[framework] Metasploit vs ANI

Nicolas RUFF nicolas.ruff at gmail.com
Mon Apr 2 16:45:18 CDT 2007


> I'm not in a place to test this, but can you try this patch out and see if it
> fixes the problem for you:
> -                       riff[trampoline_doffset + 1, 4] = [riff.length - trampoline_doffset - 4].pack('V')
> +                       riff[trampoline_doffset + 1, 4] = [riff.length - trampoline_doffset - 5].pack('V')


"Worked for me" (tm), with payload windows/meterpreter/reverse_tcp.

Thanks alot!

All I need now is a way to escape protected mode ;)

Regards,
- Nicolas RUFF



More information about the framework mailing list