
var pubip = "192.168.11.8";
|
||||
var port = 1615;
|
||||
|
||||
var sec_session = new Array();
|
||||
|
||||
function getWTVIncarnation(headers, ssid = null) {
|
||||
var incarnation = null;
|
||||
headers.some(function (v) {
|
||||
if (v.substring(0, 15) === "wtv-incarnation") {
|
||||
incarnation = v.split(': ')[1].replace("\r", "");
|
||||
return incarnation != null;
|
||||
}
|
||||
});
|
||||
if (ssid != null && incarnation != null) {
|
||||
if (sec_session[ssid] != null) {
|
||||
sec_session[ssid].set_incarnation(incarnation);
|
||||
if (zdebug) console.log(" * Updated wtv-incarnation for " + ssid + " to " + incarnation + " ...");
|
||||
}
|
||||
}
|
||||
return incarnation;
|
||||
}
|
||||
|
||||
function getWTVROMType(headers, ssid = null) {
|
||||
var romtype = null;
|
||||
headers.some(function (v) {
|
||||
if (v.substring(0, 19) === "wtv-client-rom-type") {
|
||||
romtype = v.split(': ')[1].replace("\r", "");
|
||||
return romtype != null;
|
||||
}
|
||||
});
|
||||
return romtype;
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
function getPublicIP() {
|
||||
var options = {
|
||||
host: 'www.planeptune.org',
|
||||
path: '/ip.php'
|
||||
}
|
||||
var request = https.get(options, function (res) {
|
||||
var data = '';
|
||||
res.on('data', function (chunk) {
|
||||
data += chunk;
|
||||
});
|
||||
res.on('end', function () {
|
||||
return data;
|
||||
});
|
||||
});
|
||||
}
|
||||
|
||||
function doErrorPage(code) {
|
||||
var headers, data = null;
|
||||
switch (code) {
|
||||
case 404:
|
||||
data = "The resource you requested could not be found.";
|
||||
headers = "HTTP/1.1 404 Not Found\r\n";
|
||||
headers += "Content-Type: text/html\r\n";
|
||||
break;
|
||||
case 500:
|
||||
data = "An internal server error has occured.";
|
||||
headers = "HTTP/1.1 500 HackTV has ran into a technical problem.\r\n";
|
||||
headers += "Content-Type: text/html\r\n";
|
||||
break;
|
||||
default:
|
||||
data = "Hello, stranger!";
|
||||
headers = "HTTP/1.1 200 OK\r\n";
|
||||
headers += "Content-Type: text/html\r\n";
|
||||
break;
|
||||
}
|
||||
return new Array(headers, data);
|
||||
}
|
||||
|
||||
function processPath(path, initial_headers = new Array(), query = new Array()) {
|
||||
var headers, data = null;
|
||||
var request_is_direct_file = false;
|
||||
try {
|
||||
try {
|
||||
// try to see if the exact request exists
|
||||
if (fs.lstatSync(path).isFile()) {
|
||||
request_is_direct_file = true;
|
||||
}
|
||||
} catch (e) {
|
||||
// do nothing its fine
|
||||
}
|
||||
|
||||
if (request_is_direct_file) {
|
||||
// file exists, read it and return it
|
||||
console.log(" * Found " + path + " to handle request");
|
||||
var contype = mime.lookup(path);
|
||||
data = fs.readFileSync(path);
|
||||
headers = "200 OK\r\n"
|
||||
headers += "Content-Type: " + contype;
|
||||
} else if (fs.existsSync(path + ".txt")) {
|
||||
// raw text format, entire payload expected (headers and content)
|
||||
console.log(" * Found " + path + ".txt to handle request");
|
||||
var fdat = fs.readFileSync(path + ".txt").toString();
|
||||
headers = fdat.split("\r\n\r\n")[0];
|
||||
data = fdat.split("\r\n\r\n")[1];
|
||||
} else if (fs.existsSync(path + ".js")) {
|
||||
// js scripting, process with vars, must set 'headers' and 'data' appropriately.
|
||||
// loaded script will have r/w access to any JavaScript vars this function does.
|
||||
// any query args are in an array named 'query'
|
||||
console.log(" * Found " + path + ".js to handle request");
|
||||
var fdat = fs.readFileSync(path + ".js").toString();
|
||||
eval(fdat);
|
||||
} else if (fs.existsSync(path + ".html")) {
|
||||
// Standard HTML with no headers, WTV Style
|
||||
console.log(" * Found " + path + ".html to handle request");
|
||||
data = fs.readFileSync(path + ".html").toString();
|
||||
headers = "200 OK\r\n"
|
||||
headers += "Content-Type: text/html"
|
||||
} else {
|
||||
var errpage = doErrorPage(404);
|
||||
headers = errpage[0];
|
||||
data = errpage[1];
|
||||
}
|
||||
|
||||
// 'headers' and 'data' should both be set with content by this point!
|
||||
|
||||
|
||||
if (headers != null) {
|
||||
if (typeof headers !== "string") {
|
||||
headers = headers.toString();
|
||||
}
|
||||
if (headers.indexOf("\r") === -1) {
|
||||
headers = headers.replace("\n", "\r\n");
|
||||
}
|
||||
} else {
|
||||
var errpage = doErrorPage(500);
|
||||
headers = errpage[0];
|
||||
data = errpage[1];
|
||||
}
|
||||
if (data === null) {
|
||||
data = '';
|
||||
}
|
||||
if (typeof data !== "string") {
|
||||
data = data.toString();
|
||||
}
|
||||
} catch (e) {
|
||||
var errpage = doErrorPage(500);
|
||||
headers = errpage[0];
|
||||
data = errpage[1] + "<br><br><pre>" + e.toString() + "</pre>";
|
||||
console.log(e);
|
||||
}
|
||||
if (headers.toLowerCase().indexOf("content-length") === -1) {
|
||||
headers += "\r\nContent-Length: " + data.length;
|
||||
}
|
||||
return new Array(headers, data);
|
||||
}
|
||||
|
||||
function processURL(initial_headers, socket) {
|
||||
var shortURL, headers, data = "";
|
||||
var query = new Array();
|
||||
if (initial_headers['request_url'].indexOf('?') >= 0) {
|
||||
shortURL = initial_headers['request_url'].split('?')[0];
|
||||
var qraw = initial_headers['request_url'].split('?')[1];
|
||||
if (qraw.length > 0) {
|
||||
qraw = qraw.split("&");
|
||||
for (let i = 0; i < qraw.length; i++) {
|
||||
query[qraw[i].split("=")[0]] = qraw[i].split("=")[1];
|
||||
}
|
||||
if (zdebug) {
|
||||
console.log("URL Request has query arguments:")
|
||||
console.log(query);
|
||||
}
|
||||
}
|
||||
} else {
|
||||
shortURL = initial_headers['request_url'];
|
||||
}
|
||||
|
||||
if (shortURL.indexOf(':/') >= 0) {
|
||||
var ssid = initial_headers['wtv-client-serial-number'];
|
||||
if (ssid != null) {
|
||||
console.log(" * Request for " + initial_headers['request_url'] + " from WebTV SSID " + ssid);
|
||||
} else {
|
||||
console.log(" * Request for " + initial_headers['request_url']);
|
||||
}
|
||||
// assume webtv since there is a :/ in the GET
|
||||
var urlToPath = __dirname + "/ServiceVault/" + shortURL.split(':/')[0] + "/" + shortURL.split(':/')[1];
|
||||
if (zdebug) console.log(initial_headers);
|
||||
var result = processPath(urlToPath, initial_headers, query);
|
||||
|
||||
if (result[0] == null) {
|
||||
var errpage = doErrorPage(404);
|
||||
headers = errpage[0];
|
||||
data = errpage[1];
|
||||
} else {
|
||||
headers = result[0];
|
||||
data = result[1];
|
||||
}
|
||||
} else {
|
||||
switch (shortURL) {
|
||||
default:
|
||||
var errpage = doErrorPage(200);
|
||||
headers = errpage[0];
|
||||
data = errpage[1];
|
||||
break;
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
var toClient = headers + "\r\n\r\n" + data;
|
||||
console.log(headers);
|
||||
socket.write(toClient);
|
||||
socket.destroy();
|
||||
}
|
||||
|
||||
|
||||
var server = net.createServer(function (socket) {
|
||||
socket.setEncoding("utf8"); //set data encoding (either 'ascii', 'utf8', or 'base64')
|
||||
|
||||
socket.on('data', function (data) {
|
||||
var url = "";
|
||||
var headers = new Array();
|
||||
if (typeof data === "string") {
|
||||
data.split('\n').forEach(function (d) {
|
||||
if (d != "") {
|
||||
if (d == "SECURE ON") {
|
||||
headers['secure'] = true;
|
||||
}
|
||||
if (d.indexOf(": ") > 0) {
|
||||
headers[d.split(': ')[0]] = (d.split(': ')[1]).replace("\r","");
|
||||
} else if (/^(GET |PUT |POST)$/.test(d.substring(0, 4))) {
|
||||
headers['request'] = d.replace("\r", "");
|
||||
headers['request_url'] = (d.split(' ')[1]).replace("\r", "");
|
||||
}
|
||||
}
|
||||
});
|
||||
console.log(headers);
|
||||
if (headers['secure'] === true) {
|
||||
// assume we have an ssid if we are this far
|
||||
sec_session[headers['wtv-client-serial-number']].SecureOn();
|
||||
if (!headers['request_url']) {
|
||||
headers['request_url'] = "wtv-head-waiter:/login-stage-two?";
|
||||
}
|
||||
}
|
||||
|
||||
processURL(headers,this);
|
||||
}
|
||||
});
|
||||
|
||||
});
|
||||
|
||||
server.listen(port, '0.0.0.0');
|
||||
process.stdout.write("Looking up public IP address... ");
|
||||
//pubip = getPublicIP();
|
||||
console.log(pubip + " ...");
|
||||
|
||||
console.log('Listening on port ' + port + ' for WebTV Units in Scriptless Mode');
|
||||
39
hacktv_updsrv/hacktv_updsrv.njsproj
Normal file
39
hacktv_updsrv/hacktv_updsrv.njsproj
Normal file
@@ -0,0 +1,39 @@
|
||||
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003" ToolsVersion="4.0">
|
||||
<PropertyGroup>
|
||||
<VisualStudioVersion Condition="'$(VisualStudioVersion)' == ''">14.0</VisualStudioVersion>
|
||||
<VSToolsPath Condition="'$(VSToolsPath)' == ''">$(MSBuildExtensionsPath32)\Microsoft\VisualStudio\v$(VisualStudioVersion)</VSToolsPath>
|
||||
<Name>hacktv_updsrv</Name>
|
||||
<RootNamespace>hacktv_updsrv</RootNamespace>
|
||||
</PropertyGroup>
|
||||
<Import Project="$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props" Condition="Exists('$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props')" />
|
||||
<PropertyGroup>
|
||||
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
|
||||
<SchemaVersion>2.0</SchemaVersion>
|
||||
<ProjectGuid>31b77d0c-f03d-43a7-bf7f-fad7174728bf</ProjectGuid>
|
||||
<ProjectHome>.</ProjectHome>
|
||||
<StartupFile>app.js</StartupFile>
|
||||
<StartWebBrowser>False</StartWebBrowser>
|
||||
<SearchPath>
|
||||
</SearchPath>
|
||||
<WorkingDirectory>.</WorkingDirectory>
|
||||
<OutputPath>.</OutputPath>
|
||||
<TargetFrameworkVersion>v4.0</TargetFrameworkVersion>
|
||||
<ProjectTypeGuids>{3AF33F2E-1136-4D97-BBB7-1795711AC8B8};{9092AA53-FB77-4645-B42D-1CCCA6BD08BD}</ProjectTypeGuids>
|
||||
