Comments (5)
Could you provide more information, such as what OS are you using, and the output of
$ file /usr/lib/libc.so.6
and $ file /lib/lib.so.6
It's possible that one_gadget may not work well (find less gadgets) on new glibc releases, I didn't test them after all.
from one_gadget.
I got Archlinux on my system.
$ file /usr/lib/libc.so.6
/usr/lib/libc.so.6: symbolic link to libc-2.33.so
$ file /usr/lib/libc-2.33.so
/usr/lib/libc-2.33.so: ELF 64-bit LSB shared object, x86-64, version 1 (GNU/Linux), dynamically linked, interpreter /usr/lib/ld-linux-x86-64.so.2, BuildID[sha1]=..., for GNU/Linux 4.4.0, not stripped
$ file /lib/libc.so.6
/lib/libc.so.6: symbolic link to libc-2.33.so
$ file /lib/libc-2.33.so
/lib/libc-2.33.so: ELF 64-bit LSB shared object, x86-64, version 1 (GNU/Linux), dynamically linked, interpreter /usr/lib/ld-linux-x86-64.so.2, BuildID[sha1]=..., for GNU/Linux 4.4.0, not stripped
both /lib/libc-2.33.so
and /usr/lib/libc-2.33.so
also show no gadgets found.
from one_gadget.
Sorry I don't have archlinux so it's appreciated if you can upload the binaries here
from one_gadget.
I don't know why he hid the hashes of the files which is the most useful information. Anyway, I have an arch-based distro and I confirmed that one_gadget
fails to find gadgets.
I took a quick look at the file and I must say that it is kind of weird. I couldn't find many gadgets and most are calling posix_spawn
. The address 0xCC566
looks like a potential oldschool gadget that uses execve
:
Here is the file:
libc-2.33.so.zip
from one_gadget.
@umutoztunc Thanks for your help!
For the posix_spawn I have filed #121 but don't have time to work on it currently.
And yap 0xcc566 seems to be a valid gadget that should be found, I can debug why it's not reported
from one_gadget.
Related Issues (20)
- Find one-gadgets in normal binaries HOT 3
- Failed to find some gadgets on glibc 2.31
- Consider the content of argv array as constraints HOT 1
- Consider posix_spawn as a gadget HOT 2
- Ruby 2.8 support
- Use Travis Windows and drop AppVeyor HOT 1
- GOT address of libc HOT 3
- Some gadgets are missing HOT 2
- Missing constraints on rbp
- one_gadget requires Ruby version >= 2.4. HOT 1
- No gadgets found on F34 x86_64 libc HOT 2
- Version 1.8.0 defaults to posix_spawn gadgets HOT 4
- jmp_case_candidates() "bad value for range" error HOT 3
- The filename that ends with a number might cause one_gadget to fail to find some gadgets for amd64
- Other architectures support HOT 3
- UnsupportedArchitectureError is raised if the system locale is non-english HOT 6
- Move code in bin/one_gadget to an independent module
- Add constraint for XMM alignment HOT 1
- Add offset feature . HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from one_gadget.