Metasploit mailing list archives

msf3.3-dev msfweb raw payload generation error


From: patrick at aushack.com (Patrick Webster)
Date: Wed, 23 Sep 2009 15:20:06 +1000

I haven't been able to reproduce this (on Windows) using the latest trunk.
May be the Ruby interpreter version -
http://redmine.ruby-lang.org/issues/show/1370

Though I wouldn't recommend generating RAW payloads within a browser as you
will lose some bytes such as 0x0a and 0x0d etc.... It is meant to be piped
via the command line. Better off using any other output as escaped hex :)

-Patrick

On Wed, Sep 23, 2009 at 8:33 AM, Ty Miller <tyronmiller at gmail.com> wrote:

Hey guys,

FYI, got the following error when messing around with the payload
generation formats in msf3.3-dev.

Cheers,
Ty


 ArgumentError in PayloadsController#view

invalid byte sequence in UTF-8

RAILS_ROOT: /msf3/data/msfweb
 Application Trace <http://127.0.0.1:55555/payloads/view#> | Framework
Trace <http://127.0.0.1:55555/payloads/view#> | Full Trace<http://127.0.0.1:55555/payloads/view#>

/msf3/data/msfweb/vendor/rails/activesupport/lib/active_support/core_ext/blank.rb:50:in `=~'
/msf3/data/msfweb/vendor/rails/activesupport/lib/active_support/core_ext/blank.rb:50:in `!~'
/msf3/data/msfweb/vendor/rails/activesupport/lib/active_support/core_ext/blank.rb:50:in `blank?'


/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/response.rb:119:in `etag='
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/response.rb:185:in `handle_conditional_get!'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/response.rb:143:in `prepare!'


/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/base.rb:531:in `send_response'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/base.rb:525:in `process'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/filters.rb:606:in `process_with_filters'


/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/base.rb:391:in `process'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/base.rb:386:in `call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/routing/route_set.rb:433:in `call'

 /msf3/data/msfweb/vendor/rails/activesupport/lib/active_support/core_ext/blank.rb:50:in `=~'
/msf3/data/msfweb/vendor/rails/activesupport/lib/active_support/core_ext/blank.rb:50:in `!~'
/msf3/data/msfweb/vendor/rails/activesupport/lib/active_support/core_ext/blank.rb:50:in `blank?'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/response.rb:119:in `etag='
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/response.rb:185:in `handle_conditional_get!'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/response.rb:143:in `prepare!'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/base.rb:531:in `send_response'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/base.rb:525:in `process'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/filters.rb:606:in `process_with_filters'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/base.rb:391:in `process'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/base.rb:386:in `call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/routing/route_set.rb:433:in `call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/dispatcher.rb:88:in `dispatch'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/dispatcher.rb:111:in `_call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/dispatcher.rb:82:in `block in initialize'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/head.rb:9:in `call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/head.rb:9:in `call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/methodoverride.rb:24:in `call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/params_parser.rb:15:in `call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/rewindable_input.rb:25:in `call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/session/cookie_store.rb:93:in `call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/failsafe.rb:11:in `call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/lock.rb:11:in `block in call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/lock.rb:11:in `call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/dispatcher.rb:106:in `call'
/msf3/data/msfweb/vendor/rails/railties/lib/rails/rack/static.rb:31:in `call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/urlmap.rb:46:in `block in call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/urlmap.rb:40:in `each'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/urlmap.rb:40:in `call'
/msf3/data/msfweb/vendor/rails/railties/lib/rails/rack/log_tailer.rb:17:in `call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/content_length.rb:13:in `call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/handler/webrick.rb:46:in 
`service'
/usr/lib/ruby/1.9.1/webrick/httpserver.rb:111:in `service'
/usr/lib/ruby/1.9.1/webrick/httpserver.rb:70:in `run'
/usr/lib/ruby/1.9.1/webrick/server.rb:183:in `block in start_thread'

 /msf3/data/msfweb/vendor/rails/activesupport/lib/active_support/core_ext/blank.rb:50:in `=~'
/msf3/data/msfweb/vendor/rails/activesupport/lib/active_support/core_ext/blank.rb:50:in `!~'
/msf3/data/msfweb/vendor/rails/activesupport/lib/active_support/core_ext/blank.rb:50:in `blank?'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/response.rb:119:in `etag='
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/response.rb:185:in `handle_conditional_get!'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/response.rb:143:in `prepare!'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/base.rb:531:in `send_response'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/base.rb:525:in `process'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/filters.rb:606:in `process_with_filters'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/base.rb:391:in `process'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/base.rb:386:in `call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/routing/route_set.rb:433:in `call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/dispatcher.rb:88:in `dispatch'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/dispatcher.rb:111:in `_call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/dispatcher.rb:82:in `block in initialize'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/head.rb:9:in `call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/head.rb:9:in `call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/methodoverride.rb:24:in `call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/params_parser.rb:15:in `call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/rewindable_input.rb:25:in `call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/session/cookie_store.rb:93:in `call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/failsafe.rb:11:in `call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/lock.rb:11:in `block in call'
:8:in `synchronize'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/lock.rb:11:in `call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/dispatcher.rb:106:in `call'
/msf3/data/msfweb/vendor/rails/railties/lib/rails/rack/static.rb:31:in `call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/urlmap.rb:46:in `block in call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/urlmap.rb:40:in `each'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/urlmap.rb:40:in `call'
/msf3/data/msfweb/vendor/rails/railties/lib/rails/rack/log_tailer.rb:17:in `call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/content_length.rb:13:in `call'
/msf3/data/msfweb/vendor/rails/actionpack/lib/action_controller/vendor/rack-1.0/rack/handler/webrick.rb:46:in 
`service'
/usr/lib/ruby/1.9.1/webrick/httpserver.rb:111:in `service'
/usr/lib/ruby/1.9.1/webrick/httpserver.rb:70:in `run'
/usr/lib/ruby/1.9.1/webrick/server.rb:183:in `block in start_thread'

 Request

*Parameters*:

{"refname"=>"windows:exec",
 "step"=>"1",
 "opt_EXITFUNC"=>"thread",
 "opt_CMD"=>"dir",


 "max_size"=>"",
 "badchars"=>"0x00 ",
 "encoder"=>"__default",
 "format"=>"raw",
 "commit"=>"Generate"}

Show session dump <http://127.0.0.1:55555/payloads/view#>

---

Response

*Headers*:

{"Cache-Control"=>"no-cache",
 "X-Runtime"=>"266",
 "Content-Type"=>"text/html; charset=utf-8"}




_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.metasploit.com/pipermail/framework/attachments/20090923/2f806263/attachment.html>


Current thread: