Benign Download

Exploit.Linux.Da2.b

Imports POSIX socket creation APINo RELRO (GOT writable after load)

SHA-256bbb1c74155b1149fe783e267f63d4290147c94d70322c079c0ddce5aed224f10

Evidence

Converts host to network short 0x338–0x478

⋯4 more rows
0x3786c6962632e736f2e36007072696e7466libc.so.6.printf
0x388007265637600636f6e6e656374007065.recv.connect.pe
0x39872726f72006d616c6c6f6300736f636brror.malloc.sock
0x3a865740073656e6400667072696e746600et.send.fprintf.
0x3b8696e65745f61646472006e746f686c00inet_addr.ntohl.
0x3c85f5f646572656769737465725f667261__deregister_fra
0x3d86d655f696e666f007374726e63707900me_info.strncpy.
0x3e86e746f6873007374646572720068746fntohs.stderr.hto
0x3f86e7300657869740061746f69005f494fns.exit.atoi._IO
0x4085f737464696e5f75736564005f5f6c69_stdin_used.__li
⋯7 more rows

English function-word token "the" 0xe30–0xef0

0xe3065730a00776f726e696e672061646472es..worning addr
0xe4065737320697320307825780a00000000ess is 0x%x.....
0xe5000000000000000000000000000000000................
0xe60746865204950206f6620796f75722070the IP of your p
0xe70726f6d707474656c6e65742068617320rompttelnet has 
0xe8061207a65726f20696e73696465206974a zero inside it
0xe902c0a7468697320697320756e61636365,.this is unacce
0xea0707461626c65206265636f7573652074ptable becouse t
⋯5 more rows

usage: label (lowercase) 0xff0–0x10f0

0xff0752e25752e25752e25750a00504f5254u.%u.%u.%u..PORT
0x10003a2025750a0000000000000000000000: %u............
0x101000000000000000000000000000000000................
0x102075736167653a092573203c76756c6e5fusage:.%s <vuln_
0x103049503e203c76756c6e5f504f52543e20IP> <vuln_PORT> 
⋯12 more rows

English function-word token "for" 0x112e–0x11be

0x112e3e0969732074686520504f5254207768>.is the PORT wh
0x113e6572652070726f6d707474656c6e6574ere prompttelnet
0x114e2077696c6c206c697374656e0a090909 will listen....
0x115e666f72206120636f6e6e656374696f6efor a connection
0x116e2066726f6d2076756c6e657261626c65 from vulnerable
⋯5 more rows