rex-powershell 0.1.70 → 0.1.71

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: d6f6a90078d7ff2c818055f47b07acbebf301cab
-  data.tar.gz: 9985d763cba997475fef83e74780129b3027f3f7
+  metadata.gz: 3913c3cb269688b4aa91f076b92a5c8be40d6d2d
+  data.tar.gz: e9b641b0d6e95afc83c586f557bde88b6debc69d
 SHA512:
-  metadata.gz: 7e579c30c19742f0e2e653e5a52877456ceba55da5794791e66f86749b8934525e194b439d2e0c704d3faff6a171b8bb2b2a4102717cc414c23cc146237ae36e
-  data.tar.gz: 37b8554490a32dbd12796fb41f53d60ca99f9ffdb667c939745adbeba8658a654c59a348e85e2642e63743590a41d566f46ddae274e49b0734cf347eac8fd30e
+  metadata.gz: d2dbc7886054eedff5a4992a6877da7eb8f64ce9f1dc60ee2be73c810584c831f9b4a0d0431590711b17990c8dcd72e3ca7f2caf9014fb993f85b922a439e5a5
+  data.tar.gz: cd9097d4897ca80bb455b1e74b44882864bf986b81ed2b03af53c31ab306e93cd6c8513bfca13244ffc2f7884af3f1a3a4ac6779ef0bc5891baf2606a659ef09

data/data/templates/to_mem_old.ps1.template

@@ -3,8 +3,6 @@ $%{var_syscode} = @"
 public static extern IntPtr VirtualAlloc(IntPtr lpAddress, uint dwSize, uint flAllocationType, uint flProtect);
 [DllImport("kernel32.dll")]
 public static extern IntPtr CreateThread(IntPtr lpThreadAttributes, uint dwStackSize, IntPtr lpStartAddress, IntPtr lpParameter, uint dwCreationFlags, IntPtr lpThreadId);
-[DllImport("msvcrt.dll")]
-public static extern IntPtr memset(IntPtr dest, uint src, uint count);
 "@
 
 $%{var_win32_func} = Add-Type -memberDefinition $%{var_syscode} -Name "Win32" -namespace Win32Functions -passthru
@@ -13,8 +11,6 @@ $%{var_win32_func} = Add-Type -memberDefinition $%{var_syscode} -Name "Win32" -n
 
 $%{var_rwx} = $%{var_win32_func}::VirtualAlloc(0,[Math]::Max($%{var_code}.Length,0x1000),0x3000,0x40)
 
-for ($%{var_iter}=0;$%{var_iter} -le ($%{var_code}.Length-1);$%{var_iter}++) {
-  $%{var_win32_func}::memset([IntPtr]($%{var_rwx}.ToInt32()+$%{var_iter}), $%{var_code}[$%{var_iter}], 1) | Out-Null
-}
+[System.Runtime.InteropServices.Marshal]::Copy($%{var_code},0,$%{var_rwx},$%{var_code}.Length)
 
 $%{var_win32_func}::CreateThread(0,0,$%{var_rwx},0,0,0)

data/lib/rex/powershell/script.rb

@@ -75,11 +75,7 @@ module Powershell
       psh = "[Byte[]] $#{var_name} = 0x#{code[0].to_s(16)}"
       lines = []
       1.upto(code.length - 1) do |byte|
-        if (byte % 10 == 0)
-          lines.push "\r\n$#{var_name} += 0x#{code[byte].to_s(16)}"
-        else
-          lines.push ",0x#{code[byte].to_s(16)}"
-        end
+        lines.push ",0x#{code[byte].to_s(16)}"
       end
 
       psh << lines.join('') + "\r\n"

data/lib/rex/powershell/version.rb

@@ -1,5 +1,5 @@
 module Rex
   module Powershell
-    VERSION = "0.1.70"
+    VERSION = "0.1.71"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rex-powershell
 version: !ruby/object:Gem::Version
-  version: 0.1.70
+  version: 0.1.71
 platform: ruby
 authors:
 - David 'thelightcosine' Maloney
@@ -88,7 +88,7 @@ cert_chain:
   G+Hmcg1v810agasPdoydE0RTVZgEOOMoQ07qu7JFXVWZ9ZQpHT7qJATWL/b2csFG
   8mVuTXnyJOKRJA==
   -----END CERTIFICATE-----
-date: 2017-04-07 00:00:00.000000000 Z
+date: 2017-04-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler