-
Notifications
You must be signed in to change notification settings - Fork 137
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Update to the latest libcdb builds (#177)
- Loading branch information
Showing
58 changed files
with
1,812 additions
and
1 deletion.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
46 changes: 46 additions & 0 deletions
46
lib/one_gadget/builds/libc-2.23-18f761287ed46e213bec29c2e440e73fd72373be.rb
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,46 @@ | ||
| require 'one_gadget/gadget' | ||
| # https://gitlab.com/david942j/libcdb/blob/master/libc/libc6_2.23-0ubuntu11.3_i386/lib/i386-linux-gnu/libc-2.23.so | ||
| # | ||
| # Intel 80386 | ||
| # | ||
| # GNU C Library (Ubuntu GLIBC 2.23-0ubuntu11.3) stable release version 2.23, by Roland McGrath et al. | ||
| # Copyright (C) 2016 Free Software Foundation, Inc. | ||
| # This is free software; see the source for copying conditions. | ||
| # There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A | ||
| # PARTICULAR PURPOSE. | ||
| # Compiled by GNU CC version 5.4.0 20160609. | ||
| # Available extensions: | ||
| # crypt add-on version 2.1 by Michael Glad and others | ||
| # GNU Libidn by Simon Josefsson | ||
| # Native POSIX Threads Library by Ulrich Drepper et al | ||
| # BIND-8.2.3-T5B | ||
| # libc ABIs: UNIQUE IFUNC | ||
| # For bug reporting instructions, please see: | ||
| # <https://bugs.launchpad.net/ubuntu/+source/glibc/+bugs>. | ||
|
|
||
| build_id = File.basename(__FILE__, '.rb').split('-').last | ||
| OneGadget::Gadget.add(build_id, 240748, | ||
| constraints: ["esi is the GOT address of libc", "[esp+0x28] == NULL"], | ||
| effect: "execve(\"/bin/sh\", esp+0x28, environ)") | ||
| OneGadget::Gadget.add(build_id, 240750, | ||
| constraints: ["esi is the GOT address of libc", "[esp+0x2c] == NULL"], | ||
| effect: "execve(\"/bin/sh\", esp+0x2c, environ)") | ||
| OneGadget::Gadget.add(build_id, 240754, | ||
| constraints: ["esi is the GOT address of libc", "[esp+0x30] == NULL"], | ||
| effect: "execve(\"/bin/sh\", esp+0x30, environ)") | ||
| OneGadget::Gadget.add(build_id, 240761, | ||
| constraints: ["esi is the GOT address of libc", "[esp+0x34] == NULL"], | ||
| effect: "execve(\"/bin/sh\", esp+0x34, environ)") | ||
| OneGadget::Gadget.add(build_id, 240796, | ||
| constraints: ["esi is the GOT address of libc", "[eax] == NULL || eax == NULL", "[[esp]] == NULL || [esp] == NULL"], | ||
| effect: "execve(\"/bin/sh\", eax, [esp])") | ||
| OneGadget::Gadget.add(build_id, 240797, | ||
| constraints: ["esi is the GOT address of libc", "[[esp]] == NULL || [esp] == NULL", "[[esp+0x4]] == NULL || [esp+0x4] == NULL"], | ||
| effect: "execve(\"/bin/sh\", [esp], [esp+0x4])") | ||
| OneGadget::Gadget.add(build_id, 392149, | ||
| constraints: ["esi is the GOT address of libc", "eax == NULL"], | ||
| effect: "execl(\"/bin/sh\", eax)") | ||
| OneGadget::Gadget.add(build_id, 392150, | ||
| constraints: ["esi is the GOT address of libc", "[esp] == NULL"], | ||
| effect: "execl(\"/bin/sh\", [esp])") | ||
|
|
46 changes: 46 additions & 0 deletions
46
lib/one_gadget/builds/libc-2.23-30773be8cf5bfed9d910c8473dd44eaab2e705ab.rb
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,46 @@ | ||
| require 'one_gadget/gadget' | ||
| # https://gitlab.com/david942j/libcdb/blob/master/libc/libc6_2.23-0ubuntu11.3_amd64/lib/x86_64-linux-gnu/libc-2.23.so | ||
| # | ||
| # Advanced Micro Devices X86-64 | ||
| # | ||
| # GNU C Library (Ubuntu GLIBC 2.23-0ubuntu11.3) stable release version 2.23, by Roland McGrath et al. | ||
| # Copyright (C) 2016 Free Software Foundation, Inc. | ||
