infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Fix ecx count 

Fix jle -> jge


git-svn-id: file:///home/svn/incoming/trunk@3614 4d416f70-5f16-0410-b530-b9f4589650da
unstable
pusscat 2006-04-24 15:42:40 +00:00
parent bc9cc35f3e
commit 25b60466ad
1 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
lib/rex/encoder/nonalpha.rb
View File

@ -10,13 +10,14 @@ class NonAlpha
def NonAlpha.gen_decoder()
decoder =
"\x66\xB9\xFF\xFF" +
"\xEB\x19" + # Jmp to table
"\x5E" + # pop esi
"\x8B\xFE" + # mov edi, esi - Get table addr
"\x8B\xD6" + # mov edx, edi - Hold end of table ptr
"\x83\xC7" + "A" + # add edi, tablelen - Get shellcode addr
"\x3B\xFA" + # cmp edx, edi
"\x7E\x0B" + # jle to end
"\x8B\xD7" + # mov edx, edi - Hold end of table ptr
"\x3B\xF2" + # cmp esi, edx
"\x7D\x0B" + # jle to end
"\xB0\x7B" + # mov eax, 0x7B - Set up eax with magic
"\xF2\xAE" + # repne scasb - Find magic!
"\xFF\xCF" + # dec edi - scasb purs us one ahead