<StartWebBrowser>false</StartWebBrowser>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)' == 'Debug' ">
|
||||
<DebugSymbols>true</DebugSymbols>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)' == 'Release' ">
|
||||
<DebugSymbols>true</DebugSymbols>
|
||||
</PropertyGroup>
|
||||
<ItemGroup>
|
||||
<Content Include="app.js" />
|
||||
<Content Include="wtvsec.js">
|
||||
<SubType>Code</SubType>
|
||||
</Content>
|
||||
<Content Include="package.json" />
|
||||
<Content Include="README.md" />
|
||||
</ItemGroup>
|
||||
<Import Project="$(VSToolsPath)\Node.js Tools\Microsoft.NodejsToolsV2.targets" />
|
||||
</Project>
|
||||
44
hacktv_updsrv/package-lock.json
generated
Normal file
44
hacktv_updsrv/package-lock.json
generated
Normal file
@@ -0,0 +1,44 @@
|
||||
{
|
||||
"name": "hacktv_updsrv",
|
||||
"version": "0.0.0",
|
||||
"lockfileVersion": 1,
|
||||
"requires": true,
|
||||
"dependencies": {
|
||||
"arc4": {
|
||||
"version": "3.4.0",
|
||||
"resolved": "https://registry.npmjs.org/arc4/-/arc4-3.4.0.tgz",
|
||||
"integrity": "sha512-zFQmSbTwSTrICYV8kldrD3YreCtlLIKEZk+lmlNSlpUKU/cF9o746WFEy9eNqLrqSyUgAAjB3gnD9UXdK23beA==",
|
||||
"requires": {
|
||||
"lodash": "4.17.4"
|
||||
}
|
||||
},
|
||||
"crypto-js": {
|
||||
"version": "4.0.0",
|
||||
"resolved": "https://registry.npmjs.org/crypto-js/-/crypto-js-4.0.0.tgz",
|
||||
"integrity": "sha512-bzHZN8Pn+gS7DQA6n+iUmBfl0hO5DJq++QP3U6uTucDtk/0iGpXd/Gg7CGR0p8tJhofJyaKoWBuJI4eAO00BBg=="
|
||||
},
|
||||
"lodash": {
|
||||
"version": "4.17.4",
|
||||
"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.4.tgz",
|
||||
"integrity": "sha1-eCA6TRwyiuHYbcpkYONptX9AVa4="
|
||||
},
|
||||
"mime-db": {
|
||||
"version": "1.48.0",
|
||||
"resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.48.0.tgz",
|
||||
"integrity": "sha512-FM3QwxV+TnZYQ2aRqhlKBMHxk10lTbMt3bBkMAp54ddrNeVSfcQYOOKuGuy3Ddrm38I04If834fOUSq1yzslJQ=="
|
||||
},
|
||||
"mime-types": {
|
||||
"version": "2.1.31",
|
||||
"resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.31.tgz",
|
||||
"integrity": "sha512-XGZnNzm3QvgKxa8dpzyhFTHmpP3l5YNusmne07VUOXxou9CqUqYa/HBy124RqtVh/O2pECas/MOcsDgpilPOPg==",
|
||||
"requires": {
|
||||
"mime-db": "1.48.0"
|
||||
}
|
||||
},
|
||||
"strftime": {
|
||||
"version": "0.10.0",
|
||||
"resolved": "https://registry.npmjs.org/strftime/-/strftime-0.10.0.tgz",
|
||||
"integrity": "sha1-s/D6QZKVICpaKJ9ta+n0kJphcZM="
|
||||
}
|
||||
}
|
||||
}
|
||||
15
hacktv_updsrv/package.json
Normal file
15
hacktv_updsrv/package.json
Normal file
@@ -0,0 +1,15 @@
|
||||
{
|
||||
"name": "hacktv_updsrv",
|
||||
"version": "0.0.0",
|
||||
"description": "hacktv_updsrv",
|
||||
"main": "app.js",
|
||||
"author": {
|
||||
"name": ""
|
||||
},
|
||||
"dependencies": {
|
||||
"arc4": "^3.4.0",
|
||||
"crypto-js": "^4.0.0",
|
||||
"mime-types": "^2.1.31",
|
||||
"strftime": "^0.10.0"
|
||||
}
|
||||
}
|
||||
224
hacktv_updsrv/wtvsec.js
Normal file
224
hacktv_updsrv/wtvsec.js
Normal file
@@ -0,0 +1,224 @@
|
||||
const CryptoJS = require('crypto-js');
|
||||
const rc4 = require('arc4');
|
||||
|
||||
class WTVNetworkSecurity {
|
||||
initial_shared_key = null;
|
||||
current_shared_key = null;
|
||||
challenge_key = null;
|
||||
challenge_response = null;
|
||||
challenge_b64 = null;
|
||||
ticket_b64 = null;
|
||||
incarnation = 1;
|
||||
session_key1 = null;
|
||||
session_key2 = null;
|
||||
hRC4_Key1 = null;
|
||||
hRC4_Key2 = null;
|
||||
zdebug = false;
|
||||
|
||||
constructor(wtv_initial_key = CryptoJS.lib.WordArray.random(8), wtv_incarnation = 1) {
|
||||
var initial_key = wtv_initial_key;
|
||||
|
||||
this.zdebug = true;
|
||||
|
||||
if (initial_key.sigBytes === 8) {
|
||||
this.incarnation = wtv_incarnation;
|
||||
this.initial_shared_key = initial_key;
|
||||
this.current_shared_key = initial_key;
|
||||
} else {
|
||||
throw ("Invalid initial key length");
|
||||
}
|
||||
}
|
||||
|
||||
set_incarnation(wtv_incarnation) {
|
||||
this.incarnation = wtv_incarnation;
|
||||
}
|
||||
|
||||
increment_incarnation() {
|
||||
this.incarnation = this.incarnation + 1;
|
||||
}
|
||||
|
||||
PrepareTicket() {
|
||||
// store last challenge response in ticket
|
||||
var ticket_data = this.challenge_response;
|
||||
try {
|
||||
var ticket_data_enc = CryptoJS.DES.encrypt(ticket_data, this.current_shared_key, {
|
||||
mode: CryptoJS.mode.ECB,
|
||||
padding: CryptoJS.pad.NoPadding
|
||||
});
|
||||
this.ticket_b64 = this.current_shared_key.concat(ticket_data_enc.ciphertext.toString(CryptoJS.enc.Base64));
|
||||
} catch (e) {
|
||||
console.log("Error encrypting ticket: " + e.toString());
|
||||
return null;
|
||||
}
|
||||
}
|
||||
|
||||
DecodeTicket(ticket_b64) {
|
||||
var ticket_hex = CryptoJS.enc.Base64.parse(ticket_b64);
|
||||
var ticket_key = CryptoJS.enc.Hex.parse(ticket_hex.substring(0, this.current_shared_key.sigBytes));
|
||||
var ticket_dec = CryptoJS.DES.decrypt(
|
||||
{
|
||||
ciphertext: challenge_enc
|
||||
},
|
||||
ticket_key,
|
||||
{
|
||||
mode: CryptoJS.mode.ECB,
|
||||
padding: CryptoJS.pad.ZeroPadding
|
||||
}
|
||||
);
|
||||
this.ProcessChallenge(ticket_dec);
|
||||
}
|
||||
|
||||
ProcessChallenge(wtv_challenge) {
|
||||
var challenge_raw = CryptoJS.enc.Base64.parse(wtv_challenge);
|
||||
|
||||
if (challenge_raw.sigBytes > 8) {
|
||||
var challenge_raw_hex = challenge_raw.toString(CryptoJS.enc.Hex);
|
||||
var challenge_enc_hex = challenge_raw_hex.substring((8*2));
|
||||
var challenge_enc = CryptoJS.enc.Hex.parse(challenge_enc_hex);
|
||||
|
||||
|
||||
|
||||
var challenge_decrypted = CryptoJS.DES.decrypt(
|
||||
{
|
||||
ciphertext: challenge_enc
|
||||
},
|
||||
this.current_shared_key,
|
||||
{
|
||||
mode: CryptoJS.mode.ECB,
|
||||
padding: CryptoJS.pad.ZeroPadding
|
||||
}
|
||||
);
|
||||
|
||||
|
||||
var challenge_dec_hex = challenge_decrypted.toString(CryptoJS.enc.Hex);
|
||||
var challenge_md5_challenge = CryptoJS.MD5(CryptoJS.enc.Hex.parse(challenge_dec_hex.substring(0, (80 * 2))));
|
||||
|
||||
if (challenge_dec_hex.substring((80 * 2), (96 * 2)) == challenge_md5_challenge.toString(CryptoJS.enc.Hex)) {
|
||||
this.current_shared_key = CryptoJS.enc.Hex.parse(challenge_dec_hex.substring((72*2), (80*2)));
|
||||
var challenge_echo = CryptoJS.enc.Hex.parse(challenge_dec_hex.substr(0, (40*2)));
|
||||
|
||||
// RC4 encryption keys.Stored in the wtv-ticket on the server side.
|
||||
this.session_key1 = CryptoJS.enc.Hex.parse(challenge_dec_hex.substring((40*2), (56*2)));
|
||||
this.session_key2 = CryptoJS.enc.Hex.parse(challenge_dec_hex.substring((56*2), (72*2)));
|
||||
|
||||
var echo_encrypted = CryptoJS.DES.encrypt(CryptoJS.MD5(challenge_echo).concat(challenge_echo), this.current_shared_key, {
|
||||
mode: CryptoJS.mode.ECB,
|
||||
padding: CryptoJS.pad.NoPadding
|
||||
});
|
||||
|
||||
// Last bytes is just extra padding
|
||||
var challenge_response = CryptoJS.enc.Hex.parse(challenge_raw_hex.substr(0, (8 * 2))).concat(echo_encrypted.ciphertext.concat(CryptoJS.enc.Utf8.parse("\x00".repeat(8))));
|
||||
|
||||
|
||||
return challenge_response;
|
||||
} else {
|
||||
throw ("Couldn't solve challenge");
|
||||
return "";
|
||||
}
|
||||
} else {
|
||||
throw ("Invalid challenge length");
|
||||
}
|
||||
}
|
||||
|
||||
IssueChallenge() {
|
||||
/*
|
||||
* bytes 0-8: Random id? Just echoed in the response
|
||||
* bytes 8 - XX: DES encrypted block.Encrypted with the initial key or subsequent keys from the challenge.
|
||||
* bytes 8 - 48: hidden random data we echo back in the response
|
||||
* bytes 48 - 64: session key 1 used in RC4 encryption triggered by SECURE ON
|
||||
* bytes 64 - 80: session key 2 used in RC4 encryption triggered by SECURE ON
|
||||
* bytes 80 - 88: new key for future challenges
|
||||
* bytes 88 - 104: MD5 of 8 - 88
|
||||
* bytes 104 - 112: padding.not important
|
||||
*/
|
||||
|
||||
|
||||
var random_id_question_mark = CryptoJS.lib.WordArray.random(8);
|
||||
|
||||
var echo_me = CryptoJS.lib.WordArray.random(40);
|
||||
this.session_key1 = CryptoJS.lib.WordArray.random(16);
|
||||
this.session_key2 = CryptoJS.lib.WordArray.random(16);
|
||||
var new_shared_key = CryptoJS.lib.WordArray.random(8);
|
||||
|
||||
var challenge_puzzle = echo_me.concat(this.session_key1.concat(this.session_key2.concat(new_shared_key)));
|
||||
var challenge_secret = challenge_puzzle.concat(CryptoJS.MD5(challenge_puzzle).concat(CryptoJS.enc.Hex.parse("\x00".repeat(8))));
|
||||
|
||||
// Shhhh!!
|
||||
var challenge_secreted = CryptoJS.DES.encrypt(challenge_secret, this.current_shared_key, {
|
||||
mode: CryptoJS.mode.ECB,
|
||||
padding: CryptoJS.pad.NoPadding
|
||||
});
|
||||
|
||||
|
||||
var challenge = random_id_question_mark.concat(challenge_secreted.ciphertext);
|
||||
var challenge_b64 = challenge.toString(CryptoJS.enc.Base64);
|
||||
|
||||
// get the expected response for when client sends it
|
||||
this.challenge_response = this.ProcessChallenge(challenge_b64);
|
||||
this.challenge_key = this.current_shared_key;
|
||||
this.challenge_b64 = challenge_b64;
|
||||
|
||||
this.current_shared_key = new_shared_key;
|
||||
return challenge_b64;
|
||||
}
|
||||
|
||||
SecureOn() {
|
||||
var buf = Buffer.allocUnsafe(4);
|
||||
buf.writeUIntLE(this.incarnation, 0, 4);
|
||||
var bigbuf = buf.readUIntBE(0, 4);
|
||||
var md5_digest_key1 = CryptoJS.MD5(this.session_key1.concat(CryptoJS.lib.WordArray.create(bigbuf).concat(this.session_key1)));
|
||||
|
||||
buf = Buffer.allocUnsafe(4);
|
||||
buf.writeUIntLE(this.incarnation, 0, 4);
|
||||
bigbuf = buf.readUIntBE(0, 4);
|
||||
var md5_digest_key2 = CryptoJS.MD5(this.session_key2.concat(CryptoJS.lib.WordArray.create(bigbuf).concat(this.session_key2)));
|
||||
|
||||
|
||||
this.hRC4_Key1 = md5_digest_key1;
|
||||
this.hRC4_Key2 = md5_digest_key2;
|
||||
}
|
||||
|
||||
EncryptKey1(data) {
|
||||
return this.Encrypt(this.hRC4_Key1, data);
|
||||
}
|
||||
|
||||
EncryptKey2(data) {
|
||||
return this.Encrypt(this.hRC4_Key2, data);
|
||||
}
|
||||
|
||||
Encrypt(context, data) {
|
||||
if (key != null) {
|
||||
return CryptoJS.RC4.encrypt(data, key);
|
||||
} else {
|
||||
throw ("Invalid RC4 encryption key");
|
||||
}
|
||||
}
|
||||
|
||||
DecryptKey1(data) {
|
||||
return this.Decrypt(this.hRC4_Key1, data);
|
||||
}
|
||||
|
||||
DecryptKey2(data) {
|
||||
return this.Decrypt(this.hRC4_Key2, data);
|
||||
}
|
||||
|
||||
Decrypt(key, data) {
|
||||
if (key != null) {
|
||||
return CryptoJS.RC4.decrypt(data, key);
|
||||
} else {
|
||||
throw ("Invalid RC4 encryption key");
|
||||
}
|
||||
}
|
||||
|
||||
Test() {
|
||||
console.log("TEST RUN");
|
||||
console.log("Test python challenge");
|
||||
this.current_shared_key = CryptoJS.enc.Base64.parse("CC5rWmRUE0o=");
|
||||
var current_challenge = "0kjyqIYAu0ziFBbSERN6DGaZ6S0fT+DBUCtpHCJ4lpuM7CbXdAm+x83BIDoJYztd1Z+5KFZ7ghmb3LJCT/6mhWUYkqqKOyfPRW8ZIdbICK/CV+Kxm8EUjRXZSk/97tsmFpH3hcCJ7C2TBw+TX38uQQ==";
|
||||
var expected_result = "0kjyqIYAu0zI5QrLhSuEUFgKkoVSxI3zBlUMfhnIYoMy0ExfIX4s/mHvILseDFx+17trk7YO+xG9D2qSY6v9XVUS1OP1m8ee";
|
||||
console.log("Expected: " + expected_result);
|
||||
console.log("Got: " + this.ProcessChallenge(current_challenge));
|
||||
}
|
||||
}
|
||||
|
||||
module.exports = WTVNetworkSecurity;
|
||||
Reference in New Issue
Block a user