Skip to content

Instantly share code, notes, and snippets.

@bulk88
Created March 10, 2025 04:16
Show Gist options
  • Save bulk88/e8b9c936cff1ca067aaf6d66532808e3 to your computer and use it in GitHub Desktop.
Save bulk88/e8b9c936cff1ca067aaf6d66532808e3 to your computer and use it in GitHub Desktop.
Toxic UTF16
$f = Win32::API::More->new('kernel32', 'WideCharToMultiByte', 'NNPiPiNN', 'i');
$a = "\xF0\xDF\xF0\xDF\x00\x00\x00\x00";
$u = "\x00" x 20;
$r = $f->Call(65001, 0, $a, 2, $u, 20, 0 ,0);
Dump($r);
Dump($a);
Dump($u);
SV = IV(0x22c0240) at 0x22c0250
REFCNT = 1
FLAGS = (IOK,pIOK)
IV = 6
SV = PV(0x42d1f0) at 0x22ba058
REFCNT = 1
FLAGS = (POK,pPOK)
PV = 0x5b6ce0 "\xF0\xDF\xF0\xDF\x00\x00\x00\x00"\0
CUR = 8
LEN = 24
SV = PV(0x42d220) at 0x22b4fb8
REFCNT = 1
FLAGS = (POK,pPOK)
PV = 0x23475a0 "\xEF\xBF\xBD\xEF\xBF\xBD\x00\x00\x00\x00\x00\x00\x00\x00\x00\x
00\x00\x00\x00\x00"\0
CUR = 20
LEN = 48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment