Skip to content

Instantly share code, notes, and snippets.

@19h
19h / ld.c
Created February 17, 2014 13:37
Decrypting Plesk Panel PHP files (stolen from @silentsignal)

Hooking memcpy of swengine

  1. /tmp root@apx# nano ld.c
  2. /tmp root@apx# gcc -fPIC -c ld.c -o ld.o
  3. /tmp root@apx# gcc -shared -o ld.so ld.o
  4. /tmp root@apx# LD_PRELOAD=/tmp/ld.so /usr/bin/sw-engine /usr/local/psa/admin/htdocs/login_up.php3

Cheers