Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Mac-mini-do-Cooler:odin c00f3r$ valgrind --leak-check=full --track-origins=yes ./0d1n --h http://casafernandopessoa.cm-lisboa.pt/index.php?id=! --p payload.txt --f response.txt --o teste.txt
- ==26715== Memcheck, a memory error detector
- ==26715== Copyright (C) 2002-2011, and GNU GPL'd, by Julian Seward et al.
- ==26715== Using Valgrind-3.7.0 and LibVEX; rerun with -h for copyright info
- ==26715== Command: ./0d1n --h http://casafernandopessoa.cm-lisboa.pt/index.php?id=! --p payload.txt --f response.txt --o teste.txt
- ==26715==
- --26715-- ./0d1n:
- --26715-- dSYM directory is missing; consider using --dsymutil=yes
- http://casafernandopessoa.cm-lisboa.pt/index.php?id=!
- start scan...
- http://casafernandopessoa.cm-lisboa.pt/index.php?id=!
- ==26715== Conditional jump or move depends on uninitialised value(s)
- ==26715== at 0x10000115E: scan (in ./0d1n)
- ==26715== by 0x100000BE1: main (in ./0d1n)
- ==26715== Uninitialised value was created by a heap allocation
- ==26715== at 0x4DC7: malloc (vg_replace_malloc.c:266)
- ==26715== by 0x100000A06: main (in ./0d1n)
- ==26715==
- start GET scan
- http://casafernandopessoa.cm-lisboa.pt/index.php?id=!
- ==26715== Conditional jump or move depends on uninitialised value(s)
- ==26715== at 0x4176F2: __strncat_chk (in /usr/lib/system/libsystem_c.dylib)
- ==26715== by 0x100000FA3: __inline_strncat_chk (in ./0d1n)
- ==26715== by 0x100000ED3: payload_injector (in ./0d1n)
- ==26715== by 0x100001611: scan (in ./0d1n)
- ==26715== by 0x100000BE1: main (in ./0d1n)
- ==26715== Uninitialised value was created by a heap allocation
- ==26715== at 0x4DC7: malloc (vg_replace_malloc.c:266)
- ==26715== by 0x100000E2A: payload_injector (in ./0d1n)
- ==26715== by 0x100001611: scan (in ./0d1n)
- ==26715== by 0x100000BE1: main (in ./0d1n)
- ==26715==
- GET test...
- http://casafernandopessoa.cm-lisboa.pt/index.php?id='
- ==26715== Conditional jump or move depends on uninitialised value(s)
- ==26715== at 0x100001750: scan (in ./0d1n)
- ==26715== by 0x100000BE1: main (in ./0d1n)
- ==26715== Uninitialised value was created by a heap allocation
- ==26715== at 0x4DC7: malloc (vg_replace_malloc.c:266)
- ==26715== by 0x100000A06: main (in ./0d1n)
- ==26715==
- grep start
- grep end
- GET test...
- http://casafernandopessoa.cm-lisboa.pt/index.php?id="
- grep start
- grep end
- GET test...
- http://casafernandopessoa.cm-lisboa.pt/index.php?id=' or 2=2
- grep start
- grep end
- GET test...
- http://casafernandopessoa.cm-lisboa.pt/index.php?id=" or 2=2
- grep start
- grep end
- GET test...
- http://casafernandopessoa.cm-lisboa.pt/index.php?id=)
- grep start
- grep end
- end scan
- ==26715==
- ==26715== HEAP SUMMARY:
- ==26715== in use at exit: 249,177 bytes in 1,027 blocks
- ==26715== total heap usage: 14,834 allocs, 13,807 frees, 999,860 bytes allocated
- ==26715==
- ==26715== 5,595 bytes in 5 blocks are definitely lost in loss record 618 of 623
- ==26715== at 0x4DC7: malloc (vg_replace_malloc.c:266)
- ==26715== by 0x5318: realloc (vg_replace_malloc.c:635)
- ==26715== by 0x100000C6D: WriteMemoryCallback (in ./0d1n)
- ==26715== by 0x1452F: Curl_client_write (in /usr/lib/libcurl.4.dylib)
- ==26715== by 0x2A0B7: Curl_readwrite (in /usr/lib/libcurl.4.dylib)
- ==26715== by 0x2AA06: Curl_do_perform (in /usr/lib/libcurl.4.dylib)
- ==26715== by 0x1000017E0: scan (in ./0d1n)
- ==26715== by 0x100000BE1: main (in ./0d1n)
- ==26715==
- ==26715== LEAK SUMMARY:
- ==26715== definitely lost: 5,595 bytes in 5 blocks
- ==26715== indirectly lost: 0 bytes in 0 blocks
- ==26715== possibly lost: 0 bytes in 0 blocks
- ==26715== still reachable: 243,582 bytes in 1,022 blocks
- ==26715== suppressed: 0 bytes in 0 blocks
- ==26715== Reachable blocks (those to which a pointer was found) are not shown.
- ==26715== To see them, rerun with: --leak-check=full --show-reachable=yes
- ==26715==
- ==26715== For counts of detected and suppressed errors, rerun with: -v
- ==26715== ERROR SUMMARY: 8 errors from 4 contexts (suppressed: 152 from 8)
Advertisement
Add Comment
Please, Sign In to add comment