[framework] [PHP_Exploit]Problem

[H D Moore]

Ah, to get the right address, you actually need alloc some memory from 
inside PHP and then dump the maps:

Try running this PHP script, IIRC, the heap address you want is actually 
near the end of the output (should be around ~4Mb in size).

<pre>
<?php 
        $buff = str_repeat("X", 1024*1024*4);
        readfile("/proc/version");
        readfile("/proc/self/maps"); 
?>
</pre>

-HD

On Friday 01 June 2007 10:40, FOULON Pascal wrote:
> But you are right, maybe my target parameters are wrong, it seems the
> default address range is wrong for my case.