RE: Finding real host in Nmap -D Scans

John W. Lampe wrote:
> [...]
> <Pre>Do you know the base address of the Global Offset Table (GOT) on a
> Solaris 8 box?
> CORE IMPACT does.</Pre>

Sure. What's the problem?
Get an account on cf.sourceforge.net.
Login in to box M. or N. then type:

$ greadelf -S /bin/sh | sed -ne '4p' -e '/\.got/p'
  [Nr] Name Type Addr Off Size ES Flg Lk
Inf Al
  [16] .got PROGBITS 00036000 016000 000004 04 WA 0
0 8192

The base address of the code segment is 0x10000, the other line is the data
segment.

$ greadelf -l /bin/sh | sed -ne '7p' -e '/LOAD/p'
  Type Offset VirtAddr PhysAddr FileSiz MemSiz Flg Align
  LOAD 0x000000 0x00010000 0x00000000 0x15a57 0x15a57 R E 0x10000
  LOAD 0x016000 0x00036000 0x00000000 0x00f66 0x03aec RWE 0x10000

-- 
+++ GMX - Mail, Messaging & more  http://www.gmx.net +++
Bitte lächeln! Fotogalerie online mit GMX ohne eigene Homepage!
---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help_at_insecure.org . List run by ezmlm-idx (www.ezmlm.org).