Re: How to make a core dump?
Alexander Morozov <[email protected]>
| Newsgroups | gmane.comp.security.linux |
|---|---|
| Organization | MIPT |
| Message-ID | <[email protected]> |
Thanks everybody for answering, so the simliest way found is to use gdb command "gcore". It dumps core by copying memory and making all nessesary headers itself, not relying on kernel ability to dump core. By the way, the malcious program was injected through a poorly written php-script and, as i guess from data obtained using gdb memory-dumping functions, was cracking DES-encrypted passwords, provided by attacker's server. With best regards, A. Morozov.