4.6.1.1 ROP Request Buffer

The ROP request buffer in this example resembles the following.

 0000: 47 06 00

The composition of the bytes is as follows:

RopId: 0x47 (RopSetSpooler ROP ([MS-OXCROPS] section 2.2.7.4))

LogonID: 0x06

InputHandleIndex: 0x00 (handle to the Logon object)

Show: