metasploit-payloads 2.0.131 → 2.0.132

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ca634b3a2e09af50dc38a582976c3d7b2caa73db7b5fd88a0bb843b83402973c
-  data.tar.gz: 6e96fb4598fd66ca45267d2745ec1639fb8f337c607d2511aa3302dec84f6c34
+  metadata.gz: 559757f61ec18a934889d2b8095e6d9a9c3f9c132189d5a4401499b704231baa
+  data.tar.gz: 4d8b7cea9544df45f6e52ea082cd19d5ada8f762b5d713dae1a13b6b8909832b
 SHA512:
-  metadata.gz: 9665ef8d86c0f4687e0473c6873ced36fc8b30eda3be698c13f4a87e72cd3fed4e84adfbee3209d51ac8755d98e56acf2af229b5b214dcc7d408f578aeee49c0
-  data.tar.gz: ffdf1bd7ed242fa90d6dcd8d6af9c5257804c8730b3e63e2845459a83fc21cbba5706b5e1d1419089afa56f9e110b3aff72d4a14dccbd4a31a4451a86efc2ddb
+  metadata.gz: c28466b89b33cdc90545dc9164acdfa88517aa48f81eba2c8957c9b961579d941fb1e997566838c961e0883488d1bfcd1480b93ec6b515c904cfca5696c4a888
+  data.tar.gz: b951535ad1a00aada9eca43c8f58059c0468337171b36ed418c37017b3e290788d1259d4c378375eb2fc2875a86c660caeb6351029572131e80cd39dab4a2185

data/data/meterpreter/ext_server_stdapi.py

@@ -399,6 +399,18 @@ if has_ctypes:
             ('dwType', ctypes.c_uint32)
         ]
 
+    class MEMORY_BASIC_INFORMATION(ctypes.Structure):
+        _fields_ = [
+            ('BaseAddress', ctypes.c_void_p),
+            ('AllocationBase', ctypes.c_void_p),
+            ('AllocationProtect', ctypes.c_ulong),
+            ('PartitionId', ctypes.c_ushort),
+            ('RegionSize', ctypes.c_size_t),
+            ('State', ctypes.c_ulong),
+            ('Protect', ctypes.c_ulong),
+            ('Type', ctypes.c_ulong)
+        ]
+
 
     #
     # Linux Structures
@@ -1727,6 +1739,32 @@ def stdapi_sys_process_memory_protect(request, response):
     response += tlv_pack(TLV_TYPE_PROTECTION, old_prot.value)
     return ERROR_SUCCESS, response
 
+@register_function_if(has_windll)
+def stdapi_sys_process_memory_query(request, response):
+    handle = packet_get_tlv(request, TLV_TYPE_HANDLE).get('value')
+    base = packet_get_tlv(request, TLV_TYPE_BASE_ADDRESS).get('value')
+
+    if not handle:
+        return ERROR_INVALID_PARAMETER, response
+
+    VirtualQueryEx = ctypes.windll.kernel32.VirtualQueryEx
+    VirtualQueryEx.argtypes = [ctypes.c_void_p, ctypes.c_void_p, ctypes.POINTER(MEMORY_BASIC_INFORMATION), ctypes.c_size_t]
+    VirtualQueryEx.restype = ctypes.c_size_t
+
+    info = MEMORY_BASIC_INFORMATION()
+    size = VirtualQueryEx(handle, base, ctypes.byref(info), ctypes.sizeof(info))
+    if size == 0:
+        return error_result_windows(), response
+
+    response += tlv_pack(TLV_TYPE_BASE_ADDRESS, info.BaseAddress or 0)
+    response += tlv_pack(TLV_TYPE_ALLOC_BASE_ADDRESS, info.AllocationBase or 0)
+    response += tlv_pack(TLV_TYPE_ALLOC_PROTECTION, info.AllocationProtect)
+    response += tlv_pack(TLV_TYPE_LENGTH, info.RegionSize)
+    response += tlv_pack(TLV_TYPE_MEMORY_STATE, info.State)
+    response += tlv_pack(TLV_TYPE_PROTECTION, info.Protect)
+    response += tlv_pack(TLV_TYPE_MEMORY_TYPE, info.Type)
+    return ERROR_SUCCESS, response
+
 @register_function_if(has_windll)
 def stdapi_sys_process_memory_free(request, response):
     handle = packet_get_tlv(request, TLV_TYPE_HANDLE).get('value', 0)

data/lib/metasploit-payloads/version.rb

@@ -1,6 +1,6 @@
 # -*- coding:binary -*-
 module MetasploitPayloads
-  VERSION = '2.0.131'
+  VERSION = '2.0.132'
 
   def self.version
     VERSION

data.tar.gz.sig

@@ -1,4 +1,3 @@
-2.u����>z5R��M9��BeO��E���7�:[�r8(���6(�^��Ut�9�.���8�D,�(��<z��ǡ�	B�u���
-
-8�^�;nã(Z��<n�{�Vl,��b}�	�����A�Rm䊼����̙ōX�Q�01i�'306�
-��K�.U�Z���T��g�◐�F�2�e�Q�	o�3���m��0��@�����0r�t� �-�L��h/��Wir4��*_�-�jAr�m�zX�`
+rPS�iz?���R�Դ���-��&��Ja�R�<�U�58�2���ł37q�?��g���Z�*d���8�J�t���3Uny�Ko�|Wl
+6/X�޻�dŐ+I�V73`pt�O�D#��6�B(�Uo��HuWk02�j�N%����貘�m{ʼ~��CN)R*��	�vݭ���1�%}]_�s>��Yە�r9:V�s��|�
+F���o����Înὗ~s�.�=M�W�:K�;8�X�h[;��

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: metasploit-payloads
 version: !ruby/object:Gem::Version
-  version: 2.0.131
+  version: 2.0.132
 platform: ruby
 authors:
 - OJ Reeves
@@ -96,7 +96,7 @@ cert_chain:
   EknWpNgVhohbot1lfVAMmIhdtOVaRVcQQixWPwprDj/ydB8ryDMDosIMcw+fkoXU
   9GJsSaSRRYQ9UUkVL27b64okU8D48m8=
   -----END CERTIFICATE-----
-date: 2023-05-08 00:00:00.000000000 Z
+date: 2023-05-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake