Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I need to exploit a Solaris vulnerability for class, but we never dealt with Solaris before and I never installed it.

Does Solaris have an equivalent to Linux's /proc/self/environ, exposing a process's environment as a file, that allows local file inclusion attacks?

share|improve this question

On Solaris, you get a process environment with these commands:

pargs $$
pargs -e $$

There is no shortcut like /proc/self with Solaris so you need to know the PID of the process, eg.:


Moreover, only the arguments are visible here, the environment is in /proc/pid/as and I doubt this file to be exploitable with LFI as it is kind of a sparse file with which you need to seek to precise locations for the read to succeed.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.