Metasploit mailing list archives
VNC payload problems
From: andres.riancho at gmail.com (Andres Riancho)
Date: Wed, 26 Sep 2007 09:54:49 -0300
Patrick, On 9/25/07, Patrick Webster <patrick at aushack.com> wrote:
Hi, I have also experienced the same issue - sometimes the vuln process restarts itself because of the VNC upload.
In my case, the exe that has the payload inside, raises an exception after "NtAllocateVirtualMemory (-1, 0, 0, 0, 8192, 4, ... ) == STATUS_INVALID_PARAMETER_4"
See thread http://www.metasploit.com/archive/framework/msg02686.html.
I'm using win2k fully patched to test this, and I don't see any log entries like the ones mentioned in this thread. I'm going to test with a winXP to see what happends. Any other ideas on what could be hapenning ? -Patrick
-- Andres Riancho http://w3af.sourceforge.net/ Web Application Attack and Audit Framework -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://mail.metasploit.com/pipermail/framework/attachments/20070926/cf72fcae/attachment.htm>
Current thread:
- VNC payload problems Andres Riancho (Sep 25)
- VNC payload problems H D Moore (Sep 25)
- VNC payload problems Andres Riancho (Sep 25)
- VNC payload problems Patrick Webster (Sep 25)
- VNC payload problems Andres Riancho (Sep 25)
- VNC payload problems H D Moore (Sep 26)
- VNC payload problems Andres Riancho (Sep 26)
- VNC payload problems Andres Riancho (Sep 25)
- VNC payload problems Andres Riancho (Sep 26)
- VNC payload problems H D Moore (Sep 25)
- <Possible follow-ups>
- VNC payload problems Steven Olson (Sep 26)