set chunk-size to nanodump BOF

the default size breaks fileless download on SMB agents
HavocFramework · Jan 6, 2024 · 0a143a4 · 0a143a4
1 parent 7fd5fc1
commit 0a143a4
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/nanodump/nanodump.py b/nanodump/nanodump.py
@@ -27,6 +27,7 @@ def nanodump_parse_params(demon, params):
     use_lsass_shtinkering = False
     use_seclogon_duplicate = False
     spoof_callstack = False
+    chunk_size = 0xf000
 
     skip = False
     for i in range(num_params):
@@ -298,6 +299,7 @@ def nanodump_parse_params(demon, params):
     packer.adduint32(pid)
     packer.addstr(dump_path)
     packer.addbool(write_file)
+    packer.adduint32(chunk_size)
     packer.addbool(use_valid_sig)
     packer.addbool(fork)
     packer.addbool(snapshot)