metasploit-payloads 2.0.121 → 2.0.123

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1a6614467e1a26cd4dbac3750d752e528839c6a56a3a18bed88d191ca63cdd42
-  data.tar.gz: '08df1513740fa8b92d5b0e252baaf344ebfa6ac716355f2147ede9c6be3f8673'
+  metadata.gz: 6289f8b22e34bc1e8eab59e414fc72a547b7f27de9e7bbe4febf92dcfda7536c
+  data.tar.gz: 1a63550eb48291b0677ddd85e3762052fd2053e1d9123aedfab07f64fdc65fbb
 SHA512:
-  metadata.gz: 4e2082f50e012f804f0eccab9332fa0cca49685a5407eabcaa6601365512e2cdff8f9abc8a569fb29d959ad54168c10553ebf65970fc069dd4e6eb865bad7987
-  data.tar.gz: dd6c1d2ca5302fa7f714dba2896a7de31f7bb9244d99f70886541fc4d9155c1e7257eef3ebd965db41b0852dcb6cf79b7a156d33b7ad5dae1922b16e9b342bfc
+  metadata.gz: c48a56cf6335d8033ae752d0c8661973610831241e6c01661cca3cdfed825af0f5bca93633a384283ad3eabf016f29cde9cd0f636a034d028a59c2257272f4b5
+  data.tar.gz: 024b37c1632b2f9b1ecb9f79d08cb4f25ab9d9efc787c7ecf814d6633145cdc8aef79ab093bc639f41b12e146dae55f0256ebcb492c745bcbd8555e9d8bf54e1

data/data/meterpreter/ext_server_stdapi.py

@@ -1618,6 +1618,40 @@ def stdapi_sys_process_get_processes(request, response):
     else:
         return stdapi_sys_process_get_processes_via_ps(request, response)
 
+@register_function_if(has_windll)
+def stdapi_sys_process_memory_allocate(request, response):
+    handle = packet_get_tlv(request, TLV_TYPE_HANDLE).get('value', 0)
+    base   = packet_get_tlv(request, TLV_TYPE_BASE_ADDRESS).get('value', 0)
+    size   = packet_get_tlv(request, TLV_TYPE_LENGTH).get('value', 0)
+    alloc  = packet_get_tlv(request, TLV_TYPE_ALLOCATION_TYPE).get('value', 0)
+    prot   = packet_get_tlv(request, TLV_TYPE_PROTECTION).get('value', 0)
+
+    VirtualAllocEx = ctypes.windll.kernel32.VirtualAllocEx
+    VirtualAllocEx.argtypes = [ctypes.c_void_p, ctypes.c_void_p, ctypes.c_size_t, ctypes.c_ulong, ctypes.c_ulong]
+    VirtualAllocEx.restype = ctypes.c_void_p
+
+    result = VirtualAllocEx(handle, base, size, alloc, prot)
+    if not result:
+        return error_result_windows(), response
+
+    response += tlv_pack(TLV_TYPE_BASE_ADDRESS, result)
+    return ERROR_SUCCESS, response
+
+@register_function_if(has_windll)
+def stdapi_sys_process_memory_free(request, response):
+    handle = packet_get_tlv(request, TLV_TYPE_HANDLE).get('value', 0)
+    base   = packet_get_tlv(request, TLV_TYPE_BASE_ADDRESS).get('value', 0)
+    size   = packet_get_tlv(request, TLV_TYPE_LENGTH).get('value', 0)
+
+    VirtualFreeEx = ctypes.windll.kernel32.VirtualFreeEx
+    VirtualFreeEx.argtypes = [ctypes.c_void_p, ctypes.c_void_p, ctypes.c_size_t, ctypes.c_ulong]
+    VirtualFreeEx.restype = ctypes.c_long
+
+    MEM_RELEASE = 0x00008000
+    if not VirtualFreeEx(handle, base, size, MEM_RELEASE):
+        return error_result_windows(), response
+    return ERROR_SUCCESS, response
+
 @register_function_if(has_windll)
 def stdapi_sys_power_exitwindows(request, response):
     SE_SHUTDOWN_NAME = "SeShutdownPrivilege"

data/lib/metasploit-payloads/version.rb

@@ -1,6 +1,6 @@
 # -*- coding:binary -*-
 module MetasploitPayloads
-  VERSION = '2.0.121'
+  VERSION = '2.0.123'
 
   def self.version
     VERSION

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: metasploit-payloads
 version: !ruby/object:Gem::Version
-  version: 2.0.121
+  version: 2.0.123
 platform: ruby
 authors:
 - OJ Reeves
@@ -96,7 +96,7 @@ cert_chain:
   EknWpNgVhohbot1lfVAMmIhdtOVaRVcQQixWPwprDj/ydB8ryDMDosIMcw+fkoXU
   9GJsSaSRRYQ9UUkVL27b64okU8D48m8=
   -----END CERTIFICATE-----
-date: 2023-03-09 00:00:00.000000000 Z
+date: 2023-04-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake