msf3.3-dev msfweb raw payload generation error

[tyronmiller at gmail.com (Ty Miller)]

Hey Patrick!

Yeah, it was only for a tutorial I was putting together as a demo. Not for
practical reasons.

Thanks for the info though.

Ty

On Wed, Sep 23, 2009 at 3:20 PM, Patrick Webster <patrick at aushack.com>wrote:

> I haven't been able to reproduce this (on Windows) using the latest trunk.
> May be the Ruby interpreter version -
> http://redmine.ruby-lang.org/issues/show/1370
>
> Though I wouldn't recommend generating RAW payloads within a browser as you
> will lose some bytes such as 0x0a and 0x0d etc.... It is meant to be piped
> via the command line. Better off using any other output as escaped hex :)
>
> -Patrick
>
>   On Wed, Sep 23, 2009 at 8:33 AM, Ty Miller <tyronmiller at gmail.com>wrote:
>
> >  Hey guys,
> >
> > FYI, got the following error when messing around with the payload
> > generation formats in msf3.3-dev.
> >
> > Cheers,
> > Ty
> >
> >
> > ArgumentError in PayloadsController#view
> >
> > invalid byte sequence in UTF-8
> >
> > RAILS_ROOT: /msf3/data/msfweb
> > Application Trace <http://127.0.0.1:55555/payloads/view#> | Framework
> > Trace <http://127.0.0.1:55555/payloads/view#> | Full Trace<http://127.0.0.1:55555/payloads/view#>
> >
> > /msf3/data/msfweb/vendor/rails/activesupport/lib/active_support/core_ext/blank.rb:50:in `=~'
> > /msf3/data/msfweb/vendor/rails/activesupport/lib/active_support/core_ext/blank.rb:50:in `!~'
> > /msf3/data/msfweb/vendor/rails/activesupport/lib/active_support/core_ext/blank.rb:50:in `blank?'
> >
> >
> >
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/response.rb:119:in `etag='
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/response.rb:185:in `handle_conditional_get!'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/response.rb:143:in `prepare!'
> >
> >
> >
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/base.rb:531:in `send_response'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/base.rb:525:in `process'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/filters.rb:606:in `process_with_filters'
> >
> >
> >
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/base.rb:391:in `process'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/base.rb:386:in `call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/routing/route_set.rb:433:in `call'
> >
> > /msf3/data/msfweb/vendor/rails/activesupport/lib/active_support/core_ext/blank.rb:50:in `=~'
> > /msf3/data/msfweb/vendor/rails/activesupport/lib/active_support/core_ext/blank.rb:50:in `!~'
> > /msf3/data/msfweb/vendor/rails/activesupport/lib/active_support/core_ext/blank.rb:50:in `blank?'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/response.rb:119:in `etag='
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/response.rb:185:in `handle_conditional_get!'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/response.rb:143:in `prepare!'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/base.rb:531:in `send_response'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/base.rb:525:in `process'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/filters.rb:606:in `process_with_filters'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/base.rb:391:in `process'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/base.rb:386:in `call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/routing/route_set.rb:433:in `call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/dispatcher.rb:88:in `dispatch'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/dispatcher.rb:111:in `_call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/dispatcher.rb:82:in `block in initialize'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/head.rb:9:in `call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/head.rb:9:in `call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/methodoverride.rb:24:in `call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/params_parser.rb:15:in `call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/rewindable_input.rb:25:in `call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/session/cookie_store.rb:93:in `call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/failsafe.rb:11:in `call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/lock.rb:11:in `block in call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/lock.rb:11:in `call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/dispatcher.rb:106:in `call'
> > /msf3/data/msfweb/vendor/rails/railties/lib/rails/rack/static.rb:31:in `call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/urlmap.rb:46:in `block in call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/urlmap.rb:40:in `each'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/urlmap.rb:40:in `call'
> > /msf3/data/msfweb/vendor/rails/railties/lib/rails/rack/log_tailer.rb:17:in `call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/content_length.rb:13:in `call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/handler/webrick.rb:46:in 
> > `service'
> > /usr/lib/ruby/1.9.1/webrick/httpserver.rb:111:in `service'
> > /usr/lib/ruby/1.9.1/webrick/httpserver.rb:70:in `run'
> > /usr/lib/ruby/1.9.1/webrick/server.rb:183:in `block in start_thread'
> >
> > /msf3/data/msfweb/vendor/rails/activesupport/lib/active_support/core_ext/blank.rb:50:in `=~'
> > /msf3/data/msfweb/vendor/rails/activesupport/lib/active_support/core_ext/blank.rb:50:in `!~'
> > /msf3/data/msfweb/vendor/rails/activesupport/lib/active_support/core_ext/blank.rb:50:in `blank?'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/response.rb:119:in `etag='
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/response.rb:185:in `handle_conditional_get!'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/response.rb:143:in `prepare!'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/base.rb:531:in `send_response'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/base.rb:525:in `process'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/filters.rb:606:in `process_with_filters'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/base.rb:391:in `process'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/base.rb:386:in `call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/routing/route_set.rb:433:in `call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/dispatcher.rb:88:in `dispatch'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/dispatcher.rb:111:in `_call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/dispatcher.rb:82:in `block in initialize'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/head.rb:9:in `call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/head.rb:9:in `call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/methodoverride.rb:24:in `call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/params_parser.rb:15:in `call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/rewindable_input.rb:25:in `call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/session/cookie_store.rb:93:in `call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/failsafe.rb:11:in `call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/lock.rb:11:in `block in call'
> > :8:in `synchronize'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/lock.rb:11:in `call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/dispatcher.rb:106:in `call'
> > /msf3/data/msfweb/vendor/rails/railties/lib/rails/rack/static.rb:31:in `call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/urlmap.rb:46:in `block in call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/urlmap.rb:40:in `each'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/urlmap.rb:40:in `call'
> > /msf3/data/msfweb/vendor/rails/railties/lib/rails/rack/log_tailer.rb:17:in `call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/content_length.rb:13:in `call'
> > /msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/handler/webrick.rb:46:in 
> > `service'
> > /usr/lib/ruby/1.9.1/webrick/httpserver.rb:111:in `service'
> > /usr/lib/ruby/1.9.1/webrick/httpserver.rb:70:in `run'
> > /usr/lib/ruby/1.9.1/webrick/server.rb:183:in `block in start_thread'
> >
> > Request
> >
> > *Parameters*:
> >
> > {"refname"=>"windows:exec",
> >  "step"=>"1",
> >  "opt_EXITFUNC"=>"thread",
> >  "opt_CMD"=>"dir",
> >
> >
> >
> >  "max_size"=>"",
> >  "badchars"=>"0x00 ",
> >  "encoder"=>"__default",
> >  "format"=>"raw",
> >  "commit"=>"Generate"}
> >
> > Show session dump <http://127.0.0.1:55555/payloads/view#>
> >
> > ---
> >
> > Response
> >
> > *Headers*:
> >
> > {"Cache-Control"=>"no-cache",
> >  "X-Runtime"=>"266",
> >  "Content-Type"=>"text/html; charset=utf-8"}
> >
> >
> >
> >
> > _______________________________________________
> > https://mail.metasploit.com/mailman/listinfo/framework
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.metasploit.com/pipermail/framework/attachments/20090923/9e53c97c/attachment-0001.html>