Skip to content

Commit 1ab3e89

Browse files
committed
Modify ms_ndproxy to use railgun additions
1 parent f3ce1c1 commit 1ab3e89

File tree

1 file changed

+0
-38
lines changed

1 file changed

+0
-38
lines changed

modules/exploits/windows/local/ms_ndproxy.rb

Lines changed: 0 additions & 38 deletions
Original file line numberDiff line numberDiff line change
@@ -87,44 +87,6 @@ module has been tested successfully on Windows XP SP3 and Windows 2003 SP2. In o
8787
end
8888

8989
def add_railgun_functions
90-
session.railgun.add_function(
91-
'ntdll',
92-
'NtAllocateVirtualMemory',
93-
'DWORD',
94-
[
95-
["DWORD", "ProcessHandle", "in"],
96-
["PBLOB", "BaseAddress", "inout"],
97-
["PDWORD", "ZeroBits", "in"],
98-
["PBLOB", "RegionSize", "inout"],
99-
["DWORD", "AllocationType", "in"],
100-
["DWORD", "Protect", "in"]
101-
])
102-
103-
session.railgun.add_function(
104-
'ntdll',
105-
'NtDeviceIoControlFile',
106-
'DWORD',
107-
[
108-
[ "DWORD", "FileHandle", "in" ],
109-
[ "DWORD", "Event", "in" ],
110-
[ "DWORD", "ApcRoutine", "in" ],
111-
[ "DWORD", "ApcContext", "in" ],
112-
[ "PDWORD", "IoStatusBlock", "out" ],
113-
[ "DWORD", "IoControlCode", "in" ],
114-
[ "LPVOID", "InputBuffer", "in" ],
115-
[ "DWORD", "InputBufferLength", "in" ],
116-
[ "LPVOID", "OutputBuffer", "in" ],
117-
[ "DWORD", "OutPutBufferLength", "in" ]
118-
])
119-
120-
session.railgun.add_function(
121-
'ntdll',
122-
'NtQueryIntervalProfile',
123-
'DWORD',
124-
[
125-
[ "DWORD", "ProfileSource", "in" ],
126-
[ "PDWORD", "Interval", "out" ]
127-
])
12890
session.railgun.add_dll('psapi') unless session.railgun.dlls.keys.include?('psapi')
12991
session.railgun.add_function(
13092
'psapi',

0 commit comments

Comments
 (0)