Metasploit mailing list archives

[PHP_Exploit]Problem


From: hdm at metasploit.com (H D Moore)
Date: Fri, 1 Jun 2007 10:59:07 -0500

Ah, to get the right address, you actually need alloc some memory from 
inside PHP and then dump the maps:

Try running this PHP script, IIRC, the heap address you want is actually 
near the end of the output (should be around ~4Mb in size).

<pre>
<?php 
        $buff = str_repeat("X", 1024*1024*4);
        readfile("/proc/version");
        readfile("/proc/self/maps"); 
?>
</pre>

-HD

On Friday 01 June 2007 10:40, FOULON Pascal wrote:
But you are right, maybe my target parameters are wrong, it seems the
default address range is wrong for my case.



Current thread: