fix(payloads): removing hardcoded block-api hash from reverse_tcp_dns

dledda-r7 · dledda-r7 · commit 4468d3bc7999 · 2024-11-29T07:55:49.000-05:00
diff --git a/lib/msf/core/payload/windows/reverse_tcp_dns.rb b/lib/msf/core/payload/windows/reverse_tcp_dns.rb
@@ -142,7 +142,7 @@ def asm_reverse_tcp_dns(opts={})
     else
       asm << %Q^
       failure:
-        push 0x56A2B5F0         ; hardcoded to exitprocess for size
+        push #{Rex::Text.block_api_hash('kernel32.dll', 'ExitProcess')}
         call ebp
       ^
     end

Original file line number	Diff line number	Diff line change
`@@ -142,7 +142,7 @@ def asm_reverse_tcp_dns(opts={})`
`142`	`142`	`else`
`143`	`143`	`asm << %Q^`
`144`	`144`	`failure:`
`145`		`- push 0x56A2B5F0 ; hardcoded to exitprocess for size`
	`145`	`+ push #{Rex::Text.block_api_hash('kernel32.dll', 'ExitProcess')}`
`146`	`146`	`call ebp`
`147`	`147`	`^`
`148`	`148`	`end`