| # This is free software; see the source for copying conditions. | ||
| # There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A | ||
| # PARTICULAR PURPOSE. | ||
| # Compiled by GNU CC version 5.4.0 20160609. | ||
| # Available extensions: | ||
| # crypt add-on version 2.1 by Michael Glad and others | ||
| # GNU Libidn by Simon Josefsson | ||
| # Native POSIX Threads Library by Ulrich Drepper et al | ||
| # BIND-8.2.3-T5B | ||
| # libc ABIs: UNIQUE IFUNC | ||
| # For bug reporting instructions, please see: | ||
| # <https://bugs.launchpad.net/ubuntu/+source/glibc/+bugs>. | ||
|
|
||
| build_id = File.basename(__FILE__, '.rb').split('-').last | ||
| OneGadget::Gadget.add(build_id, 283174, | ||
| constraints: ["rax == NULL"], | ||
| effect: "execve(\"/bin/sh\", rsp+0x30, environ)") | ||
| OneGadget::Gadget.add(build_id, 283258, | ||
| constraints: ["[rsp+0x30] == NULL"], | ||
| effect: "execve(\"/bin/sh\", rsp+0x30, environ)") | ||
| OneGadget::Gadget.add(build_id, 840051, | ||
| constraints: ["[rcx] == NULL || rcx == NULL", "[r12] == NULL || r12 == NULL"], | ||
| effect: "execve(\"/bin/sh\", rcx, r12)") | ||
| OneGadget::Gadget.add(build_id, 840264, | ||
| constraints: ["[rax] == NULL || rax == NULL", "[r12] == NULL || r12 == NULL"], | ||
| effect: "execve(\"/bin/sh\", rax, r12)") | ||
| OneGadget::Gadget.add(build_id, 983972, | ||
| constraints: ["[rsp+0x50] == NULL"], | ||
| effect: "execve(\"/bin/sh\", rsp+0x50, environ)") | ||
| OneGadget::Gadget.add(build_id, 983984, | ||
| constraints: ["[rsi] == NULL || rsi == NULL", "[[rax]] == NULL || [rax] == NULL"], | ||
| effect: "execve(\"/bin/sh\", rsi, [rax])") | ||
| OneGadget::Gadget.add(build_id, 987719, | ||
| constraints: ["[rsp+0x70] == NULL"], | ||
| effect: "execve(\"/bin/sh\", rsp+0x70, environ)") | ||
| OneGadget::Gadget.add(build_id, 1009648, | ||
| constraints: ["[rcx] == NULL || rcx == NULL", "[[rbp-0xf8]] == NULL || [rbp-0xf8] == NULL"], | ||
| effect: "execve(\"/bin/sh\", rcx, [rbp-0xf8])") | ||
|
|
46 changes: 46 additions & 0 deletions
46
lib/one_gadget/builds/libc-2.23-635101aec7213fdc442419bf65a92047a862ff32.rb
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,46 @@ | ||
| require 'one_gadget/gadget' | ||
| # https://gitlab.com/david942j/libcdb/blob/master/libc/libc6-i386_2.23-0ubuntu11.3_amd64/lib32/libc-2.23.so | ||
| # | ||
| # Intel 80386 | ||
| # | ||
| # GNU C Library (Ubuntu GLIBC 2.23-0ubuntu11.3) stable release version 2.23, by Roland McGrath et al. | ||
| # Copyright (C) 2016 Free Software Foundation, Inc. | ||
| # This is free software; see the source for copying conditions. | ||
| # There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A | ||
| # PARTICULAR PURPOSE. | ||
| # Compiled by GNU CC version 5.4.0 20160609. | ||
| # Available extensions: | ||
| # crypt add-on version 2.1 by Michael Glad and others | ||
| # GNU Libidn by Simon Josefsson | ||
| # Native POSIX Threads Library by Ulrich Drepper et al | ||
| # BIND-8.2.3-T5B | ||
| # libc ABIs: UNIQUE IFUNC | ||
| # For bug reporting instructions, please see: | ||
| # <https://bugs.launchpad.net/ubuntu/+source/glibc/+bugs>. | ||
|
|
||
| build_id = File.basename(__FILE__, '.rb').split('-').last | ||
| OneGadget::Gadget.add(build_id, 239644, | ||
| constraints: ["esi is the GOT address of libc", "[esp+0x28] == NULL"], | ||
| effect: "execve(\"/bin/sh\", esp+0x28, environ)") | ||
| OneGadget::Gadget.add(build_id, 239646, | ||
| constraints: ["esi is the GOT address of libc", "[esp+0x2c] == NULL"], | ||
| effect: "execve(\"/bin/sh\", esp+0x2c, environ)") | ||
| OneGadget::Gadget.add(build_id, 239650, | ||
| constraints: ["esi is the GOT address of libc", "[esp+0x30] == NULL"], | ||
| effect: "execve(\"/bin/sh\", esp+0x30, environ)") | ||
| OneGadget::Gadget.add(build_id, 239657, | ||
| constraints: ["esi is the GOT address of libc", "[esp+0x34] == NULL"], | ||
| effect: "execve(\"/bin/sh\", esp+0x34, environ)") | ||
| OneGadget::Gadget.add(build_id, 239692, | ||
| constraints: ["esi is the GOT address of libc", "[eax] == NULL || eax == NULL", "[[esp]] == NULL || [esp] == NULL"], | ||
| effect: "execve(\"/bin/sh\", eax, [esp])") | ||
| OneGadget::Gadget.add(build_id, 239693, | ||
| constraints: ["esi is the GOT address of libc", "[[esp]] == NULL || [esp] == NULL", "[[esp+0x4]] == NULL || [esp+0x4] == NULL"], | ||
| effect: "execve(\"/bin/sh\", [esp], [esp+0x4])") | ||
| OneGadget::Gadget.add(build_id, 389237, | ||
| constraints: ["esi is the GOT address of libc", "eax == NULL"], | ||
| effect: "execl(\"/bin/sh\", eax)") | ||
| OneGadget::Gadget.add(build_id, 389238, | ||
| constraints: ["esi is the GOT address of libc", "[esp] == NULL"], | ||
| effect: "execl(\"/bin/sh\", [esp])") | ||
|
|
43 changes: 43 additions & 0 deletions
43
lib/one_gadget/builds/libc-2.23-f2f2f2af4f3e8597cca1fdff1008a834c78de42b.rb
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,43 @@ | ||
| require 'one_gadget/gadget' | ||
| # https://gitlab.com/david942j/libcdb/blob/master/libc/libc6-amd64_2.23-0ubuntu11.3_i386/lib64/libc-2.23.so | ||
| # | ||
| # Advanced Micro Devices X86-64 | ||
| # | ||
| # GNU C Library (Ubuntu GLIBC 2.23-0ubuntu11.3) stable release version 2.23, by Roland McGrath et al. | ||
| # Copyright (C) 2016 Free Software Foundation, Inc. | ||
| # This is free software; see the source for copying conditions. | ||
| # There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A | ||
| # PARTICULAR PURPOSE. | ||
| # Compiled by GNU CC version 5.4.0 20160609. | ||
| # Available extensions: | ||
| # crypt add-on version 2.1 by Michael Glad and others | ||
| # GNU Libidn by Simon Josefsson | ||
| # Native POSIX Threads Library by Ulrich Drepper et al | ||
| # BIND-8.2.3-T5B | ||
| # libc ABIs: UNIQUE IFUNC | ||
| # For bug reporting instructions, please see: | ||
| # <https://bugs.launchpad.net/ubuntu/+source/glibc/+bugs>. | ||
|
|
||
| build_id = File.basename(__FILE__, '.rb').split('-').last | ||
| OneGadget::Gadget.add(build_id, 259286, | ||
| constraints: ["rax == NULL"], | ||
| effect: "execve(\"/bin/sh\", rsp+0x30, environ)") | ||
| OneGadget::Gadget.add(build_id, 259370, | ||
| constraints: ["[rsp+0x30] == NULL"], | ||
| effect: "execve(\"/bin/sh\", rsp+0x30, environ)") | ||
| OneGadget::Gadget.add(build_id, 753847, | ||
| constraints: ["[rsi] == NULL || rsi == NULL", "[r12] == NULL || r12 == NULL"], | ||
| effect: "execve(\"/bin/sh\", rsi, r12)") | ||
| OneGadget::Gadget.add(build_id, 754056, | ||
| constraints: ["[[rbp-0x40]] == NULL || [rbp-0x40] == NULL", "[r12] == NULL || r12 == NULL"], | ||
| effect: "execve(\"/bin/sh\", [rbp-0x40], r12)") | ||
| OneGadget::Gadget.add(build_id, 875271, | ||
| constraints: ["[rsp+0x70] == NULL"], | ||
| effect: "execve(\"/bin/sh\", rsp+0x70, environ)") | ||
| OneGadget::Gadget.add(build_id, 875283, | ||
| constraints: ["[rsi] == NULL || rsi == NULL", "[[rax]] == NULL || [rax] == NULL"], | ||
| effect: "execve(\"/bin/sh\", rsi, [rax])") | ||
| OneGadget::Gadget.add(build_id, 890033, | ||
| constraints: ["[r9] == NULL || r9 == NULL", "[rdx] == NULL || rdx == NULL"], | ||
| effect: "execve(\"/bin/sh\", r9, rdx)") | ||
|
|
Oops, something went wrong.