Bug #184

IndexError: string index out of range

Added by Anonymous over 2 years ago. Updated over 2 years ago.

Status:ClosedStart date:02 Jan 2012
Priority:NormalDue date:
Assignee:Peter% Done:

100%

Category:-
Target version:v1.2

Description

---------- Mona command started on 2012-01-02 12:04:04 ----------
0BADF00D [+] Processing arguments and criteria
0BADF00D - Pointer access level : X
0BADF00D [+] Looking for cyclic pattern in memory
0BADF00D Cyclic pattern (unicode) found at 0x07c2ddd0 (length 19996 bytes)
0BADF00D Cyclic pattern (unicode) found at 0x011c8040 (length 19996 bytes)
0BADF00D Cyclic pattern (unicode) found at 0x0011e56c (length 9999 bytes)
0BADF00D - Stack pivot between 112 & 10111 bytes needed to land in this pattern
0BADF00D Cyclic pattern (unicode) found at 0x084ff84c (length 19996 bytes)
0BADF00D Cyclic pattern (unicode) found at 0x0850484c (length 19996 bytes)
0BADF00D [+] Examining registers
0BADF00D [+] Examining SEH chain
0BADF00D SEH handler at 0x0011eb84 overwritten with unicode pattern : 0x00610042 (offset 778), followed by 9219 bytes of cyclic data
0BADF00D [+] Examining stack (- 8192 bytes) - looking for cyclic pattern
0BADF00D Walking stack from 0x0011c4fc to 0x00120500 (0x00004004 bytes)
0BADF00D 0x0011e56c : Contains unicode cyclic pattern at ESP+0x70 (+112) : offset 0, length 9999 (> 0x00120c7a : ESP+0x277f)
0BADF00D [
] Examining stack ( 8192 bytes) - looking for pointers to cyclic pattern
0BADF00D Walking stack from 0x0011c4fc to 0x00120500 (0x00004004 bytes)
0BADF00D [
] Preparing log file 'exploit.rb'
0BADF00D - (Re)setting logfile exploit.rb
0BADF00D
0BADF00D [+] Preparing payload...
0BADF00D
0BADF00D [+] Preparing log file 'exploit_seh.rb'
0BADF00D - (Re)setting logfile exploit_seh.rb
0BADF00D * Please select a skeleton exploit type from the dropdown list
0BADF00D [+] Attempting to create payload for SEH record overwrite...
0BADF00D *
****************************************************************************
Traceback (most recent call last):
File "C:\Program Files\Immunity Inc\Immunity Debugger\mona.py", line 7685, in main
commands[command].parseProc(opts)
File "C:\Program Files\Immunity Inc\Immunity Debugger\mona.py", line 7236, in procSuggest
unicodeptr = "\"\\x" + origptr6 + origptr7 + "\\x" + origptr2 + origptr3 + "\""
IndexError: string index out of range

0BADF00D ************************************************************************

History

#1 Updated by Peter over 2 years ago

  • Description updated (diff)
  • Status changed from New to In Progress
  • Target version set to v1.2

that doesn't look like to be the latest version
run !mona update -t trunk and then try again

tx

#2 Updated by Peter over 2 years ago

  • Status changed from In Progress to Closed
  • % Done changed from 0 to 100

ticket closed, could not reproduce issue in latest version

Also available in: Atom PDF