metasploit-payloads 2.0.127 → 2.0.129

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b3a0c97c6a54da93616fb2c82cd7e96e3589eb674f116c3afbc5faf1144b9881
-  data.tar.gz: 3148ce360fe822dc5f531111b0ebcfdc56534ac1ac9066ce3c84a96987cfe6dc
+  metadata.gz: 45911f3ad4fdb2f430ec1b049442bdc250af6f3410cf40696cf48fe11f7122f7
+  data.tar.gz: 77e0acc0528363f57a5e4ce3f2e3ffa5c652d4e5d09997aee4e512baa4da6a3a
 SHA512:
-  metadata.gz: 29be4dadf5ab91ec8a08f9216a316361e8e17b05bf3c43c60ceac4f583aa7f54e59572a4dda9c86046db82d5884017446d630b71d585f9d5ce631a816717acce
-  data.tar.gz: bc96839b2426047a5d750ba99678de6a186e4d94a595a4787d614c11cbbab7889156787e9a683ff540d92043d9f4827330ccaee634e3b391bc5115f69a10fe75
+  metadata.gz: 81eb682d3bdc73ea2ec275db1d13baabec5550d2ad219b6233e17f7d3433196e626b5f28b9fa22984a5074120e6e6cd74464e9aaed6b471c7b8d59806e493e5f
+  data.tar.gz: 2dd606d30284b72393f1147142ac40f307a3258dd6f54bfb22f5744d67738d6122985cf25595b7e529ce132f9f3d9d8a7268a9a9acf9ef491c754c6fb2825015

checksums.yaml.gz.sig

@@ -1,3 +1 @@
-
��b��*��N�
-�N�0-�9�FDÂ���NE����X���9��2:�d���f��D[��ᖔ�����Sy{e��Uj
}|�����-~gO�@'?��z�Zo_���e��/�ק�'uދB��gy��3h�G	��
-t:h���Q��uU�`~\�؍����i� )+�n�����͔dP�҂db���=t�a*v��'��',�y�íZ��c������*uן`���b[��%�%�1�w�
+t�K/��l����$��apσ`���J�b�i'w��Ef�p@Ԏ����G���s����-�Q�
O$E?��0t����d+�W��>�npq�*q��l���:8��5�x�I��1���{��2ͮ�u�
�2�tCV�I`�t�J����V�k�k��=���1�-ub�E�۔�t��=b��Z��%	�qI�y�\v݅gr0cE,�>�*�

data/data/meterpreter/ext_server_stdapi.py

@@ -1663,6 +1663,50 @@ def stdapi_sys_process_memory_unlock(request, response):
         return error_result_windows(), response
     return ERROR_SUCCESS, response
 
+@register_function_if(has_windll)
+def stdapi_sys_process_memory_read(request, response):
+    ERROR_PARTIAL_COPY = 229
+    handle = packet_get_tlv(request, TLV_TYPE_HANDLE).get('value')
+    base = packet_get_tlv(request, TLV_TYPE_BASE_ADDRESS).get('value')
+    size = packet_get_tlv(request, TLV_TYPE_LENGTH).get('value')
+
+    if not (handle and base and size):
+        return ERROR_INVALID_PARAMETER, response
+
+    ReadProcessMemory = ctypes.windll.kernel32.ReadProcessMemory
+    ReadProcessMemory.argtypes = [ctypes.c_void_p, ctypes.c_void_p, ctypes.c_void_p, ctypes.c_size_t, ctypes.POINTER(ctypes.c_size_t)]
+    ReadProcessMemory.restype = ctypes.c_bool
+
+    buffer = ctypes.create_string_buffer(size)
+    bytes_read = ctypes.c_size_t(0)
+    if (not ReadProcessMemory(handle, base, ctypes.byref(buffer), ctypes.sizeof(buffer), ctypes.byref(bytes_read))) and (ctypes.windll.kernel32.GetLastError() != ERROR_PARTIAL_COPY):
+        return error_result_windows(), response
+
+    readed_data = buffer.raw[:bytes_read.value]
+    response += tlv_pack(TLV_TYPE_PROCESS_MEMORY, readed_data)
+    return ERROR_SUCCESS, response
+
+@register_function_if(has_windll)
+def stdapi_sys_process_memory_write(request, response):
+    ERROR_PARTIAL_COPY = 229
+    handle = packet_get_tlv(request, TLV_TYPE_HANDLE).get('value')
+    base = packet_get_tlv(request, TLV_TYPE_BASE_ADDRESS).get('value')
+    data = packet_get_tlv(request, TLV_TYPE_PROCESS_MEMORY).get('value')
+
+    if not (handle and base and data):
+        return ERROR_INVALID_PARAMETER, response
+
+    WriteProcessMemory = ctypes.windll.kernel32.WriteProcessMemory
+    WriteProcessMemory.argtypes = [ctypes.c_void_p, ctypes.c_void_p, ctypes.c_void_p, ctypes.c_size_t, ctypes.POINTER(ctypes.c_size_t)]
+    WriteProcessMemory.restype = ctypes.c_bool
+
+    written = ctypes.c_size_t(0)
+    if (not WriteProcessMemory(handle, base, data, len(data), ctypes.byref(written))) and (ctypes.windll.kernel32.GetLastError() != ERROR_PARTIAL_COPY):
+        return error_result_windows(), response
+
+    response += tlv_pack(TLV_TYPE_LENGTH, written.value)
+    return ERROR_SUCCESS, response
+
 @register_function_if(has_windll)
 def stdapi_sys_process_memory_free(request, response):
     handle = packet_get_tlv(request, TLV_TYPE_HANDLE).get('value', 0)

data/lib/metasploit-payloads/version.rb

@@ -1,6 +1,6 @@
 # -*- coding:binary -*-
 module MetasploitPayloads
-  VERSION = '2.0.127'
+  VERSION = '2.0.129'
 
   def self.version
     VERSION

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: metasploit-payloads
 version: !ruby/object:Gem::Version
-  version: 2.0.127
+  version: 2.0.129
 platform: ruby
 authors:
 - OJ Reeves
@@ -96,7 +96,7 @@ cert_chain:
   EknWpNgVhohbot1lfVAMmIhdtOVaRVcQQixWPwprDj/ydB8ryDMDosIMcw+fkoXU
   9GJsSaSRRYQ9UUkVL27b64okU8D48m8=
   -----END CERTIFICATE-----
-date: 2023-04-20 00:00:00.000000000 Z
+date: 2023-04-27 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake