metasploit-payloads 2.0.129 → 2.0.131

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 45911f3ad4fdb2f430ec1b049442bdc250af6f3410cf40696cf48fe11f7122f7
-  data.tar.gz: 77e0acc0528363f57a5e4ce3f2e3ffa5c652d4e5d09997aee4e512baa4da6a3a
+  metadata.gz: ca634b3a2e09af50dc38a582976c3d7b2caa73db7b5fd88a0bb843b83402973c
+  data.tar.gz: 6e96fb4598fd66ca45267d2745ec1639fb8f337c607d2511aa3302dec84f6c34
 SHA512:
-  metadata.gz: 81eb682d3bdc73ea2ec275db1d13baabec5550d2ad219b6233e17f7d3433196e626b5f28b9fa22984a5074120e6e6cd74464e9aaed6b471c7b8d59806e493e5f
-  data.tar.gz: 2dd606d30284b72393f1147142ac40f307a3258dd6f54bfb22f5744d67738d6122985cf25595b7e529ce132f9f3d9d8a7268a9a9acf9ef491c754c6fb2825015
+  metadata.gz: 9665ef8d86c0f4687e0473c6873ced36fc8b30eda3be698c13f4a87e72cd3fed4e84adfbee3209d51ac8755d98e56acf2af229b5b214dcc7d408f578aeee49c0
+  data.tar.gz: ffdf1bd7ed242fa90d6dcd8d6af9c5257804c8730b3e63e2845459a83fc21cbba5706b5e1d1419089afa56f9e110b3aff72d4a14dccbd4a31a4451a86efc2ddb

data/data/meterpreter/ext_server_stdapi.py

@@ -1707,6 +1707,26 @@ def stdapi_sys_process_memory_write(request, response):
     response += tlv_pack(TLV_TYPE_LENGTH, written.value)
     return ERROR_SUCCESS, response
 
+@register_function_if(has_windll)
+def stdapi_sys_process_memory_protect(request, response):
+    handle = packet_get_tlv(request, TLV_TYPE_HANDLE).get('value')
+    base   = packet_get_tlv(request, TLV_TYPE_BASE_ADDRESS).get('value')
+    size   = packet_get_tlv(request, TLV_TYPE_LENGTH).get('value')
+    prot   = packet_get_tlv(request, TLV_TYPE_PROTECTION).get('value')
+
+    if not (handle and base and size):
+        return ERROR_INVALID_PARAMETER, response
+
+    VirtualProtectEx = ctypes.windll.kernel32.VirtualProtectEx
+    VirtualProtectEx.argtypes = [ctypes.c_void_p, ctypes.c_void_p, ctypes.c_size_t, ctypes.c_ulong, ctypes.c_void_p]
+    VirtualProtectEx.restype = ctypes.c_long
+
+    old_prot = ctypes.c_ulong()
+    if not VirtualProtectEx(handle, base, size, prot, ctypes.byref(old_prot)):
+        return error_result_windows(), response
+    response += tlv_pack(TLV_TYPE_PROTECTION, old_prot.value)
+    return ERROR_SUCCESS, response
+
 @register_function_if(has_windll)
 def stdapi_sys_process_memory_free(request, response):
     handle = packet_get_tlv(request, TLV_TYPE_HANDLE).get('value', 0)

data/lib/metasploit-payloads/version.rb

@@ -1,6 +1,6 @@
 # -*- coding:binary -*-
 module MetasploitPayloads
-  VERSION = '2.0.129'
+  VERSION = '2.0.131'
 
   def self.version
     VERSION

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: metasploit-payloads
 version: !ruby/object:Gem::Version
-  version: 2.0.129
+  version: 2.0.131
 platform: ruby
 authors:
 - OJ Reeves
@@ -96,7 +96,7 @@ cert_chain:
   EknWpNgVhohbot1lfVAMmIhdtOVaRVcQQixWPwprDj/ydB8ryDMDosIMcw+fkoXU
   9GJsSaSRRYQ9UUkVL27b64okU8D48m8=
   -----END CERTIFICATE-----
-date: 2023-04-27 00:00:00.000000000 Z
+date: 2023-05-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake
@@ -163,6 +163,10 @@ files:
 - data/java/metasploit/PayloadTrustManager.class
 - data/java/metasploit/RMILoader.class
 - data/java/metasploit/RMIPayload.class
+- data/meterpreter/dump_sam.x64.debug.dll
+- data/meterpreter/dump_sam.x64.dll
+- data/meterpreter/dump_sam.x86.debug.dll
+- data/meterpreter/dump_sam.x86.dll
 - data/meterpreter/elevator.x64.debug.dll
 - data/meterpreter/elevator.x64.dll
 - data/meterpreter/elevator.x86.debug.dll