github/metasploit-framework
1
Fork 0
mirror of https://github.com/rapid7/metasploit-framework synced 2024-09-04 20:18:27 +02:00
Code Releases Activity

Fixed an off-by-one error in fingerprinting string randomization

Browse Source
This commit is contained in:
asoto-r7 2019-01-04 16:30:17 -06:00
parent c63c225c9c
commit 0ca4dd829e
No known key found for this signature in database
GPG Key ID: F531810B7FE55396
2 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
data/ysoserial_payloads.json
View File

File diff suppressed because one or more lines are too long

3
lib/msf/util/java_deserialization.rb
View File

@ -53,7 +53,8 @@ class JavaDeserialization
end
# Replace "ysoserial\/Pwner" timestamp string with randomness for evasion
bytes.gsub!(/ysoserial\/Pwner00000000000000/, Rex::Text.rand_text_alphanumeric(29))
bytes.gsub!(/ysoserial\/Pwner000000000000000/, Rex::Text.rand_text_alphanumeric(30))
return bytes
else
raise RuntimeError, "Malformed JSON file"