Segmentation fault loading arm binary files on termux

[delmarocks]

Whenever i tried to load the binary on my environment using ELF it crashes and i got segmentation fault. What's the reason behind this? Is there any way to get this work on my device?

[Arusekk]

Wow, this is unsettling. Is the file you open big? Can you open other files, or does it crash for every binary (e.g. /bin/sh)? What are other scenarios that break or others that work fine?

[delmarocks]

No the files is just a small binary. Even using checksec pwntools always gives me segmentation fault

[delmarocks]

Even "/bin/sh" cant be loaded

[delmarocks]

My python is 32 bit. I think thats the reason why. Is there any way pwntools can be used in 32 bit arch?

[delmarocks]

Here's my device architecture.

[Arusekk]

Does it also happen when you use just python3 instead of ipython? Could you run it through pdb/gdb and post some backtrace of the crash?

[delmarocks]

Yes it does with every binary i want to use. unfortunately my gdb is not compiled with python.

[delmarocks]

[Arusekk]

Sorry to see that. Pwntools do not officialy support anything besides a linux/*BSD environment on x86-64, but from what your crash looks like I can't tell why this doesn't work for you.

[delmarocks]

How do i produce the crash report?

[Arusekk]

Problably if you ran gdb --args python3 script.py, the backtrace at crash could be helpful

[delmarocks]

[delmarocks]

Is that correct?

[delmarocks]

The output is the same even just using python3 instead of ipython

[zachriggle]

Generally, 32-but is not supported as a host OS — can you reproduce on 64b?

On Thu, Nov 14, 2019 at 4:39 AM delmarocks ***@***.***> wrote: The output is the same even just using python3 instead of ipython <https://camo.githubusercontent.com/85f5c3c451382d93fd8150d453ad41eb0508e347/68747470733a2f2f692e696d6775722e636f6d2f5935706672794b2e706e67> — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#1367?email_source=notifications&email_token=AAA3IGGYGLAP3J62HVQSTSDQTUTEPA5CNFSM4JM45OK2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEEBMJGQ#issuecomment-553829530>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAA3IGHRGGXNUJWVVHBZS6TQTUTEPANCNFSM4JM45OKQ> .

-- *Zach Riggle*

[delmarocks]

My device does not support 64 bit. Is it possible to make 32 bit as host OS

[Arusekk]

Please run the program in gdb again (this image), type run in the interactive session and when it breaks, type bt

[delmarocks]

@Arusekk this is the crash

[Arusekk]

This is not a segmentation fault, you could step through (using `continue`) until the program receives `SIGSEGV`. Email z czwartku, 14 listopada 2019 od delmarocksa:

…

@Arusekk this is the crash  -- You are receiving this because you were mentioned. Reply to this email directly or view it on GitHub: #1367 (comment)

[delmarocks]

@Arusekk this is the output continuing execution. What does it mean?

[Arusekk]

That's what I meant, but now please type bt to get the backtrace (you can even create a core dump, that would be the most helpful, but I don't remeber how was the command named)

[delmarocks]

@Arusekk this is the backtrace. Sorry im just a noob when it comes to this situation.

This is the core file 👈

[zachriggle]

Are you running pwntools from your phone? Neat!

…

On Thu, Nov 14, 2019 at 8:51 AM delmarocks ***@***.***> wrote: @Arusekk <https://github.com/Arusekk> this the backtrace. Sorry im just a noob when it comes to this situation. <https://camo.githubusercontent.com/c55531f99da80de33724c9d82781643bb6886440/68747470733a2f2f692e696d6775722e636f6d2f354c34393966652e706e67> — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#1367?email_source=notifications&email_token=AAA3IGAURH5RCKS2HIURZWLQTVQYVA5CNFSM4JM45OK2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEECCZVA#issuecomment-553921748>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAA3IGG4LJLXC6RRFUUM653QTVQYVANCNFSM4JM45OKQ> .

[delmarocks]

@zachriggle yes i am using termux. I wonder if pwntools can support android platforms as it is easy to to create exploits with pwntools while on the go😊😊

[delmarocks]

Here is the sample exploit i created for ROP

[delmarocks]

@Arusekk does pwntools support android platform?

[Arusekk]

While technically being a linux flavor, android is vastly different even when it comes to coreutils and such, so I don't know for sure. But a grand majority should work fine.

[delmarocks]

@Arusekk so what should i do base on the crash i sent to you to make this work on my device

[ghost]

@delmarocks you should try using Gcloud instead of Termux App because your device does not Support Pwntools 32bit Python & Your device Architechture....

[ghost]

[ghost]

[delmarocks]

@0xEscxtt how did you setup pwntools on gcloud?

[ghost]

@delmarocks how did you setup pwntools on gcloud?

pip2 install pwntools

[delmarocks]

@0xEscxtt is gcloud available as package in termux repo?

[ghost]

@delmarocks is gcloud available as package in termux repo?

yes same as Termux because Gcloud uses Debian OS same a Standard APT resources...

[ghost]

ask the Termux maintainer If you want to add Gcloud as a package toolkit via pkg...

[ghost]

@delmarocks take a Look at this
https://github.com/philips/termux

[delmarocks]

@0xEscxtt thanks I'll try this out

[Arusekk]

Closing this as I cannot reproduce, termux does not run on my ancient android. If you still have the issue, and manage to install debugging symbols (termux does not seem to have any, but here is a guide https://wiki.ubuntu.com/Debug_Symbol_Packages) or build python from source, and then post the output of something like:

gdb -ex r -ex bt --args python3 -c 'from pwn import*; ELF("./vuln")'