Skip to content

kjungi704/phpmess

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

6 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

-- phpmess --

simple php use after free exploitation.

@chtg57's unserialize() & __wakeup UaF as demo exploit.

jump(); to control RIP
alloc(); to allocate memory in the heap and r/w to it
mem(); to create a memory mapping (allows you to read/write arbitrary addresses)
ptr(); to leak a pointer inside a newly allocated zval (to get a valid pointer to the heap, used for alloc(), mem() etc..)

About

exploitation of php use-after-free vulnerabilities on 64 bit systems | poc||gtfo

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • PHP 100.0%