[framework] Encoder(?) problems.

H D Moore hdm at metasploit.com
Sun Jul 1 00:40:43 CDT 2007


Could be the heap routines are corrupting the payload and it just happens 
to skip it with the manual encoding (chunk flag, etc). Try sticking a 
known pattern of bytes in place of the payload and seeing whether these 
are becoming corrupted as well. Something like:

"\xcc" + ([*(0.255)].pack('C*') * 2)

(int3 + 0-255 repeated twice)

-HD

On Saturday 30 June 2007 23:57, Reth wrote:
> Any more ideas?



More information about the framework mailing list