State of the Art Post Exploitation in Hardened PHP Environments

[Nytro]

State of the Art Post Exploitation in Hardened PHP Environments

Author: Stefan Esser

Abstract

In this paper we discuss the different protections an attacker faces in hardened PHP environments,

after he succeeded in executing arbitrary PHP code. We introduce new techniques

to overcome most of them by the use of local PHP exploits. We demonstrate how info leak and

memory corruption vulnerabilities can be combined to enable PHP applications to read and

write arbitrary memory. We will show step by step how important memory structures can be

leaked and manipulated in order to deactivate or overcome protections.

Download:

http://www.exploit-db.com/download_pdf/15955

Mai tehnic decat articolele "clasice".

[michee]

ok, a inteles cineva tot articolul asta? L-am inteles si eu in mare, dar as avea cateva nelamuriri.......daca se poate sa m-ajute careva.....Mersi1