Metasploit mailing list archives

Functions in DLLs

From: mmiller at hick.org (mmiller at hick.org)
Date: Sat, 5 Apr 2008 15:34:48 -0700

On Sun, Apr 06, 2008 at 08:15:48AM +1000, Ty Miller wrote:

In that paper that you recommended, there is no mention of the hashing
algorithm used. Do you know what it is, or do you have some code to create
the hashes?


Metasploit 2 has an implementation in lib/Pex/Utils.pm, the RorHash
function.  I believe the LSD assembly components paper talks about the
hash algorithm but it has been a while since I looked.

Current thread:

Functions in DLLs Ty Miller (Apr 02)
- <Possible follow-ups>
- Functions in DLLs Ty Miller (Apr 05)
  - Functions in DLLs mmiller at hick.org (Apr 05)
    - Functions in DLLs Vlad Tsyrklevich (Apr 05)