CoCalc Logo Icon
StoreFeaturesDocsShareSupportNewsAboutSign UpSign In
rapid7

Real-time collaboration for Jupyter Notebooks, Linux Terminals, LaTeX, VS Code, R IDE, and more,
all in one place.

GitHub Repository: rapid7/metasploit-framework
Path: blob/master/lib/rex/payloads/win32/common.rb
Views: 11655
1
# -*- coding: binary -*-
2
module Rex
3
module Payloads
4
module Win32
5
6
module Common
7
8
#
9
# Returns a stub that resolves the location of a symbol and then
10
# calls it. Refer to the following link for more details:
11
#
12
# http://uninformed.org/index.cgi?v=3&a=4&p=10
13
#
14
def self.resolve_call_sym
15
"\x60\x31\xc9\x8b\x7d\x3c\x8b\x7c\x3d\x78\x01\xef\x8b" +
16
"\x57\x20\x01\xea\x8b\x34\x8a\x01\xee\x31\xc0\x99\xac" +
17
"\xc1\xca\x0d\x01\xc2\x84\xc0\x75\xf6\x41\x66\x39\xda" +
18
"\x75\xe3\x49\x8b\x5f\x24\x01\xeb\x66\x8b\x0c\x4b\x8b" +
19
"\x5f\x1c\x01\xeb\x8b\x04\x8b\x01\xe8\x89\x44\x24\x1c" +
20
"\x61\xff\xe0"
21
end
22
23
end
24
25
end
26
end
27
end
28
29