Advanced

amon.so: Hijacking System Calls For Hardening PHP - Debian Lenny And Squeeze

Posted by falko on · Post a comment
HowtoForge
Mail this story
Print this story

amon.so is a library that integrates with the PHP interpreter and intercepts and manipulates the system calls provided by libc6. It replaces the execve() syscall with a custom function which does extra sanity checking in order to prevent that an attacker could execute arbitrary code on the system exploiting a vulnerability in a web-based application (such as a bugged cms). It's open-source software released under the terms of the GPL license and compatible with PHP running as a CGI process or Apache's DSO module.

amon.so is a library that integrates with the PHP interpreter and intercepts and manipulates the system calls provided by libc6. It replaces the execve() syscall with a custom function which does extra sanity checking in order to prevent that an attacker could execute arbitrary code on the system exploiting a vulnerability in a web-based application (such as a bugged cms). It's open-source software released under the terms of the GPL license and compatible with PHP running as a CGI process or Apache's DSO module.

http://www.howtoforge.com/amon.so-highjacking-system-calls-for-hardening-php-debian-lenny-and-squeeze

Full Story

  Nav
» Read more about: Story Type: Tutorial; Groups: Debian, PHP

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments

No comments yet. Be the first.

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post