3 ms·
Exploiting Memory Corruption Bugs in PHP Part 3: Popping Remote Shells
- 0x0 11y agoIs this a 0day PHP exploit for SPLObjectStorage? Or is this https://security-tracker.debian.org/tracker/CVE-2015-0231 https://security-tracker.debian.org/tracker/CVE-2015-0231 ?
- dmix 11y ago> This post will be the first post in a three part series, starting with how to exploit CVE-2014-8142(and CVE-2015-0231), followed by remotely leaking arbitrary information, and ending with getting control of the PHP Interpreter. Stefan Esser(@i0n1c) is the security researcher who originally found both CVEs, and was also the first one to talk about controlling the PHP Interpreter(dubbed ret2php) at SyScan 2010.
- maplesyrupguy 11y agoIt's neither. However, using what's described in the post, it's possible to write an exploit for that CVE, as well as a few others. - Tim M.