Skip to content

Commit 0634cb9

Browse files
committed
Need to avoid badchar 0x00
0x00 becomes double null, which functions like a terminator
1 parent 5668064 commit 0634cb9

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

lib/msf/core/exploit/http/server.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -798,7 +798,7 @@ def js_base64
798798
# publication on "DEPS – Precise Heap Spray on Firefox and IE10".
799799
#
800800
# The "sprayHeap" JavaScript function supports the following arguments:
801-
# shellcode => The shellcode to spray in JavaScript.
801+
# shellcode => The shellcode to spray in JavaScript. Note: Avoid null bytes.
802802
# objId => Optional. The ID for a <div> HTML tag.
803803
# offset => Optional. Number of bytes to align the shellcode, default: 0x104
804804
# heapBlockSize => Optional. Allocation size, default: 0x80000

0 commit comments

Comments
 (0)